Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File:                     G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier:          sz3A8CcSbBr+KBlYGPaebZ+8VCWuqYZkhOfBD3J87ZI=
Subject key identifier:   5C:48:CE:00:35:64:3E:E4:1A:A3:C6:77:D0:39:38:3D:F2:BF:69:8C
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer:       /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial:       01A188D2148EEA6F7CF84B90C89E833BB93A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number:          0CF7
Signing time:             Thu 29 Oct 2026 18:00:31 +0000
Manifest this update:     Thu 29 Oct 2026 18:00:31 +0000
Manifest next update:     Fri 30 Oct 2026 18:00:31 +0000
Files and hashes:         1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: XLU880eT5Z4jnwvK7T9uEfV8nh72ZvKF+KF77ZOYFMM=)
                          2: tjiTHEP-kK7YvaF4jOv_5AENFR8.roa (hash: +t1GaH9nJ8B0HL8q2iIaAV18s/F2KC1qzK08FxWPKP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:88:d2:14:8e:ea:6f:7c:f8:4b:90:c8:9e:83:3b:b9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
        Validity
            Not Before: Oct 29 18:00:31 2026 GMT
            Not After : Oct 30 18:00:31 2026 GMT
        Subject: CN=5c48ce0035643ee41aa3c677d039383df2bf698c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:d0:37:0b:53:34:ff:18:06:da:3a:29:ab:
                    5b:ae:c1:03:32:87:d5:95:2e:f7:2b:49:69:8e:65:
                    22:ef:46:61:ce:01:8f:84:88:e0:87:f9:00:07:ba:
                    6c:d3:eb:95:ea:e6:0d:59:94:4c:a7:4d:ef:5a:ce:
                    7c:71:91:c8:ac:07:03:28:f6:2c:7e:b3:20:22:33:
                    e1:2b:a2:30:b4:6e:07:3e:7e:1a:67:8e:02:8d:bc:
                    2b:04:25:0d:9b:67:b5:f7:d3:41:b5:72:48:0b:e7:
                    52:0e:77:c7:d3:e7:1e:24:aa:b0:6b:ef:81:06:9b:
                    d1:f9:b7:85:5a:b6:d6:ca:16:f3:69:4c:3a:af:69:
                    8d:06:9e:e4:aa:9b:4e:cc:64:e9:2b:3c:db:21:46:
                    b8:5d:94:19:51:e3:b2:a0:2e:8f:81:e4:59:a9:1d:
                    28:aa:b4:e5:12:02:4a:1d:87:43:41:5b:b3:e0:c4:
                    95:f7:61:9a:63:f9:08:72:99:29:25:81:ea:e0:26:
                    cc:d0:c1:f3:96:b0:df:8d:48:30:dd:1f:1b:17:1e:
                    7d:ea:b7:cc:e1:3f:46:00:1f:ed:d4:d8:d8:e7:1d:
                    4b:c4:9a:6d:82:81:25:6a:35:38:fb:b0:a2:2d:f8:
                    2c:ef:94:b6:44:c5:a5:cb:3e:d2:20:c7:36:77:1e:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:48:CE:00:35:64:3E:E4:1A:A3:C6:77:D0:39:38:3D:F2:BF:69:8C
            X509v3 Authority Key Identifier:
                keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:29:de:0d:e1:c2:f3:1e:04:8a:c4:d7:be:48:59:47:7b:
         ab:f5:50:3f:d7:87:5c:23:fb:7c:3f:3e:54:04:5a:72:4e:d9:
         61:39:52:fa:94:4a:81:d9:9c:b4:78:cb:10:cb:d4:ac:1d:62:
         46:0a:f4:0e:07:2b:46:03:7a:9d:2d:17:fc:5f:14:3b:5b:8c:
         7c:27:b3:0a:f6:90:23:b3:d7:1c:ca:8b:70:c9:24:a0:db:8b:
         99:8a:25:ce:bf:bf:e9:6e:8f:93:07:d4:3e:2f:e9:98:c3:37:
         78:20:69:20:74:78:ff:53:49:8b:6a:cf:66:c3:95:e3:7c:55:
         12:de:fa:06:c3:b7:66:ec:cd:d1:20:59:4c:03:9f:20:c8:62:
         2a:6b:54:98:43:30:fe:79:82:2c:ab:50:9f:5a:59:32:2a:66:
         34:a2:53:4e:fd:e8:43:fe:20:3b:06:0b:44:3e:cb:23:43:62:
         d5:bb:53:d6:44:47:23:e5:c7:e1:2a:73:79:0f:a6:ac:fc:25:
         08:ae:83:c0:c4:d2:83:a3:4c:19:dc:15:17:1d:e4:94:e7:d2:
         57:b0:6c:cb:56:46:63:f7:2c:73:a5:dc:53:d2:91:55:cd:a0:
         3f:ba:b9:be:13:13:77:1a:1a:7e:bb:14:a6:a2:5d:06:a6:27:
         c3:e7:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:48:03 2026 by rpki-client