Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          gKpxOQYrKiVUeGCmTEQMTBjmiqwRkjq9Kf9BSDUwOU8=
Subject key identifier:   04:99:99:C4:42:47:CF:8D:A8:1B:5F:FD:5F:F7:70:A2:6D:69:A8:F3
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       01A08AC3386E12442D7B780DA2D710C4E3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          16CA
Signing time:             Thu 10 Sep 2026 10:00:44 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:44 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:44 +0000
Files and hashes:         1: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: KbNlriXdPfHzdejOobs1kEe8RNkPdjA1ou+f5Asjemg=)
                          2: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (hash: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc=)
                          3: bonvg5XaBQcMsNMwCdMc5lDAhv0.roa (hash: ZSoRPjPH88M9xek3/eVzci4XvPHF1Itjvf+UZyNuK0s=)
                          4: h-e8ELzqBHgqs0gO88cD6j4kiUw.roa (hash: IFfM4s3xZcomvpllzauBa/HUt3f3fExXfJyGi7VQ3a0=)
                          5: tgxCEeVuZ-EDQmEz7GRXe-l5ETE.roa (hash: LUh2uL8YOcgSTcCxK3/07PSsvLuQW83QgTZqddE2hIU=)
                          6: y8107xFwU5xNTZHiPZVC-6uA80E.roa (hash: VzBljyrPOFT8EeSOV+zQI6XF+CUR92IpElZIDzHyEnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:38:6e:12:44:2d:7b:78:0d:a2:d7:10:c4:e3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Sep 10 10:00:44 2026 GMT
            Not After : Sep 11 10:00:44 2026 GMT
        Subject: CN=049999c44247cf8da81b5ffd5ff770a26d69a8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:f9:48:c1:90:4b:5e:07:4f:4b:92:57:fe:
                    08:e3:64:f3:80:06:75:bf:9c:e6:bc:7c:7f:72:28:
                    1d:3c:16:a7:e7:67:81:32:91:50:8e:ce:5a:57:01:
                    b7:41:58:76:07:8f:78:e8:53:51:1b:e3:39:09:8d:
                    8d:8c:37:94:25:dd:e8:cc:0d:40:2a:8c:f3:a2:26:
                    7a:07:e9:ca:1f:8b:fe:7b:bc:7e:22:d9:9b:29:82:
                    98:97:e5:27:01:58:3d:11:38:f5:08:0a:a6:90:0c:
                    aa:0f:da:7f:31:63:30:85:0b:27:01:69:a6:fd:17:
                    71:66:a1:13:0e:68:e4:f2:c6:03:bd:ce:98:ae:d7:
                    40:75:98:44:ff:15:06:10:06:3c:c7:0d:5e:e4:06:
                    e1:1e:52:16:67:35:e2:a0:20:07:db:62:6e:91:5d:
                    a8:bf:44:6c:45:9c:f1:32:15:11:9d:d4:a2:54:eb:
                    2c:c5:b0:8d:ac:5d:9d:67:65:6d:ec:30:59:9a:99:
                    8a:e0:a2:8a:94:0d:55:6b:65:c2:18:32:a9:1b:e8:
                    d6:78:d9:0c:2f:0f:67:b4:30:0b:e3:cb:77:6c:a4:
                    f9:7f:d6:a0:51:2f:22:c3:8c:fa:d6:58:bb:d6:d7:
                    97:d6:67:c3:1b:77:b2:3b:00:9f:1c:0a:68:8c:d3:
                    9a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:99:99:C4:42:47:CF:8D:A8:1B:5F:FD:5F:F7:70:A2:6D:69:A8:F3
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:f1:2f:e6:9e:b6:c7:cc:ab:7d:cf:36:0f:33:95:bc:db:
         3c:c3:6b:d2:d8:da:8e:39:fb:73:44:f0:0c:9c:80:fd:91:29:
         65:34:e1:c4:52:05:11:b1:67:68:70:11:e9:25:a5:fd:8f:c3:
         32:7f:aa:e7:b3:43:65:0c:8d:3e:62:60:06:a7:b8:57:a8:11:
         f6:5c:2e:2b:fd:82:ef:82:01:a3:f5:a8:1f:ae:93:b6:b5:27:
         3f:aa:91:84:a3:fa:94:33:fc:7e:e2:b7:12:42:5c:0a:70:ff:
         ae:a2:9c:53:82:a7:0c:05:43:9b:42:02:97:8f:d7:9f:89:a4:
         19:3f:2b:ae:be:dc:54:77:fc:8a:3e:8d:67:33:7a:6f:4b:86:
         6e:d3:ee:5e:b2:19:c9:f8:59:75:de:17:7b:b3:84:ec:b1:d3:
         5f:1c:a2:d2:1a:68:fd:98:5b:f6:45:5c:4e:78:cb:7e:f8:98:
         a2:0b:2c:23:b5:3f:66:49:e7:fb:08:af:78:7a:cf:24:e5:e7:
         70:4c:7e:4f:05:9c:ac:d8:15:ff:f1:82:0d:00:ff:51:be:aa:
         c6:fa:ce:75:ec:61:03:46:32:78:3a:ab:5b:ef:15:f7:a0:5c:
         35:3e:a1:b2:43:5c:87:fc:83:e3:fa:25:88:74:5c:37:3c:99:
         91:e7:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:26 2026 by rpki-client