Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File:                     gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier:          +H6+W7qBwejG5kvDndSyaDwvORZwO06Bo19HnDGrOdA=
Subject key identifier:   6D:4D:D8:16:2B:2C:63:55:BA:4A:7F:C3:10:0A:63:22:FF:DD:4C:C4
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer:       /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial:       01A19AD8E0F4F7EA32872F4D20E8C580FADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number:          1524
Signing time:             Mon 02 Nov 2026 06:01:06 +0000
Manifest this update:     Mon 02 Nov 2026 06:01:06 +0000
Manifest next update:     Tue 03 Nov 2026 06:01:06 +0000
Files and hashes:         1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
                          2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
                          3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: l0OjMibo+m+D/HsV3g7o4uaspHdc8Bop8D9YtELsXro=)
                          4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9a:d8:e0:f4:f7:ea:32:87:2f:4d:20:e8:c5:80:fa:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
        Validity
            Not Before: Nov  2 06:01:06 2026 GMT
            Not After : Nov  3 06:01:06 2026 GMT
        Subject: CN=6d4dd8162b2c6355ba4a7fc3100a6322ffdd4cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:5c:4b:ed:c0:47:5b:b9:4c:44:11:87:05:
                    5f:b0:6a:21:69:fb:ef:e1:12:f5:3c:f9:f5:f3:8b:
                    aa:31:5a:e1:cd:b0:c4:d4:23:b1:a8:55:4b:ed:6f:
                    97:42:d7:3c:25:16:11:fe:21:75:97:bb:f4:1e:99:
                    63:f6:0f:2f:0f:ff:93:bd:a0:ae:d0:f7:74:65:df:
                    95:a5:f4:0f:f4:84:c8:8e:f5:5a:84:b4:97:a1:8b:
                    c9:e3:bf:6f:8c:69:de:28:e7:e9:3c:64:be:0a:fb:
                    8b:5a:60:de:dd:dd:36:87:20:2e:21:7f:4b:d3:1e:
                    e4:a2:49:2f:f4:a0:d6:1d:72:29:88:82:91:f0:f5:
                    b5:db:9a:ab:78:1e:46:1d:5b:31:e2:af:8f:c0:91:
                    70:7c:ea:58:e7:00:3f:6b:92:80:eb:f4:2d:d2:64:
                    24:f2:67:73:2a:2f:da:b8:54:cd:1e:fe:b1:23:96:
                    0a:2d:73:34:60:eb:50:9e:46:77:37:db:65:a5:c5:
                    2b:f2:5c:96:0c:a8:c2:13:6f:04:55:52:92:f9:3b:
                    b9:37:60:f3:b7:42:39:4c:61:de:09:c7:cd:62:df:
                    d3:80:4e:44:df:9b:aa:6d:de:6d:f2:57:a8:72:ce:
                    c6:49:70:6f:e5:7f:94:e1:44:b4:c0:30:0a:1e:46:
                    84:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4D:D8:16:2B:2C:63:55:BA:4A:7F:C3:10:0A:63:22:FF:DD:4C:C4
            X509v3 Authority Key Identifier:
                keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:6f:07:93:86:11:b5:9a:71:e3:4c:d1:9f:5f:0b:54:37:
         87:a2:21:0f:a5:0c:d4:5d:0d:7c:aa:a2:8b:2d:33:b2:7b:3b:
         38:4c:99:e8:59:2e:8b:60:9c:e7:0f:45:34:50:89:f0:9d:ac:
         95:b7:ea:0c:95:08:31:41:83:32:42:08:08:ab:f0:c0:e7:d9:
         14:1d:e4:d6:94:2a:e0:af:37:51:63:9f:82:a7:d0:5c:45:70:
         d7:71:a9:9c:97:b3:1f:85:83:0a:71:be:66:4e:ad:76:6f:54:
         03:77:c0:31:a3:cb:be:74:0b:4d:1f:7e:74:9e:8c:aa:b0:df:
         91:0e:aa:1c:52:f1:d0:0e:06:a0:58:8b:1b:eb:e8:98:fa:1a:
         e8:29:72:c2:75:49:28:8c:3f:e0:2b:4c:5a:35:ef:4a:47:ed:
         6b:f8:d4:21:31:81:69:8a:b2:c5:1b:77:fc:64:e9:de:32:b5:
         a5:2f:e8:13:be:e5:7e:04:f9:be:4c:8c:45:18:67:df:18:db:
         d8:bd:9a:5b:12:c2:27:dd:89:38:38:62:ed:93:ed:f6:0c:0d:
         92:0b:c7:3a:7a:4b:8a:d5:85:14:1b:89:a2:a9:07:e2:23:20:
         65:73:b1:ae:dc:76:c7:74:5c:ca:3d:16:73:c3:ca:95:e3:63:
         59:3b:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 11:12:25 2026 by rpki-client