Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File:                     gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier:          fWLSU4DshDu/XAWFjL5fvxwHuU5cyGiQb9fzfe36oZI=
Subject key identifier:   71:92:54:53:56:F2:D7:F0:5C:CD:9B:92:4C:FE:B4:D7:28:47:59:43
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer:       /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial:       01A03FA93A4B2FE34385268EB54BC46479CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number:          1A27
Signing time:             Wed 26 Aug 2026 20:00:50 +0000
Manifest this update:     Wed 26 Aug 2026 20:00:50 +0000
Manifest next update:     Thu 27 Aug 2026 20:00:50 +0000
Files and hashes:         1: 1-GJxYFfHhPUGldIW84G9cSjaROo.roa (hash: xnT7kV2Yd837mUQZhjujVXj3ng6jUmkGRRzKFJTHREg=)
                          2: 7QBS3aveMjEIt5V3oI4muIcCVe4.roa (hash: GsyoiBHqEicecqi/mcF/bo2NUxKmjfbUVwAMQEmmias=)
                          3: FcCot_n8byTOtYnTcT9gqTdXqgI.roa (hash: W7M2MGUSVVgsXq7kupYfdmxLZ/fDswJFwIWF+JWAWi0=)
                          4: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: 1HOI2vHbDMi7dY6WkGQXCtxoYpoeQL26Vz3JvK5qEcQ=)
                          5: jZxaU0gUqcmTgelMnTTUvkNfM7g.roa (hash: fm/mYWmhHVRNa3vFUylMM5LunZsCT8Akl9JuHlA1Fb8=)
                          6: lGhTp3LLyxy8beBvhY8lnM4Yjhs.roa (hash: /3CeCfqpeIvLkc9UntZNryGgsw4LpxUtcTdUNK/e4Hk=)
                          7: nmKKjuvrKpu6Q_V0_c5Z74FUduw.roa (hash: jrXk8p4lSqYPTjIdM+K2z4RnJA6RydCcUOEGFn8KQoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:a9:3a:4b:2f:e3:43:85:26:8e:b5:4b:c4:64:79:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
        Validity
            Not Before: Aug 26 20:00:50 2026 GMT
            Not After : Aug 27 20:00:50 2026 GMT
        Subject: CN=7192545356f2d7f05ccd9b924cfeb4d728475943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:d6:f0:68:0b:4d:a9:78:99:de:f4:8b:d3:
                    b3:a1:40:92:7b:39:35:fb:8c:3e:5f:ff:ac:19:cf:
                    ac:40:5b:5b:ba:82:5f:9b:c5:74:4b:a3:b9:be:e1:
                    df:80:72:55:ff:d7:ba:ab:97:1f:5f:01:83:1e:e8:
                    cc:38:00:08:3d:51:08:d0:88:31:01:1d:e3:f9:3a:
                    4c:22:fc:a5:c7:be:a0:81:fe:37:f1:2b:11:33:d8:
                    df:10:c1:6e:24:3b:e7:e5:86:18:f7:89:8e:6a:89:
                    09:ff:40:8c:5e:fd:7c:bb:32:29:80:25:5a:b8:99:
                    20:98:ff:62:b3:13:83:c9:cd:fe:eb:1f:4b:1d:57:
                    b0:01:88:45:f8:03:96:6f:92:bb:d8:44:4b:f8:6c:
                    f7:84:98:7c:a6:fd:04:91:19:a8:6d:e9:ff:a5:57:
                    7e:0d:a8:ad:36:a3:55:3c:f2:15:87:16:bb:1d:20:
                    ac:28:20:10:de:5a:61:74:39:40:63:66:f1:56:5f:
                    a0:96:47:4d:7c:37:47:47:e7:24:79:5e:85:e8:63:
                    ae:79:ab:70:af:49:c0:0f:13:ca:6a:85:d3:e3:c1:
                    46:ee:a0:5a:ed:0d:09:2e:66:5a:84:b4:c1:e4:0e:
                    2b:20:b5:be:32:04:48:23:2c:ec:45:fe:4e:a7:14:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:54:53:56:F2:D7:F0:5C:CD:9B:92:4C:FE:B4:D7:28:47:59:43
            X509v3 Authority Key Identifier:
                keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:4d:30:24:e9:17:5a:86:15:80:bc:a8:03:6e:a3:0b:0d:
         1a:de:54:bc:78:14:56:d8:f0:51:61:1a:12:f0:5a:a3:06:14:
         e0:d1:d8:8f:0f:b5:51:ff:3d:cc:b0:32:06:24:6c:74:f5:6e:
         6f:48:c4:2a:96:89:ec:21:ac:e4:3a:a0:13:8e:82:65:33:03:
         23:7f:f0:a0:8d:96:04:ad:74:99:5a:96:d7:8f:55:bc:c2:d2:
         f3:07:f7:67:98:0c:51:d2:9e:0f:ee:56:c9:ca:14:d7:09:68:
         aa:b6:5b:aa:41:dd:d8:49:66:45:24:c2:a4:61:2c:6b:4a:b4:
         b2:a1:ff:b1:a8:3d:5c:cf:4d:db:9d:c2:74:b3:47:d9:7b:06:
         0d:56:c1:ca:78:a7:52:d6:d8:7c:a5:87:82:3d:d6:4b:7e:d6:
         54:dd:db:f5:66:ae:60:bd:85:04:f9:5a:16:7e:5a:1b:66:04:
         0c:8d:27:26:47:de:6c:7f:29:f0:f3:31:76:e9:c2:c0:fe:7f:
         0a:cd:0d:5a:71:e4:6e:84:67:83:25:a1:d5:54:5c:19:a3:30:
         33:00:95:84:c6:ca:81:88:49:fd:7a:33:7a:b2:39:66:1c:69:
         92:a1:09:38:cb:1c:0b:cd:6e:e2:0e:3a:2d:32:b9:5e:45:8a:
         9b:36:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:03:38 2026 by rpki-client