Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File:                     gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier:          EOtdEQLqhFAgBQk2M+16hYvWuCGjVl+7HejpM/ekOSA=
Subject key identifier:   17:FF:EA:6D:AA:8A:40:A0:45:29:B5:4F:26:94:C5:71:C5:AD:0F:99
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer:       /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial:       01A12B44D576B17524034F5A4A159349A5A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number:          1AA1
Signing time:             Sun 11 Oct 2026 14:01:33 +0000
Manifest this update:     Sun 11 Oct 2026 14:01:33 +0000
Manifest next update:     Mon 12 Oct 2026 14:01:33 +0000
Files and hashes:         1: 1-GJxYFfHhPUGldIW84G9cSjaROo.roa (hash: xnT7kV2Yd837mUQZhjujVXj3ng6jUmkGRRzKFJTHREg=)
                          2: 7QBS3aveMjEIt5V3oI4muIcCVe4.roa (hash: GsyoiBHqEicecqi/mcF/bo2NUxKmjfbUVwAMQEmmias=)
                          3: FcCot_n8byTOtYnTcT9gqTdXqgI.roa (hash: W7M2MGUSVVgsXq7kupYfdmxLZ/fDswJFwIWF+JWAWi0=)
                          4: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: rsfn4JVryreEq5H4PUtNpBRRlTVLgWMZTgvuBMrg3CU=)
                          5: jZxaU0gUqcmTgelMnTTUvkNfM7g.roa (hash: fm/mYWmhHVRNa3vFUylMM5LunZsCT8Akl9JuHlA1Fb8=)
                          6: lGhTp3LLyxy8beBvhY8lnM4Yjhs.roa (hash: /3CeCfqpeIvLkc9UntZNryGgsw4LpxUtcTdUNK/e4Hk=)
                          7: nmKKjuvrKpu6Q_V0_c5Z74FUduw.roa (hash: jrXk8p4lSqYPTjIdM+K2z4RnJA6RydCcUOEGFn8KQoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:d5:76:b1:75:24:03:4f:5a:4a:15:93:49:a5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
        Validity
            Not Before: Oct 11 14:01:33 2026 GMT
            Not After : Oct 12 14:01:33 2026 GMT
        Subject: CN=17ffea6daa8a40a04529b54f2694c571c5ad0f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:64:14:96:da:14:08:8f:16:50:4c:74:eb:
                    59:00:31:36:29:f0:0b:8c:3a:35:c3:55:f6:d9:9f:
                    0c:ca:ea:16:da:e5:64:d6:38:bd:52:73:31:a1:c4:
                    49:bc:11:ca:73:eb:15:d2:73:85:a3:f6:f6:2a:12:
                    ff:49:93:d9:a9:25:5a:7d:7c:1d:f1:da:79:9b:9c:
                    1e:9b:04:0e:51:d2:fe:16:d4:4f:7d:75:03:13:01:
                    81:c5:a1:fb:8e:61:bc:e5:05:96:c8:14:15:90:b5:
                    6f:f4:bf:48:53:e4:fb:28:3a:bf:80:75:4c:81:1c:
                    2a:3f:a5:07:27:4e:3b:c6:96:ac:d9:94:7f:c2:4f:
                    fe:2f:83:b5:37:48:d6:23:19:28:5b:b0:d4:ba:42:
                    db:2f:1e:d7:d3:b4:cc:08:eb:ae:e9:00:0d:e6:e9:
                    33:0e:4d:f6:99:0d:a0:4b:0f:8a:06:0b:8f:a4:37:
                    dd:94:05:1b:2d:15:be:c1:42:ec:5b:7c:3e:6a:ab:
                    4a:08:27:60:ec:9e:fd:0d:cb:6f:ac:41:74:ff:11:
                    ba:b4:e1:63:ed:19:dc:32:8e:82:d0:b9:53:40:52:
                    64:d6:02:33:9c:db:fe:8a:f3:71:b5:81:f5:65:57:
                    1a:39:9a:28:45:fc:c4:ff:48:7a:96:5c:00:a8:27:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:EA:6D:AA:8A:40:A0:45:29:B5:4F:26:94:C5:71:C5:AD:0F:99
            X509v3 Authority Key Identifier:
                keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a4:dd:eb:db:88:6f:47:97:75:58:8d:19:47:65:68:c3:c5:
         6e:32:c2:43:49:06:49:fa:ac:ad:8c:ee:4d:04:96:fa:24:46:
         a1:13:86:91:80:e9:25:3d:2d:05:d5:03:5d:59:7d:da:61:ee:
         b0:43:91:2a:12:a2:07:dd:f4:40:f7:7a:f1:f0:17:6c:7b:62:
         8a:b5:1a:0a:37:60:ef:5c:64:9b:f7:db:01:ba:ef:25:ca:4d:
         4a:ec:ba:ee:66:66:39:9b:28:73:1d:89:11:6c:fe:0f:66:60:
         54:f0:2b:b5:5f:69:17:d2:d3:13:ef:59:6b:aa:4d:9a:5e:85:
         da:82:26:ae:d1:86:8d:65:02:59:bf:94:e6:35:31:cf:2c:82:
         a4:c3:86:ab:f0:f0:d2:ab:6b:bf:31:cd:f8:ab:ed:71:08:87:
         89:ab:88:86:2c:b6:85:ca:a5:aa:0b:45:04:e4:fc:bd:bb:86:
         57:2f:b3:68:dd:e6:5a:5f:5b:9b:54:85:38:de:33:60:c8:c8:
         6f:36:45:3d:01:80:e2:32:77:d4:f2:4e:74:16:30:81:aa:c9:
         32:23:ab:fd:ba:90:22:87:d2:d8:b5:dc:66:b5:f0:c2:83:1e:
         42:86:1f:b4:66:18:76:ac:fe:f1:1b:92:ae:f9:eb:cf:6d:74:
         d5:54:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:05:09 2026 by rpki-client