Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File:                     G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier:          W94NNTJJj+O56CdpAzpeif2TrF5/qPotSpr0GTNCKYI=
Subject key identifier:   8C:35:06:C5:1A:ED:BF:7E:2F:CE:58:CC:12:D5:4B:7B:51:C6:57:32
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer:       /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial:       01A11373213CBB196CEC6B89E66AAAA53046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number:          0544
Signing time:             Tue 06 Oct 2026 23:01:14 +0000
Manifest this update:     Tue 06 Oct 2026 23:01:14 +0000
Manifest next update:     Wed 07 Oct 2026 23:01:14 +0000
Files and hashes:         1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: VJs/0ryzn1+oiNPCsr5Q04dk+CNpTfBQ/xPcj5oADP8=)
                          2: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (hash: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg=)
                          3: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (hash: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg=)
                          4: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (hash: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:73:21:3c:bb:19:6c:ec:6b:89:e6:6a:aa:a5:30:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
        Validity
            Not Before: Oct  6 23:01:14 2026 GMT
            Not After : Oct  7 23:01:14 2026 GMT
        Subject: CN=8c3506c51aedbf7e2fce58cc12d54b7b51c65732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:8b:17:c7:16:6d:68:47:d1:79:ca:02:1c:
                    c1:de:54:6d:31:35:06:93:e2:b4:65:33:1e:54:2b:
                    65:d4:b9:53:77:a5:44:f1:2b:81:a4:88:1c:25:99:
                    f4:99:8b:0a:25:70:46:8f:b1:21:d0:8c:af:7d:f9:
                    64:df:1b:1f:67:17:4b:f2:47:4f:b1:f2:13:bf:1f:
                    0e:2f:88:93:b5:c0:9a:90:70:56:b0:66:33:09:69:
                    9b:cd:aa:46:b5:9a:49:92:cb:90:1c:a4:ed:7d:7f:
                    28:c0:97:61:c7:bd:bd:d3:fd:b0:64:58:4e:10:31:
                    71:09:cd:ae:47:8c:e4:56:82:ed:1a:6e:59:d4:5a:
                    82:08:e4:11:07:79:77:ed:36:c7:80:97:70:e0:7b:
                    ee:98:4d:08:80:a2:61:30:d2:54:8f:72:72:83:1d:
                    f0:12:97:4e:e4:e9:dc:dd:73:37:43:f0:f6:d5:cd:
                    cd:1e:71:60:fb:0d:a5:fb:9e:3c:c8:ba:f5:54:8a:
                    1f:f5:c1:49:4f:c4:2c:64:2e:30:b4:d4:37:50:e1:
                    27:35:81:9c:c2:79:73:da:10:a6:db:9a:14:15:82:
                    e6:38:cd:16:03:1a:8f:46:f7:2b:de:30:8a:89:94:
                    9e:b9:ca:41:1d:13:4d:e2:cc:6a:9d:52:1b:93:60:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:06:C5:1A:ED:BF:7E:2F:CE:58:CC:12:D5:4B:7B:51:C6:57:32
            X509v3 Authority Key Identifier:
                keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3b:46:9c:65:6d:12:cd:66:7a:3f:e6:02:dc:9f:10:07:c2:
         bc:b1:06:00:5c:04:7c:d7:68:98:6e:74:3b:19:ec:1f:4d:3b:
         6e:92:10:80:69:0f:e3:6b:13:8d:df:3f:c3:f9:20:c7:e8:6b:
         bc:b6:dc:7a:53:6c:4d:e0:89:5a:bf:fe:29:71:0a:0e:15:f7:
         f7:7a:60:5a:a3:d4:31:a2:6e:0c:49:85:4c:9d:e0:43:63:29:
         85:cd:eb:2a:1b:94:d5:99:27:c2:6f:92:c2:47:84:e6:a9:ca:
         e2:56:ca:e5:a1:98:3b:48:3e:43:a2:42:01:23:73:e0:6e:b0:
         2d:22:d3:8b:7b:c7:0c:44:16:f0:36:d2:18:c7:3e:a3:ed:e1:
         f3:92:ab:68:4b:ba:96:47:89:98:01:b1:3d:ba:ae:92:0e:ef:
         1d:84:63:3e:70:de:3e:77:05:c4:59:8d:11:85:02:df:7e:e9:
         11:5e:5c:ca:30:fd:4d:69:aa:80:02:49:a7:bb:69:9c:d5:a6:
         c0:91:76:c1:35:61:75:9b:14:2e:96:34:38:64:00:c3:58:db:
         b7:d3:e3:5e:11:2d:41:13:9f:55:3c:0a:db:76:97:1c:95:f1:
         79:65:ed:2e:55:f4:b4:36:7f:85:69:fe:71:6a:68:fa:97:09:
         81:e1:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:52:53 2026 by rpki-client