Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
File:                     gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft (raw, json)
Hash identifier:          2NOFPbxWRHUhSa1CyG2YR0RcxJkCkbnFjrbuKdfUUfs=
Subject key identifier:   6C:22:C2:7B:CA:45:18:66:0D:2C:5A:7F:7B:00:AC:E4:19:0C:0F:39
Authority key identifier: 83:1A:9A:5C:62:7E:9C:EB:F6:C6:BB:D1:AB:22:93:6C:6F:AE:01:7E
Certificate issuer:       /CN=831a9a5c627e9cebf6c6bbd1ab22936c6fae017e
Certificate serial:       01A1250C34FA7F6D6746DC33F7DA5D910370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
Manifest number:          0111
Signing time:             Sat 10 Oct 2026 09:01:59 +0000
Manifest this update:     Sat 10 Oct 2026 09:01:59 +0000
Manifest next update:     Sun 11 Oct 2026 09:01:59 +0000
Files and hashes:         1: gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl (hash: pjkOMXoWJHspgAujzcEkLqsOSQ/odSYHOJqf2PQuXXM=)
                          2: v5Q8h0Frf_fkKX96wbZrroiiUgw.roa (hash: xazWsb2KBZG8oZXdC4uirJOWCgIYpdumcjOq7MINQ1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 09:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0c:34:fa:7f:6d:67:46:dc:33:f7:da:5d:91:03:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=831a9a5c627e9cebf6c6bbd1ab22936c6fae017e
        Validity
            Not Before: Oct 10 09:01:59 2026 GMT
            Not After : Oct 11 09:01:59 2026 GMT
        Subject: CN=6c22c27bca4518660d2c5a7f7b00ace4190c0f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:89:b0:8d:c3:7a:81:79:19:b9:0e:ee:19:
                    6d:ab:c7:49:39:d5:bc:a3:4d:7d:9b:63:fb:61:a1:
                    0f:c6:01:35:96:89:26:a1:18:a4:3b:01:df:1d:b9:
                    5f:9d:13:53:03:0b:cd:7c:98:09:b2:69:07:56:98:
                    f5:d6:0e:20:97:59:9d:7e:f7:31:66:d2:7e:de:94:
                    e9:bf:f6:63:2c:4c:ab:4b:03:bd:48:8e:34:45:fa:
                    ad:18:4e:a4:d2:c2:f9:55:84:48:2e:4c:16:39:19:
                    57:26:b3:3f:0f:c4:a3:18:eb:b7:ef:15:21:e1:a3:
                    59:20:d3:63:95:b9:a3:c7:63:5c:12:95:56:ba:33:
                    0a:45:a5:4b:6c:03:da:4e:08:ab:94:67:13:95:63:
                    4f:af:3f:63:8b:c0:f3:fe:fe:b8:d4:52:6c:95:d3:
                    1e:46:72:36:10:c4:d1:7c:e5:ab:57:42:26:cc:6f:
                    62:14:e1:78:f3:b6:29:c0:22:f3:1a:02:9e:fb:4a:
                    df:30:0f:c0:d8:76:55:54:e3:1c:e1:a1:92:60:a5:
                    ea:3c:55:02:57:67:34:51:fb:06:29:1d:f0:2d:5a:
                    f8:3e:40:12:b2:a3:50:d4:30:04:06:af:b0:9e:2e:
                    7f:de:90:9c:7d:66:9f:ab:39:85:27:e6:62:63:5c:
                    4b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:C2:7B:CA:45:18:66:0D:2C:5A:7F:7B:00:AC:E4:19:0C:0F:39
            X509v3 Authority Key Identifier:
                keyid:83:1A:9A:5C:62:7E:9C:EB:F6:C6:BB:D1:AB:22:93:6C:6F:AE:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:1c:22:6d:8a:82:b3:81:b4:a3:c7:41:9a:43:ba:be:94:
         7b:d0:f3:aa:dc:3d:7a:8c:c8:ac:37:4b:aa:13:e3:22:09:21:
         92:19:4d:a8:3e:54:23:b6:46:11:a4:b5:ce:8d:32:ff:08:26:
         be:59:f6:0b:6d:35:c3:48:2c:90:17:89:38:d1:56:c8:f0:32:
         a4:1e:03:e1:f8:15:ed:d6:96:cf:41:01:2a:ef:6f:27:67:70:
         1a:36:2a:a1:cb:fc:0e:f8:d9:33:22:ea:4e:70:aa:af:87:9d:
         02:a0:f8:46:15:29:72:d9:dd:35:cc:bf:36:71:e1:d3:e6:92:
         46:b3:90:66:8c:c0:a2:89:84:f5:cf:62:1b:9e:d2:8c:2b:ad:
         f0:ea:76:27:1f:62:88:1d:37:e3:ad:9e:ad:89:66:f3:99:37:
         68:54:72:49:8c:d1:8d:f0:3c:38:16:63:73:83:a9:6e:7e:ec:
         65:69:45:8a:5e:7b:8d:1a:a2:fd:9b:37:97:71:5b:f3:32:66:
         00:c8:64:90:ac:e1:32:46:35:d1:9b:4c:3b:94:f8:a2:cc:d6:
         41:4b:07:4b:b5:04:cc:60:cc:c4:bc:ef:68:d8:a5:c8:b2:8d:
         c3:22:64:09:87:e8:b1:d9:7f:ca:9a:e7:4b:ab:82:8e:7c:eb:
         6e:82:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:25:48 2026 by rpki-client