Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File:                     Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier:          fMSLy5jZn7d2WdEbOla1VV43mbSQBdlcBTHQ0bP8NAM=
Subject key identifier:   5A:70:06:DB:3C:8C:FF:7C:B4:6C:AD:C4:9B:A3:ED:5A:28:8A:4B:27
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer:       /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial:       01A156D3BE83365E50506B82507F8C2F7A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number:          04DB
Signing time:             Tue 20 Oct 2026 01:01:19 +0000
Manifest this update:     Tue 20 Oct 2026 01:01:19 +0000
Manifest next update:     Wed 21 Oct 2026 01:01:19 +0000
Files and hashes:         1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
                          2: 36PRmC1GP3ueaeEjlYANeJ3LXbA.roa (hash: PZlaEdi/ajdKb06dXTcZ+6Hv0OskYDexJ38koRPQi50=)
                          3: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (hash: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=)
                          4: 66spJgWO4r5iJulLefAkdYTwISc.roa (hash: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=)
                          5: AFebLvn6AH0mOGLAGY1K4fdA0ac.roa (hash: lc41gS5MnYI/Mo4Xzk3UtrseTVtRz4aEngOCwuhDcEI=)
                          6: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (hash: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=)
                          7: G31aaGd5LlY50IGLO6eQwT_sz54.roa (hash: J+TTKw7LlUBt9s2Q/PONP/L4s5aJKpFWg7AH4f8ZIRU=)
                          8: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: 04L1wB3Gmbtyzj8Qh4+k34EVzX5x5xRA9JrMjIKbIhI=)
                          9: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
                          10: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
                          11: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
                          12: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
                          13: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (hash: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=)
                          14: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (hash: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=)
                          15: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
                          16: a_bqWhibp7SeshuAQiOml-HBzFo.roa (hash: 3/NcBV1xs1onuU3mKr8Ow0etCQW+Riv48+qzB2krzYc=)
                          17: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
                          18: eh5fOnfV3Yahiu4aGae0RbMTacA.roa (hash: EnUBauk+HPUC2FL0C2u4k3bttrn+4mEzqjxd5GPr53A=)
                          19: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
                          20: oVD_dVqY96Rae8qlPSjzu1nbP2A.roa (hash: hMwSc/t+zdpyL3GPyUyGW/FYHdZ8kxNPn94rYv1mr6s=)
                          21: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (hash: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=)
                          22: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
                          23: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
                          24: zzlejXCHpXgamH633G_B9GA9p_0.roa (hash: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:56:d3:be:83:36:5e:50:50:6b:82:50:7f:8c:2f:7a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
        Validity
            Not Before: Oct 20 01:01:19 2026 GMT
            Not After : Oct 21 01:01:19 2026 GMT
        Subject: CN=5a7006db3c8cff7cb46cadc49ba3ed5a288a4b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:bc:0e:06:7e:2c:2a:36:89:a6:14:27:cd:
                    ca:f9:f2:d1:2e:a4:7a:5b:b8:75:79:c8:d9:0f:3e:
                    0b:04:88:6a:11:04:0c:eb:28:55:b0:2e:e4:be:9b:
                    14:c6:4d:09:a6:b4:0a:f1:80:66:fb:92:db:97:ca:
                    61:39:c1:c5:4e:d0:f1:58:81:64:7c:46:98:49:a5:
                    ae:30:15:21:23:5b:14:0a:5f:3e:b5:d8:d6:04:a4:
                    09:d8:e2:1a:ce:43:1f:f7:19:c1:2f:e7:23:e9:ee:
                    5d:2f:22:de:38:0e:b9:8d:39:a7:c3:57:94:47:b4:
                    b2:27:60:81:19:37:36:61:37:e6:1b:da:8f:ae:9e:
                    dc:98:bc:da:83:61:69:78:79:c2:22:71:1e:1b:9a:
                    26:2e:dc:62:32:12:57:2b:dd:ce:74:16:9f:f6:24:
                    38:a5:fe:bc:9d:47:3d:ee:44:ae:54:4b:8a:2c:78:
                    4e:82:58:d1:92:8b:1e:32:52:cf:43:56:04:28:0d:
                    c1:78:3e:ce:9c:bb:05:3a:fb:81:39:c0:14:53:10:
                    89:e7:bc:ec:f2:ec:cb:d4:fb:7a:93:b8:c5:39:98:
                    9c:df:55:67:12:03:de:a5:92:34:79:03:ab:fd:53:
                    3e:c2:e2:ed:9f:3f:39:75:44:72:fe:2a:cf:20:0b:
                    5b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:70:06:DB:3C:8C:FF:7C:B4:6C:AD:C4:9B:A3:ED:5A:28:8A:4B:27
            X509v3 Authority Key Identifier:
                keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:22:ab:37:c1:07:b3:89:93:6d:d3:57:d1:15:23:1a:0e:
         e6:71:3f:c5:3c:de:01:0a:ab:c5:74:05:40:ff:b4:1f:d3:6f:
         18:17:d8:4e:63:68:2c:8d:e6:0d:80:52:21:0f:88:fd:0b:c0:
         a3:27:d2:37:cc:ce:50:70:6e:2a:b5:77:9f:04:48:ef:5f:f8:
         75:4f:d8:95:8f:8e:00:ea:c2:6d:33:ed:f7:38:4b:7e:45:e7:
         6a:66:60:70:f7:e9:ad:37:5e:0f:2a:f1:4d:62:0e:a8:fd:0a:
         a6:e9:a9:dd:30:11:1e:81:d9:f7:1b:95:e5:44:e2:6a:b8:d0:
         a9:d6:8b:22:e1:d5:68:d2:2b:b9:ac:a9:fb:05:b6:d9:75:7e:
         72:49:4d:1f:9c:66:24:82:0e:b8:cc:2d:28:df:cc:86:6a:96:
         90:4e:75:5d:39:5b:9d:7d:4c:7b:2a:84:0f:03:5d:06:99:30:
         92:a8:5a:d3:b9:29:3f:55:7f:c0:52:e9:35:7f:52:d9:bc:16:
         a6:dc:54:52:5f:d1:2d:20:57:9d:7b:0e:f2:72:c8:05:de:da:
         6f:d9:1c:9b:11:91:df:35:ae:0b:af:8a:7e:df:3c:27:96:28:
         76:8d:dc:28:9b:fb:d1:8f:f6:5b:d5:65:d5:b6:7c:45:ed:7d:
         62:38:38:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFW076DNl5QUGuCUH+ML3qVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4
ZjMzYTcwHhcNMjYxMDIwMDEwMTE5WhcNMjYxMDIxMDEwMTE5WjAzMTEwLwYDVQQD
Eyg1YTcwMDZkYjNjOGNmZjdjYjQ2Y2FkYzQ5YmEzZWQ1YTI4OGE0YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3y8DgZ+LCo2iaYUJ83K+fLRLqR6
W7h1ecjZDz4LBIhqEQQM6yhVsC7kvpsUxk0JprQK8YBm+5Lbl8phOcHFTtDxWIFk
fEaYSaWuMBUhI1sUCl8+tdjWBKQJ2OIazkMf9xnBL+cj6e5dLyLeOA65jTmnw1eU
R7SyJ2CBGTc2YTfmG9qPrp7cmLzag2FpeHnCInEeG5omLtxiMhJXK93OdBaf9iQ4
pf68nUc97kSuVEuKLHhOgljRkoseMlLPQ1YEKA3BeD7OnLsFOvuBOcAUUxCJ57zs
8uzL1Pt6k7jFOZic31VnEgPepZI0eQOr/VM+wuLtnz85dURy/irPIAtbTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpwBts8jP98tGytxJuj7VooiksnMB8GA1UdIwQY
MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt
MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3
LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpwiqzfB
B7OJk23TV9EVIxoO5nE/xTzeAQqrxXQFQP+0H9NvGBfYTmNoLI3mDYBSIQ+I/QvA
oyfSN8zOUHBuKrV3nwRI71/4dU/YlY+OAOrCbTPt9zhLfkXnamZgcPfprTdeDyrx
TWIOqP0Kpump3TARHoHZ9xuV5UTiarjQqdaLIuHVaNIruayp+wW22XV+cklNH5xm
JIIOuMwtKN/MhmqWkE51XTlbnX1MeyqEDwNdBpkwkqha07kpP1V/wFLpNX9S2bwW
ptxUUl/RLSBXnXsO8nLIBd7ab9kcmxGR3zWuC6+Kft88J5Yodo3cKJv70Y/2W9Vl
1bZ8Re19Yjg4wA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:42:44 2026 by rpki-client