Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File:                     Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier:          NdDSBrF8oL4xcRw3kwkbs6Sz+JA6y+vqIOfP5BX8YkM=
Subject key identifier:   55:0F:BC:20:AB:AD:F3:65:C6:D5:47:64:EF:9B:F8:C2:DF:42:32:5D
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer:       /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial:       01A158C1F4689A50A465A45F91A0C4F48C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number:          04DC
Signing time:             Tue 20 Oct 2026 10:01:08 +0000
Manifest this update:     Tue 20 Oct 2026 10:01:08 +0000
Manifest next update:     Wed 21 Oct 2026 10:01:08 +0000
Files and hashes:         1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
                          2: 36PRmC1GP3ueaeEjlYANeJ3LXbA.roa (hash: PZlaEdi/ajdKb06dXTcZ+6Hv0OskYDexJ38koRPQi50=)
                          3: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (hash: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=)
                          4: 66spJgWO4r5iJulLefAkdYTwISc.roa (hash: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=)
                          5: AFebLvn6AH0mOGLAGY1K4fdA0ac.roa (hash: lc41gS5MnYI/Mo4Xzk3UtrseTVtRz4aEngOCwuhDcEI=)
                          6: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (hash: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=)
                          7: G31aaGd5LlY50IGLO6eQwT_sz54.roa (hash: J+TTKw7LlUBt9s2Q/PONP/L4s5aJKpFWg7AH4f8ZIRU=)
                          8: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: A1Vv0OU1nEdrR2jgb71a03hjKhYQWGPE0gIYSqqKCdE=)
                          9: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
                          10: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
                          11: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
                          12: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
                          13: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (hash: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=)
                          14: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (hash: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=)
                          15: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
                          16: a_bqWhibp7SeshuAQiOml-HBzFo.roa (hash: 3/NcBV1xs1onuU3mKr8Ow0etCQW+Riv48+qzB2krzYc=)
                          17: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
                          18: eh5fOnfV3Yahiu4aGae0RbMTacA.roa (hash: EnUBauk+HPUC2FL0C2u4k3bttrn+4mEzqjxd5GPr53A=)
                          19: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
                          20: oVD_dVqY96Rae8qlPSjzu1nbP2A.roa (hash: hMwSc/t+zdpyL3GPyUyGW/FYHdZ8kxNPn94rYv1mr6s=)
                          21: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (hash: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=)
                          22: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
                          23: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
                          24: zzlejXCHpXgamH633G_B9GA9p_0.roa (hash: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:58:c1:f4:68:9a:50:a4:65:a4:5f:91:a0:c4:f4:8c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
        Validity
            Not Before: Oct 20 10:01:08 2026 GMT
            Not After : Oct 21 10:01:08 2026 GMT
        Subject: CN=550fbc20abadf365c6d54764ef9bf8c2df42325d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:c9:33:f9:13:75:10:53:f2:55:76:0e:8b:
                    6e:24:1b:b2:a7:12:d1:f3:0c:19:38:31:df:ae:de:
                    a7:7a:bf:cd:87:94:2f:47:4f:8c:e9:3f:13:59:e4:
                    9b:11:4a:2c:fc:94:37:d0:d5:63:23:89:96:fb:3e:
                    fb:d8:81:eb:b6:b1:49:7f:37:ae:2b:e0:05:4f:b6:
                    03:56:c3:1c:c3:a6:aa:78:d1:76:20:3e:79:27:89:
                    96:b7:b1:7d:83:37:ee:63:8d:4a:3c:d8:fe:95:6c:
                    a1:62:cb:c3:15:84:e9:96:f8:ea:53:bc:ff:fc:7d:
                    ed:c6:44:ce:69:83:74:b3:47:ef:46:26:b5:67:93:
                    3c:9f:9b:8b:76:20:54:17:bd:89:1f:6d:13:44:2c:
                    ff:10:96:81:7b:9d:61:bd:dd:3a:37:b2:6d:9e:13:
                    53:18:bc:f2:31:c3:6c:cc:15:b7:5b:ec:6a:9a:1f:
                    37:7a:0a:5e:98:6a:52:6f:14:3b:3b:59:ae:6a:75:
                    2f:2e:09:1f:64:95:94:c3:11:85:ee:6d:5e:e6:be:
                    1a:cd:44:f4:2c:9a:12:20:50:17:90:d5:da:ac:f9:
                    95:73:bd:05:1f:9d:25:27:e0:d8:6b:c9:94:e1:43:
                    33:a5:67:25:e8:58:14:51:70:f7:ff:6b:54:d6:29:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0F:BC:20:AB:AD:F3:65:C6:D5:47:64:EF:9B:F8:C2:DF:42:32:5D
            X509v3 Authority Key Identifier:
                keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:88:8d:3b:19:e4:1a:85:1c:87:2f:98:73:cb:70:97:91:ae:
         2e:68:1a:22:0d:75:7f:b4:a4:27:41:38:7f:ce:c4:98:54:c9:
         f5:21:72:e4:78:b3:c4:96:d9:bf:2c:5b:cd:81:27:39:4f:45:
         4b:2e:ab:96:6c:e4:d1:b4:8d:78:90:42:28:b4:36:ee:7b:74:
         f8:f0:74:b3:db:8b:17:f4:72:99:83:fe:cb:e9:da:62:fb:ca:
         d3:c3:f6:f3:48:db:6b:0f:e3:6b:6d:08:dd:b9:46:82:3a:16:
         f4:9e:f8:ca:a5:b1:df:29:fe:3c:3e:a1:24:19:78:bb:90:23:
         f6:ca:c6:8d:dc:5b:d2:2e:46:f4:00:73:90:be:4c:2a:de:01:
         82:29:cd:c2:b7:39:59:84:70:8f:37:b8:ab:99:95:c9:76:c3:
         2c:93:ed:ea:93:82:60:40:41:ec:55:1f:f6:f9:5a:b9:ac:97:
         60:1e:a7:f7:d0:b6:cc:83:d7:d5:6f:38:d5:5b:be:d9:6b:73:
         9d:e8:5a:e3:84:4f:c9:5e:d0:16:47:cc:73:b8:ba:77:c2:57:
         32:98:3a:73:9d:ea:ec:d1:55:c9:fa:0f:65:08:93:b4:a8:88:
         49:fd:34:7e:2d:a6:b5:26:e9:30:2c:aa:0a:81:20:55:20:02:
         c9:9e:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:51 2026 by rpki-client