Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          5KckxzB76MeCsH0qZTJYkAKPBnNyGnBtN/ky8n4xtfU=
Subject key identifier:   34:44:CC:91:A5:FC:C3:6E:47:06:20:9B:77:F3:8B:76:D4:C6:44:B2
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       01A1238B0BF54216178E42CED480A735A91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          05B5
Signing time:             Sat 10 Oct 2026 02:01:17 +0000
Manifest this update:     Sat 10 Oct 2026 02:01:17 +0000
Manifest next update:     Sun 11 Oct 2026 02:01:17 +0000
Files and hashes:         1: BZBAahTREA8Q_3coOvyfGf9sdjY.roa (hash: jde/2VQaoII8kUESbj5JRDjPMDFmOdYKULZBf+Xi1JA=)
                          2: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: 7eEtiLGLvb2DNcK+Zr3XG8WcKr9EcK+N4ChdK0+wNHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8b:0b:f5:42:16:17:8e:42:ce:d4:80:a7:35:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Oct 10 02:01:17 2026 GMT
            Not After : Oct 11 02:01:17 2026 GMT
        Subject: CN=3444cc91a5fcc36e4706209b77f38b76d4c644b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:49:3c:b0:77:94:9e:f5:c0:f7:be:62:61:
                    98:2f:e9:36:2f:84:d2:e5:c9:6b:41:8b:11:d8:ff:
                    6a:da:b6:7b:10:da:16:4d:a7:ab:6b:c4:bf:47:08:
                    5f:b7:43:6a:87:84:34:18:ab:9a:f5:50:3e:f6:6b:
                    ad:07:cd:ca:ae:a6:67:48:5d:e3:68:10:9e:bb:cb:
                    56:43:af:da:ba:23:8b:60:18:33:19:fa:97:0a:da:
                    9f:24:14:44:3d:fa:61:db:65:05:57:1e:55:a4:ec:
                    c1:08:8f:0f:f8:b3:a1:77:34:af:6d:27:43:5d:b5:
                    02:44:a2:d4:7b:43:9c:40:59:c7:98:b6:a5:d5:e0:
                    d0:38:1c:63:d8:e9:74:ab:9f:4c:56:67:fc:84:e5:
                    1c:e3:90:36:39:b1:81:59:33:8d:76:31:5c:33:d0:
                    ee:78:96:2e:29:7a:2b:b2:29:64:bf:aa:00:73:2b:
                    aa:ab:ac:16:5d:bc:94:ba:12:60:7a:8f:5a:b6:4a:
                    a2:e0:de:ba:c9:e7:b7:ec:b7:37:b3:9d:4f:b9:40:
                    d0:c2:e9:6a:28:7f:c4:76:89:89:6b:26:3d:4b:a9:
                    15:f1:94:5b:e2:44:2a:b1:5b:22:00:65:dd:60:c3:
                    f5:7e:18:eb:1c:6c:31:fb:45:2c:ac:c6:dd:95:4e:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:CC:91:A5:FC:C3:6E:47:06:20:9B:77:F3:8B:76:D4:C6:44:B2
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a5:9b:4b:16:15:5f:79:ec:23:f3:be:a1:b7:4d:af:3c:3a:
         fd:3d:68:0a:99:82:7f:86:ab:8a:ef:45:1e:7e:78:73:c5:62:
         2d:e9:36:6b:b2:2a:32:b3:d2:a6:69:0e:aa:23:55:a9:c7:19:
         53:3e:4c:8d:e5:25:fb:5c:d7:c6:39:a6:74:0b:4d:7b:a7:b1:
         cd:47:bf:cc:6a:89:e4:da:a5:4b:66:3f:45:41:f7:59:d7:f4:
         8c:d9:fe:76:70:3c:45:99:1f:d3:5f:85:3d:34:1e:4c:69:03:
         6f:d3:1d:20:8c:ca:99:b5:8b:b7:7c:ae:39:06:c9:1c:ad:f2:
         7e:f0:70:b2:8e:bd:a1:f0:54:0b:93:ec:8e:5f:c7:5e:4d:fe:
         39:6a:86:f7:ec:66:e4:5a:02:4b:32:79:9a:f2:83:63:0b:30:
         ac:24:34:4b:83:e8:88:47:13:3b:b5:16:3f:b4:f6:e1:fa:49:
         fa:df:ef:eb:4b:5f:44:af:ec:4c:e4:76:58:04:a3:9f:65:e9:
         95:9d:22:d7:12:35:b9:f3:db:e3:0c:84:63:d3:ad:61:b4:e4:
         1c:8f:d8:3a:6f:a5:4a:41:13:35:f7:62:93:92:8e:97:90:91:
         6b:25:cb:3e:24:ea:31:ab:a0:45:50:91:b6:32:5f:b8:79:ce:
         4e:8c:66:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjiwv1QhYXjkLO1ICnNakcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGUzMmE4MmU5OGYyMmQ5MzlmZjk5ODQ0NTU4MTNiZTJi
YTZhOTEwHhcNMjYxMDEwMDIwMTE3WhcNMjYxMDExMDIwMTE3WjAzMTEwLwYDVQQD
EygzNDQ0Y2M5MWE1ZmNjMzZlNDcwNjIwOWI3N2YzOGI3NmQ0YzY0NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr5JPLB3lJ71wPe+YmGYL+k2L4TS
5clrQYsR2P9q2rZ7ENoWTaera8S/Rwhft0Nqh4Q0GKua9VA+9mutB83KrqZnSF3j
aBCeu8tWQ6/auiOLYBgzGfqXCtqfJBREPfph22UFVx5VpOzBCI8P+LOhdzSvbSdD
XbUCRKLUe0OcQFnHmLal1eDQOBxj2Ol0q59MVmf8hOUc45A2ObGBWTONdjFcM9Du
eJYuKXorsilkv6oAcyuqq6wWXbyUuhJgeo9atkqi4N66yee37Lc3s51PuUDQwulq
KH/EdomJayY9S6kV8ZRb4kQqsVsiAGXdYMP1fhjrHGwx+0UsrMbdlU4NmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDREzJGl/MNuRwYgm3fzi3bUxkSyMB8GA1UdIwQY
MBaAFBlOMqgumPItk5/5mERVgTviumqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUt
MTNlNzNmNjYzOTdiLzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUtMTNlNzNmNjYzOTdi
LzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6WbSxYV
X3nsI/O+obdNrzw6/T1oCpmCf4ariu9FHn54c8ViLek2a7IqMrPSpmkOqiNVqccZ
Uz5MjeUl+1zXxjmmdAtNe6exzUe/zGqJ5NqlS2Y/RUH3Wdf0jNn+dnA8RZkf01+F
PTQeTGkDb9MdIIzKmbWLt3yuOQbJHK3yfvBwso69ofBUC5Psjl/HXk3+OWqG9+xm
5FoCSzJ5mvKDYwswrCQ0S4PoiEcTO7UWP7T24fpJ+t/v60tfRK/sTOR2WASjn2Xp
lZ0i1xI1ufPb4wyEY9OtYbTkHI/YOm+lSkETNfdik5KOl5CRayXLPiTqMaugRVCR
tjJfuHnOToxmZA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:36 2026 by rpki-client