Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          lZNtfTeWJsighb3mqqoV4BH5UBGkXvmfGFo4mHnpPxs=
Subject key identifier:   16:A1:26:34:95:E8:F4:34:CB:4C:5B:E9:A5:8F:AC:A5:D4:EB:6B:DB
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       01A08A5568684DC2CD474AA8E95AC2742B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          19D8
Signing time:             Thu 10 Sep 2026 08:00:48 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:48 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:48 +0000
Files and hashes:         1: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: OSTecF8Q78gKMMAFfyAQdAi56wsBhtoLSwoiQvl4ujA=)
                          2: lYK_65AKlFPw1-t6tjg4pQYtXHY.roa (hash: VCWprxMwmjsHW4IsRUv/igV1kqqp3MMJUQXFePAz+0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:68:68:4d:c2:cd:47:4a:a8:e9:5a:c2:74:2b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: Sep 10 08:00:48 2026 GMT
            Not After : Sep 11 08:00:48 2026 GMT
        Subject: CN=16a1263495e8f434cb4c5be9a58faca5d4eb6bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:4f:f0:0d:40:22:93:b2:97:fe:b0:20:f7:
                    f2:e2:fd:95:58:bb:ea:c7:25:11:75:c6:e5:61:79:
                    e1:b4:64:f5:57:0a:d9:c6:92:69:ca:b1:f6:91:9e:
                    5a:51:d2:67:c8:24:88:72:98:2c:7f:cc:83:26:a7:
                    d8:eb:76:3e:a6:df:8e:ec:06:ae:7e:67:ca:6e:83:
                    43:a5:f2:bd:6e:a2:a1:f9:a0:5c:b2:06:a5:31:55:
                    92:d0:bc:66:74:68:e5:03:d5:87:fd:13:e6:95:bc:
                    19:0d:bd:69:16:e7:83:4e:d8:e7:43:a8:af:79:11:
                    af:1b:df:c4:dc:df:da:5f:d4:dc:d9:16:6c:1a:9d:
                    cc:14:52:be:99:65:55:7b:29:16:88:c8:bd:52:2c:
                    87:3f:82:85:36:f0:0d:76:8a:a5:a5:8f:2b:9d:0e:
                    11:8a:a8:57:97:10:6b:51:93:60:c6:37:58:81:e1:
                    07:8c:02:63:4a:d2:23:68:fc:3e:60:bf:18:b8:40:
                    7a:b3:38:fe:e3:d0:68:a9:81:32:e4:2c:00:0a:82:
                    e3:a4:08:99:89:0f:1f:aa:29:02:49:e8:d9:bf:35:
                    e1:8b:84:a8:5c:50:4a:72:ae:d1:00:5b:83:42:80:
                    f8:48:e3:10:83:25:b6:2a:47:93:e8:80:38:89:1e:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:26:34:95:E8:F4:34:CB:4C:5B:E9:A5:8F:AC:A5:D4:EB:6B:DB
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:27:28:0f:73:35:2f:b4:ec:93:7d:c7:17:8b:1c:e3:2e:6d:
         ac:16:28:62:ee:1b:87:02:f3:b2:b7:3d:80:0b:78:a8:7c:0d:
         64:f1:c7:00:f3:c9:5e:87:a6:41:b2:37:32:44:f9:4a:41:ef:
         96:15:ff:93:66:fd:f6:1d:27:a5:a3:ac:9c:c9:40:6e:26:a7:
         8a:38:33:7b:3a:63:b6:7b:52:88:fd:ff:30:30:5c:6b:2b:c0:
         84:e7:f2:c6:d4:4d:eb:d9:62:6b:88:a5:2d:ac:24:17:8e:8b:
         f8:da:0f:35:f0:92:35:b3:01:85:d3:cd:33:ab:ba:8d:0c:6d:
         de:af:cf:ef:82:bc:e4:e5:8f:6f:02:03:bb:67:6b:66:28:7c:
         c0:8b:af:1f:1d:62:d4:81:65:92:2a:54:a0:02:32:fb:e0:35:
         d9:7a:89:9c:2d:73:63:b9:64:38:3f:c7:d3:c9:93:61:e4:b2:
         ff:2b:a3:a6:1f:91:55:aa:0b:38:ea:80:b9:78:e0:ec:96:86:
         f0:7f:ec:58:23:54:f8:a3:d6:24:29:3b:c2:e3:84:c8:0b:f6:
         cd:8c:46:37:ba:ba:f4:f0:62:65:d6:1a:ee:c3:f6:7b:54:15:
         18:25:3b:a7:46:f4:cb:9c:4e:4b:98:0b:db:88:83:e7:c2:89:
         e9:bd:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:08 2026 by rpki-client