Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File:                     gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier:          /uFR1nrhqg4Z2CdzmrWyGMTwvC8nAo4k8bd6QRvpCz0=
Subject key identifier:   51:B3:2C:69:6E:C2:A1:55:BB:9C:1B:0A:22:6D:4F:2C:C5:B8:0E:63
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer:       /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial:       01A06E02F68AEDB2A7FC6531BBB4FB776B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number:          1A39
Signing time:             Fri 04 Sep 2026 20:01:22 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:22 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:22 +0000
Files and hashes:         1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
                          2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: bTebT8IVDh3OV8NWX5dKKC2SgjUjWxWMcaQJu+saHTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:02:f6:8a:ed:b2:a7:fc:65:31:bb:b4:fb:77:6b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
        Validity
            Not Before: Sep  4 20:01:22 2026 GMT
            Not After : Sep  5 20:01:22 2026 GMT
        Subject: CN=51b32c696ec2a155bb9c1b0a226d4f2cc5b80e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:77:e1:59:82:df:b5:09:39:99:24:44:e6:
                    a9:8a:39:97:29:2f:42:b9:7b:65:14:9b:d1:25:ce:
                    78:df:f7:d4:0f:e6:78:c7:f3:76:64:5f:9e:d0:c8:
                    63:8b:94:42:d0:76:07:fb:c2:36:31:e6:b0:b6:2e:
                    df:15:a8:79:8a:a9:7a:01:99:34:ba:fe:5d:a8:1f:
                    44:f3:73:ce:a7:15:56:d9:e4:65:22:59:d7:74:67:
                    b9:80:bc:55:08:88:1f:d9:d5:e7:fa:1b:b6:88:a4:
                    b5:3e:b5:c9:e2:e9:f3:35:8b:7a:b5:31:2b:b9:00:
                    ac:41:e9:bc:ef:b3:81:e9:f7:26:64:e0:44:1d:a1:
                    d2:9e:d5:7f:47:b7:e8:16:23:47:ce:17:1d:79:36:
                    25:f2:3c:27:d0:61:ec:9b:22:d8:41:5a:7a:3b:7f:
                    2a:53:12:e1:df:61:c9:d7:7b:77:e6:8a:ab:ba:3b:
                    be:d0:be:34:03:e3:6b:35:4a:fc:3b:52:33:ac:7a:
                    7c:10:fc:f2:c8:c7:ea:30:47:65:4c:28:6e:d2:b9:
                    40:74:39:b9:84:5f:1d:65:37:6a:6d:c2:2b:25:5e:
                    69:a1:93:a1:c0:3b:4e:3a:15:ff:86:1c:e8:03:ea:
                    d8:42:cb:3e:fc:d9:40:b6:da:ea:92:c7:0f:a8:04:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B3:2C:69:6E:C2:A1:55:BB:9C:1B:0A:22:6D:4F:2C:C5:B8:0E:63
            X509v3 Authority Key Identifier:
                keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:07:0a:33:fd:58:bc:ec:aa:7d:e0:80:ed:f5:33:8f:61:
         b2:34:b8:15:98:72:64:8f:68:27:a7:b2:6e:a3:a0:1f:00:b4:
         41:ba:f3:bc:0a:41:20:c1:09:8b:ed:9d:4e:bc:0a:78:0c:19:
         e4:b8:64:85:14:81:c4:3a:f6:63:b4:ef:c4:4f:72:14:7c:2f:
         bb:e7:dc:23:3b:6b:09:98:59:b3:84:3f:02:ef:dd:90:24:fb:
         df:0f:ae:98:26:2b:c3:14:bc:dc:aa:a4:d6:45:87:76:88:23:
         a8:0d:4d:45:2f:1a:eb:91:5e:5e:be:18:0f:8b:25:57:cb:cf:
         f8:9a:1f:ac:ad:19:1c:d7:28:e2:6b:bb:56:b4:e5:65:8e:c0:
         68:74:78:87:7d:b1:0b:fb:6b:6a:99:5d:7f:97:7d:d9:da:28:
         3a:9a:5b:9a:13:57:10:4d:a9:f4:43:93:a7:d8:33:3d:8e:2e:
         c6:ab:47:63:9b:1b:e4:7a:8d:fc:ed:fd:36:70:5a:45:e5:b2:
         88:7c:51:7a:73:bf:89:fe:8a:06:12:03:9a:a5:68:b7:b9:7b:
         74:06:a5:fe:7f:f8:91:c4:67:40:bc:d2:5b:c1:aa:61:d6:c1:
         2e:e0:de:aa:70:61:a1:13:f3:0a:5c:00:9f:a8:63:ab:66:c1:
         c8:e3:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:14:54 2026 by rpki-client