Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File:                     GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier:          g3fJZLYftMUFGuKlsvufiiSEmz7jmM4KZt66Uudu92I=
Subject key identifier:   A4:20:15:92:B7:18:9D:B5:41:F2:D8:46:86:34:55:18:15:09:F7:ED
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer:       /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial:       01A08CB25DBB94A54016C4257B68D257446F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number:          1440
Signing time:             Thu 10 Sep 2026 19:01:34 +0000
Manifest this update:     Thu 10 Sep 2026 19:01:34 +0000
Manifest next update:     Fri 11 Sep 2026 19:01:34 +0000
Files and hashes:         1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: g65cpk83Va3jXSPErIaj6P7k6m0EO3vQy+lG/hSfFXU=)
                          2: UQ_3tdEvusxpKm6g-bRZq8tkD4E.roa (hash: s1CWyQo9MuJT6cKRpUhun2W2gEgTiwk/dhUNwuJXn1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b2:5d:bb:94:a5:40:16:c4:25:7b:68:d2:57:44:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
        Validity
            Not Before: Sep 10 19:01:34 2026 GMT
            Not After : Sep 11 19:01:34 2026 GMT
        Subject: CN=a4201592b7189db541f2d846863455181509f7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:77:44:4c:00:f6:44:6b:85:59:ed:d0:cb:
                    d8:40:f3:a9:8f:86:9b:e4:42:2d:5c:b8:5a:ae:71:
                    80:6d:16:ef:64:5c:30:ae:c7:47:cb:27:bf:ec:bb:
                    36:7c:7a:21:2a:73:4e:74:e1:67:a4:c0:a3:b4:70:
                    8e:01:52:88:b2:c1:fe:7b:0c:a1:29:67:5f:67:16:
                    ec:a4:bc:5e:95:50:19:29:65:e3:00:dc:44:30:14:
                    98:f1:d9:e8:58:8d:35:e0:06:c6:b9:6f:ef:67:97:
                    c6:ce:84:53:56:55:45:01:ea:35:12:54:88:d7:e0:
                    62:bd:9e:f0:8b:cd:7b:4f:0d:0f:99:ee:3e:c4:3e:
                    6e:76:82:ae:6b:a6:be:d2:d3:27:64:42:31:72:3d:
                    b0:eb:b2:4b:05:f4:ca:7f:12:35:a9:b8:49:d5:40:
                    8c:77:99:54:6b:73:a6:e8:19:1b:4e:3d:15:61:ed:
                    d2:51:0b:6f:24:04:f2:94:ee:cb:f5:d6:1f:d3:89:
                    92:f3:42:62:46:ba:e8:cf:06:9f:18:15:00:f2:cf:
                    05:80:f1:76:3b:fb:85:b1:d3:42:a1:64:56:f5:3a:
                    58:2b:16:1b:e1:c4:c1:77:c0:55:a0:c5:35:71:88:
                    78:ff:dc:2b:e3:89:33:e4:a2:8e:1d:45:d1:f8:d3:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:20:15:92:B7:18:9D:B5:41:F2:D8:46:86:34:55:18:15:09:F7:ED
            X509v3 Authority Key Identifier:
                keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:16:7b:57:f8:e6:79:d3:84:2b:2b:6e:8a:7d:6b:e1:54:
         09:ce:ac:8a:7b:0b:45:8b:91:5e:e4:11:ee:e5:dc:5f:9d:df:
         f3:c3:ef:0a:48:21:cd:9e:98:7a:d9:0a:7b:b6:24:21:ab:6c:
         a8:d6:6c:19:91:13:60:6c:27:49:82:c1:3a:ec:d6:22:f8:1a:
         3d:ec:ad:cb:94:ce:00:5f:c1:d0:3f:4b:aa:d6:b4:8b:d1:78:
         b3:ad:34:c6:4c:5a:19:02:11:84:2f:9b:19:10:bc:89:28:13:
         0b:e3:7e:08:73:60:51:7c:50:c7:17:9b:17:46:01:42:d6:c9:
         ea:53:f2:3c:48:c6:5b:2d:f2:13:f2:cf:3a:61:50:d7:a7:91:
         35:5f:a0:33:66:53:bb:8f:b8:25:66:24:95:44:47:2a:cf:68:
         51:74:fd:df:4f:f5:c8:66:17:03:8b:bd:fe:a4:bb:43:36:0e:
         0a:8a:da:2c:0d:d0:33:ff:37:d8:05:0e:83:f3:07:fb:fc:b3:
         c2:bc:cd:bf:3e:22:f4:43:da:8e:91:a2:0f:4f:b0:cf:e3:ab:
         6e:c3:e9:4e:d3:b1:5e:ab:1b:6c:1c:f4:a7:f4:fb:63:6c:3f:
         8e:a5:09:1e:2d:97:04:26:0f:94:3d:08:68:63:c9:bc:64:10:
         10:aa:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:05 2026 by rpki-client