Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier:          8DBwEtOxir4bfz8e9Fs4SRftqjSaISzB9mwm0nnyNSY=
Subject key identifier:   AE:6A:2C:A6:54:22:EA:9C:10:20:03:58:63:B6:4D:7E:44:2F:02:73
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       01A0EC2EB4BCB2834F9F81610E3C0DBF69CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number:          1A7A
Signing time:             Tue 29 Sep 2026 08:01:18 +0000
Manifest this update:     Tue 29 Sep 2026 08:01:18 +0000
Manifest next update:     Wed 30 Sep 2026 08:01:18 +0000
Files and hashes:         1: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: hdygV/TlBhmYaLNSrAaXbFidArRhPtkiHLZcOI+s5C0=)
                          2: J0rH9JX0KbdTKOcoRoiVFom0Vhs.roa (hash: A8dP+OxNgGQqU96bazfRlPshwZe7IJ50JSO2KL6IocU=)
                          3: sYTH2xaYQo9XYa_EEP4k8tAtn3M.asa (hash: WJoWu8Ygfu3XEz0Y8P0zm4tHyBUMT7PoRt6+SRfESnE=)
                          4: zKoqr2AHpdD6h0Di-u6O91o2qr4.roa (hash: C7O0OLcevVEKUGD2h9jR8PHv05Lfi5ttiMBjrZhaHCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:2e:b4:bc:b2:83:4f:9f:81:61:0e:3c:0d:bf:69:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Sep 29 08:01:18 2026 GMT
            Not After : Sep 30 08:01:18 2026 GMT
        Subject: CN=ae6a2ca65422ea9c1020035863b64d7e442f0273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:79:ff:5c:af:04:7c:8a:67:3a:d0:73:37:
                    0d:69:b1:dd:e7:9a:a4:16:13:11:91:40:a7:9a:a7:
                    6f:98:04:b2:0f:4d:79:d7:b7:7b:1c:03:35:e8:e4:
                    6b:01:ae:9e:e2:e1:db:98:13:f9:25:ab:6a:c5:7b:
                    d2:20:ed:94:53:e8:e9:a6:a2:87:f1:a1:bc:c0:7d:
                    91:1f:8a:19:e2:d3:db:91:33:24:69:6f:37:a1:94:
                    2f:8e:5b:f5:22:cd:c0:77:ca:60:6a:f0:95:c1:ee:
                    73:dc:e7:47:94:cc:ce:d6:c3:03:32:8a:34:81:d3:
                    9f:fe:67:03:26:99:d7:ee:c8:86:39:ae:2b:cf:f6:
                    77:53:f8:64:6e:9a:26:4c:5b:60:e6:6c:49:90:d9:
                    f8:d7:84:28:ce:7c:8d:a5:90:df:6d:11:2c:cd:84:
                    67:c8:ae:1f:39:4d:4d:88:a5:ca:8b:a2:2c:97:10:
                    59:b0:93:96:79:05:21:85:4c:be:dc:05:9b:0e:17:
                    b6:72:8f:5a:d6:69:61:09:76:67:7c:fd:f6:58:6c:
                    d2:f6:2f:3a:4e:0f:90:fb:08:d7:5d:44:43:3e:b4:
                    9b:57:5a:f5:02:da:37:63:cd:64:4c:97:21:11:20:
                    f7:79:73:3c:3c:c5:2d:be:cd:71:69:16:d4:d8:b4:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6A:2C:A6:54:22:EA:9C:10:20:03:58:63:B6:4D:7E:44:2F:02:73
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c4:42:19:2f:96:ee:28:4b:a1:77:9a:f7:47:c2:0f:0a:c0:
         76:48:3c:f8:af:13:3f:9b:fc:7e:03:0a:52:e4:95:49:04:c2:
         e3:84:2d:d1:bc:44:dd:1a:79:db:1a:78:9d:c1:fb:02:d3:63:
         13:7e:fc:8e:f8:f1:65:1b:31:99:d5:26:38:db:7e:7d:3d:f0:
         dc:ed:90:e9:91:84:97:a6:b9:90:1d:de:a4:4e:ab:10:30:57:
         93:97:59:33:a2:fe:fa:c1:f5:4b:c2:91:20:ad:5a:81:00:73:
         23:cf:b7:af:9e:91:97:af:98:9a:78:59:90:c3:ea:93:84:2e:
         5d:d2:e2:e2:b0:e7:ea:6b:f0:3e:12:3e:49:18:b3:f8:b3:97:
         46:30:cd:b5:8c:60:0b:d6:33:17:64:4b:3f:f1:8b:c2:21:0d:
         1b:59:ad:d2:a6:0a:b1:2b:33:d4:df:f3:4c:5f:b3:e6:09:75:
         62:82:42:53:77:b3:cc:d1:9e:7a:f7:6b:ce:ef:b5:5d:38:a9:
         72:6e:b0:4f:f7:66:1c:9c:7d:47:73:a4:b1:be:a1:74:02:25:
         fd:0b:58:7b:1d:b7:10:15:39:77:95:f2:9b:b2:49:27:0b:d8:
         f9:92:e2:39:54:d5:36:22:a1:c2:ee:08:8a:ea:3b:39:50:59:
         ca:6e:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:44:49 2026 by rpki-client