Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
File:                     GbiQW6xTUBxccgHgYY3w9F8RSnU.mft (raw, json)
Hash identifier:          0CQg2lfjVV+L6u0HFVchhP7rETZmEWcf6jJmVtN6/yM=
Subject key identifier:   94:E8:8A:0D:55:D5:9B:48:BD:A9:E5:4A:CB:55:68:6C:38:65:0D:1D
Authority key identifier: 19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
Certificate issuer:       /CN=19b8905bac53501c5c7201e0618df0f45f114a75
Certificate serial:       01A08B6849C1E115B2BDC6DA424FFCE2A48B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
Manifest number:          018E
Signing time:             Thu 10 Sep 2026 13:01:02 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:02 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:02 +0000
Files and hashes:         1: 48mZdI5GwAnLSURvpyliOOqttMQ.roa (hash: 31skaXcRsPZrgu8cTQ5ajy3MoKvly3qp6UXzeLtlo7w=)
                          2: GbiQW6xTUBxccgHgYY3w9F8RSnU.crl (hash: sSZhGZZFQ0vMj8+4NRZkI/7JI8lQy2GehA2xyvUMpjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:49:c1:e1:15:b2:bd:c6:da:42:4f:fc:e2:a4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b8905bac53501c5c7201e0618df0f45f114a75
        Validity
            Not Before: Sep 10 13:01:02 2026 GMT
            Not After : Sep 11 13:01:02 2026 GMT
        Subject: CN=94e88a0d55d59b48bda9e54acb55686c38650d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:5c:6a:c4:f4:8b:2a:8a:0e:6c:a3:90:c5:
                    73:af:27:41:da:98:a4:1e:14:ea:69:50:59:59:6b:
                    d6:4d:7e:b9:cc:f0:e4:3b:9a:9b:e6:5f:73:54:ee:
                    83:d8:05:7e:9f:23:55:ff:ee:7b:c5:57:70:49:92:
                    10:81:a2:c6:28:b0:9f:b6:66:a9:4f:50:7c:a1:63:
                    75:52:12:22:70:96:7a:78:20:96:31:a8:3b:58:4a:
                    68:6e:19:58:ec:14:ea:e6:42:d5:08:9d:05:ba:16:
                    ac:df:f1:7b:d9:65:77:3e:87:77:b5:e1:55:82:24:
                    5d:4e:c6:d8:42:cc:82:2d:26:a5:a9:d4:8a:9c:bb:
                    b3:9d:dd:42:c4:86:0e:94:61:b7:01:c9:3c:f2:66:
                    84:15:26:91:37:7b:c9:b5:40:6c:50:94:2a:a4:f1:
                    1f:68:2d:6d:67:8f:82:09:89:19:b2:b8:e2:9f:ab:
                    86:c1:e2:a0:51:4b:bf:f4:c2:59:dd:c4:2b:4b:20:
                    6f:18:9e:bb:a1:4e:4f:4a:38:37:a4:4e:2f:db:19:
                    21:65:34:54:bb:1b:01:dc:70:cc:7c:2c:b9:c5:ef:
                    95:49:83:a4:2d:d5:f3:0e:70:13:ac:e8:58:f9:cd:
                    8b:52:df:b4:2e:68:f8:14:fd:6d:bc:41:f7:ff:7c:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:8A:0D:55:D5:9B:48:BD:A9:E5:4A:CB:55:68:6C:38:65:0D:1D
            X509v3 Authority Key Identifier:
                keyid:19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:91:20:e6:c4:28:13:23:ec:4c:c4:f3:62:be:07:97:10:b1:
         b2:20:6e:2d:a3:fa:61:7f:a0:89:23:65:8e:95:f5:22:7c:35:
         f9:d1:da:84:eb:0e:b2:27:9e:97:f8:d5:3f:68:b7:9c:22:1d:
         4e:55:f0:1e:7c:b5:b0:e4:98:53:b5:d5:3f:2b:85:5b:cd:1a:
         1a:63:67:93:f4:8e:2b:24:8d:86:ee:a5:44:e3:3d:c3:f5:9d:
         27:c9:dc:73:e3:8c:7a:8d:8d:e5:c1:3d:08:a3:59:a6:0e:06:
         7a:e1:3e:92:87:14:3c:3b:35:21:18:88:ea:5b:eb:db:3a:1f:
         b9:f9:2f:0a:aa:f1:f8:f5:5c:22:bd:d4:cd:e1:6f:49:cd:c0:
         43:4d:bb:e9:4e:3b:c4:a5:78:d8:5a:92:80:cd:f1:dc:55:e4:
         74:20:7e:45:ba:e9:c0:b4:91:9a:65:64:d8:a3:62:ed:b5:98:
         70:9f:e9:62:78:26:85:fe:c9:e1:b8:bf:4b:b5:0c:69:c5:0c:
         81:f5:68:f4:50:88:da:ca:9c:02:21:b6:be:46:a8:19:bc:c6:
         c8:73:b9:1e:d8:a7:e1:9f:c9:c2:35:ba:c5:9c:30:d6:45:6c:
         77:3e:53:3f:59:69:d2:73:0c:eb:61:b7:5d:ba:da:33:46:ec:
         58:28:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:17 2026 by rpki-client