Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
File:                     GbiQW6xTUBxccgHgYY3w9F8RSnU.mft (raw, json)
Hash identifier:          mvHB29c6F4x2fUh6xeVioWwakvolehwPgoBEaJAS8m4=
Subject key identifier:   D7:31:59:35:BD:15:81:DF:61:35:96:FD:20:82:46:62:69:6F:3F:E0
Authority key identifier: 19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
Certificate issuer:       /CN=19b8905bac53501c5c7201e0618df0f45f114a75
Certificate serial:       01A17EBD331903C98716062F23F93161CD2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
Manifest number:          020C
Signing time:             Tue 27 Oct 2026 19:01:30 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:30 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:30 +0000
Files and hashes:         1: 48mZdI5GwAnLSURvpyliOOqttMQ.roa (hash: 31skaXcRsPZrgu8cTQ5ajy3MoKvly3qp6UXzeLtlo7w=)
                          2: GbiQW6xTUBxccgHgYY3w9F8RSnU.crl (hash: z/506ZTJ6VS98YmKbFP36luP4314hc55WldsY1bU44U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:33:19:03:c9:87:16:06:2f:23:f9:31:61:cd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b8905bac53501c5c7201e0618df0f45f114a75
        Validity
            Not Before: Oct 27 19:01:30 2026 GMT
            Not After : Oct 28 19:01:30 2026 GMT
        Subject: CN=d7315935bd1581df613596fd20824662696f3fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:15:9c:d1:10:54:2d:c0:5e:8a:77:64:9d:
                    93:8a:b9:43:39:97:17:d5:f0:5f:fc:93:8e:35:e0:
                    a9:b4:22:d1:1e:3c:8e:7a:a1:f9:b3:2f:42:84:1f:
                    c6:ee:b2:c8:8d:5c:33:a5:8c:ac:5d:ea:ef:1c:6d:
                    7e:2f:83:5b:7f:47:b7:f1:0d:d4:0e:8e:98:05:ce:
                    30:f3:e4:45:bc:a8:1c:f1:1f:44:c4:d9:0c:21:cc:
                    fa:94:b9:f6:8b:1f:42:89:c2:98:9d:f7:6b:b0:48:
                    ad:3e:2d:2f:94:64:d3:a1:08:51:a3:d3:3f:9d:87:
                    dd:88:e8:b2:c1:8c:c8:18:a5:d0:ce:17:9d:ca:8d:
                    d9:eb:0e:fc:94:09:08:b9:82:34:6b:7f:36:e3:c6:
                    78:b0:47:ee:ef:b2:e3:4b:a0:85:9e:07:0e:e4:ed:
                    e3:c3:15:25:a0:74:39:31:48:47:30:bf:d6:0d:f9:
                    1b:ae:09:55:ce:93:8e:94:86:c4:0b:88:09:96:97:
                    93:1a:d5:31:e0:53:65:f3:15:db:9a:b3:66:0a:16:
                    92:90:a2:e2:b5:20:17:f3:07:96:bf:79:1b:7b:7c:
                    e4:9c:9f:dd:fc:be:3f:af:14:5f:13:97:58:8e:38:
                    07:34:05:6f:98:7a:88:6b:ec:5e:1a:31:14:9d:77:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:31:59:35:BD:15:81:DF:61:35:96:FD:20:82:46:62:69:6F:3F:E0
            X509v3 Authority Key Identifier:
                keyid:19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:75:1e:f9:fb:04:bf:97:58:99:ee:41:33:45:1a:5d:ec:11:
         09:d0:30:d4:67:28:33:0c:31:ed:7c:b0:3f:57:99:59:8a:8e:
         c4:59:80:54:12:91:0b:5a:12:c4:00:16:e5:bc:13:35:ac:ba:
         8f:15:5b:23:a1:11:df:08:f7:d5:51:d6:4f:0b:17:1f:66:1e:
         04:53:1c:12:2f:68:59:ef:3b:4d:1d:28:0e:94:9c:dd:7d:81:
         61:5f:9c:5b:cd:b4:b6:c5:a0:a0:e3:a3:5d:45:6c:2a:de:74:
         5b:bf:08:84:44:fa:60:18:de:58:e3:09:89:1d:9a:f9:a0:b3:
         05:d0:52:86:ad:7b:96:00:4d:cc:98:4c:be:af:b0:e0:ed:ad:
         52:28:65:be:fc:90:c0:3b:75:ae:59:ea:66:f5:46:02:cc:fb:
         48:8b:8d:c6:8d:15:d5:60:0c:70:a1:9c:54:2c:f5:4d:33:8a:
         48:fc:c9:63:44:23:e1:55:6e:9b:ef:82:58:2f:a3:eb:25:94:
         e0:6f:3b:62:71:4b:e8:2c:de:54:13:2d:62:80:b2:9d:7f:95:
         33:d0:59:08:9f:57:7f:8d:e6:d7:0d:55:3b:9b:b3:ef:8e:1e:
         96:ab:87:f3:0a:c2:2f:57:e5:55:9e:14:6e:ee:79:ec:a8:4c:
         33:ba:76:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+vTMZA8mHFgYvI/kxYc0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Yjg5MDViYWM1MzUwMWM1YzcyMDFlMDYxOGRmMGY0NWYx
MTRhNzUwHhcNMjYxMDI3MTkwMTMwWhcNMjYxMDI4MTkwMTMwWjAzMTEwLwYDVQQD
EyhkNzMxNTkzNWJkMTU4MWRmNjEzNTk2ZmQyMDgyNDY2MjY5NmYzZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oEVnNEQVC3AXop3ZJ2TirlDOZcX
1fBf/JOONeCptCLRHjyOeqH5sy9ChB/G7rLIjVwzpYysXervHG1+L4Nbf0e38Q3U
Do6YBc4w8+RFvKgc8R9ExNkMIcz6lLn2ix9CicKYnfdrsEitPi0vlGTToQhRo9M/
nYfdiOiywYzIGKXQzhedyo3Z6w78lAkIuYI0a38248Z4sEfu77LjS6CFngcO5O3j
wxUloHQ5MUhHML/WDfkbrglVzpOOlIbEC4gJlpeTGtUx4FNl8xXbmrNmChaSkKLi
tSAX8weWv3kbe3zknJ/d/L4/rxRfE5dYjjgHNAVvmHqIa+xeGjEUnXf/oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcxWTW9FYHfYTWW/SCCRmJpbz/gMB8GA1UdIwQY
MBaAFBm4kFusU1AcXHIB4GGN8PRfEUp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JpUVc2eFRVQnhjY2dIZ1lZM3c5RjhSU25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kNGI4ZDgtODZiOS00ZmNkLThiYTQt
OTBkYWZmMGJkNGQ1LzEvR2JpUVc2eFRVQnhjY2dIZ1lZM3c5RjhSU25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kNGI4ZDgtODZiOS00ZmNkLThiYTQtOTBkYWZmMGJkNGQ1
LzEvR2JpUVc2eFRVQnhjY2dIZ1lZM3c5RjhSU25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnUe+fsE
v5dYme5BM0UaXewRCdAw1GcoMwwx7XywP1eZWYqOxFmAVBKRC1oSxAAW5bwTNay6
jxVbI6ER3wj31VHWTwsXH2YeBFMcEi9oWe87TR0oDpSc3X2BYV+cW820tsWgoOOj
XUVsKt50W78IhET6YBjeWOMJiR2a+aCzBdBShq17lgBNzJhMvq+w4O2tUihlvvyQ
wDt1rlnqZvVGAsz7SIuNxo0V1WAMcKGcVCz1TTOKSPzJY0Qj4VVum++CWC+j6yWU
4G87YnFL6CzeVBMtYoCynX+VM9BZCJ9Xf43m1w1VO5uz744elquH8wrCL1flVZ4U
bu557KhMM7p2fA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:41 2026 by rpki-client