Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File:                     GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier:          k17Bduu10eoY4yPKw+zt0hS9BiM8XTsQLZMBm37o5rs=
Subject key identifier:   6D:7D:EF:23:B2:20:F8:76:7F:52:68:62:70:AB:63:F4:33:0B:E6:D5
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer:       /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial:       01A12466E8C2869C49EE4871EAD7DD1520E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number:          18B6
Signing time:             Sat 10 Oct 2026 06:01:26 +0000
Manifest this update:     Sat 10 Oct 2026 06:01:26 +0000
Manifest next update:     Sun 11 Oct 2026 06:01:26 +0000
Files and hashes:         1: C_loy0B7_p9VbknMqKT5_-soGMw.roa (hash: lXBtx5TCEhT3yUAY172G+wMVb0Mu6qGMrAg/+UmSriM=)
                          2: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: 4jPq1yAxVKhRjX0ydFiNXpNOAxfFHpjqN0skszVfVZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:66:e8:c2:86:9c:49:ee:48:71:ea:d7:dd:15:20:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
        Validity
            Not Before: Oct 10 06:01:26 2026 GMT
            Not After : Oct 11 06:01:26 2026 GMT
        Subject: CN=6d7def23b220f8767f52686270ab63f4330be6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:e7:43:8f:f4:69:b9:25:cb:30:f7:c6:3b:
                    15:46:86:99:f5:fc:52:83:ab:a5:be:ff:7e:d0:b3:
                    1a:eb:2f:6c:2d:77:31:b2:1e:ac:b8:a2:79:b0:c2:
                    53:66:e4:ae:9d:b5:9c:88:87:a8:79:28:af:59:41:
                    de:ef:dc:f1:d5:8e:5c:d6:a3:71:e6:98:6c:cf:d2:
                    30:18:aa:75:ec:b8:4c:da:04:0f:00:5d:08:4f:4c:
                    bd:92:32:13:9f:f2:27:98:fb:8f:b5:7c:93:14:d6:
                    86:a5:22:9f:4e:e4:3c:68:a4:89:cb:ea:9f:43:82:
                    63:6b:56:7d:08:22:45:6d:50:60:fa:da:a2:51:13:
                    9d:f1:e8:c2:2c:cc:93:80:a0:e9:9b:78:df:ca:de:
                    7e:ec:b8:3a:40:c7:a1:72:b1:53:4b:5d:b7:f5:a8:
                    79:cf:02:b2:5f:40:df:84:2d:8f:01:5f:b4:9a:f2:
                    23:8c:e0:6f:96:a1:ba:b0:4b:2d:15:9f:7f:78:4f:
                    99:fb:18:03:73:35:7a:fa:1d:85:d1:47:c6:bf:21:
                    0e:f2:a4:fb:a9:3c:7a:ec:8c:4e:73:34:c4:a6:8b:
                    e6:1f:38:42:44:f0:c2:3b:63:73:4b:0b:ac:ee:ab:
                    7e:1a:c4:7e:18:b5:89:12:b5:41:0e:cd:86:53:81:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7D:EF:23:B2:20:F8:76:7F:52:68:62:70:AB:63:F4:33:0B:E6:D5
            X509v3 Authority Key Identifier:
                keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:16:1e:c7:81:cf:7c:46:db:1b:33:2b:96:23:1d:b3:d1:
         9b:c3:74:b8:0d:aa:49:b0:f6:8a:d9:9e:c9:98:64:3f:2b:36:
         5e:54:41:c8:11:61:ad:f6:e6:a6:29:03:bd:df:ff:b0:81:6b:
         3a:35:87:2a:77:cf:11:99:45:ab:43:34:c8:60:29:01:11:d7:
         7e:d6:14:01:72:34:a8:7b:33:f3:dd:89:97:d1:1f:a2:68:be:
         e9:71:86:11:d1:28:0d:90:cb:0c:dc:74:c5:e8:0b:04:15:ff:
         8a:cc:dd:48:36:46:f3:07:d6:fb:b2:14:51:70:68:b7:d6:12:
         f8:e5:00:e9:62:d9:e8:f7:8d:a4:7f:c1:31:f3:69:d3:0f:1c:
         88:c0:fa:91:90:96:03:da:d9:12:f1:00:8b:a1:44:26:8d:da:
         43:12:44:16:b2:98:0d:a8:09:3d:8a:95:1c:80:2b:da:a5:d2:
         29:18:52:d3:33:22:af:1b:f8:24:f3:6a:82:20:48:e3:65:e0:
         8e:93:92:d6:e5:58:98:0b:04:d2:2f:65:49:24:fe:43:88:d9:
         e5:be:2b:aa:13:39:57:29:6e:fa:b9:b8:30:39:9a:ae:25:45:
         6c:d1:72:4c:ef:c6:35:43:1d:84:ed:05:d9:fd:22:01:45:98:
         cc:76:35:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:18:06 2026 by rpki-client