Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File:                     gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier:          9qxQ7gAiQHyTmCKsiggt0Tyu346HpJQm3xD5wTaNDWY=
Subject key identifier:   90:13:0E:01:01:FF:46:A8:60:0E:E5:A1:86:56:1A:E9:61:41:FC:97
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer:       /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial:       01A17702DF8DADC6B611B3B84F23A27B66F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number:          01CF
Signing time:             Mon 26 Oct 2026 07:00:39 +0000
Manifest this update:     Mon 26 Oct 2026 07:00:39 +0000
Manifest next update:     Tue 27 Oct 2026 07:00:39 +0000
Files and hashes:         1: LpMnQmkW8eK1z14dUTCVF0MYEHc.roa (hash: P2Gc+4XzB+nZwbiFLhbDc9T1+zG9R61PeCv2JvqaWck=)
                          2: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: 5mm+eNAYM1mOTP+bpA9yvdOBo/q+3KdBs9SKie+5HBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:02:df:8d:ad:c6:b6:11:b3:b8:4f:23:a2:7b:66:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
        Validity
            Not Before: Oct 26 07:00:39 2026 GMT
            Not After : Oct 27 07:00:39 2026 GMT
        Subject: CN=90130e0101ff46a8600ee5a186561ae96141fc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:4c:8f:65:7d:53:71:25:57:06:60:2b:a9:
                    04:ac:98:9e:da:62:73:67:72:e2:e7:74:b0:8b:ed:
                    b0:b2:06:8d:23:84:8e:ec:8f:2d:13:26:a9:01:d6:
                    4c:ee:03:a5:c5:d5:4c:1f:25:e9:18:ac:b5:c3:ee:
                    50:e2:3f:f0:15:ed:03:c0:a3:43:fc:cd:93:5a:0f:
                    73:49:f4:17:6c:ac:8a:14:14:dc:af:c7:f9:8e:69:
                    9e:c0:6e:e6:e9:c0:50:dd:89:38:13:01:9f:1e:ce:
                    df:7b:fd:20:3d:74:9d:6f:ae:a8:ce:bf:df:05:78:
                    2c:b0:d9:58:c2:fb:78:cc:0d:33:b3:c1:20:56:80:
                    45:3e:7d:3f:1c:a6:2e:d2:71:ab:15:42:56:5f:69:
                    48:30:f0:28:56:65:99:97:f3:94:80:dc:6c:69:b1:
                    52:57:bf:27:9d:2f:45:29:b4:65:91:0f:b7:34:b1:
                    42:14:73:e6:3c:e8:19:bf:2d:ec:cf:30:da:6e:88:
                    8f:40:44:4e:d9:49:17:a5:3c:88:c1:d3:76:1a:2f:
                    d4:33:cc:77:1e:63:12:d9:c5:d9:82:2e:9f:ed:6a:
                    7a:77:fe:b6:ea:6a:68:ef:89:53:45:e8:ac:c9:de:
                    8a:7e:86:e2:fd:e1:45:8b:95:ec:38:28:61:72:2b:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:13:0E:01:01:FF:46:A8:60:0E:E5:A1:86:56:1A:E9:61:41:FC:97
            X509v3 Authority Key Identifier:
                keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:73:60:8a:2e:49:fa:0b:90:4a:99:63:8c:98:ef:1f:77:
         82:55:de:2b:e9:56:e5:fe:ba:30:f6:78:94:6c:83:ce:5f:79:
         cf:bd:ec:a5:38:80:68:84:9b:82:9f:bf:32:a5:e0:ac:29:fa:
         fb:c4:0b:b0:12:2d:9e:23:eb:02:f9:94:4d:4c:e3:ca:ed:9a:
         44:48:d2:70:e3:3a:62:ec:a2:35:a2:8b:20:ee:fa:74:dd:de:
         2d:7e:b2:65:7b:3d:e3:c6:56:58:f9:d5:bb:ab:8c:a2:b1:42:
         4e:71:61:8e:2e:d8:db:92:76:50:9c:43:b6:1a:ec:c4:32:34:
         bf:af:05:7a:97:c6:b8:8a:e3:9d:9c:ae:2f:e1:cf:ed:09:5a:
         f5:10:c3:9e:4a:34:67:f4:b2:93:b4:2e:55:d8:95:3b:51:4c:
         34:73:af:99:70:ec:61:44:63:f1:5d:c7:70:dc:3d:36:d0:32:
         9d:c2:2b:65:b5:83:0d:7d:25:a2:79:ca:cf:f4:68:2f:1f:37:
         5f:de:86:5f:4f:1d:2d:36:92:f5:7e:a6:33:b2:3a:fd:30:a3:
         8b:16:ce:26:49:0f:94:5d:f3:64:e5:8e:e7:c1:77:32:dd:79:
         a7:ef:c3:c1:7d:d9:44:55:56:87:d6:db:7f:7a:62:51:79:04:
         b5:4d:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:52:46 2026 by rpki-client