Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File:                     Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier:          moTNZ4tR95xcs8RJKSLnALVvnEsPxtRc+N4pZ612pF4=
Subject key identifier:   35:7E:68:C0:3C:84:90:30:2C:A9:65:49:65:FB:1A:E0:2C:58:3E:BB
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer:       /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial:       01A08C7A8CBB71CA51CF7A9B7F27938DC8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number:          1A44
Signing time:             Thu 10 Sep 2026 18:00:36 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:36 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:36 +0000
Files and hashes:         1: E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa (hash: DBcvB5VPooiTXjGKSVqOi+hUE2hv4iu9s06iz8E2+EI=)
                          2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: jUo3DpZfnx8AGhKHFlVnttDytGWLAysr5FgDV0WEFlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:8c:bb:71:ca:51:cf:7a:9b:7f:27:93:8d:c8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
        Validity
            Not Before: Sep 10 18:00:36 2026 GMT
            Not After : Sep 11 18:00:36 2026 GMT
        Subject: CN=357e68c03c8490302ca9654965fb1ae02c583ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:d1:f6:22:ab:eb:e4:1a:57:a8:9e:ce:ca:
                    e2:91:12:11:bf:a0:7d:05:27:55:20:97:f0:28:c5:
                    45:ff:53:5b:50:6b:f0:31:b6:fd:f5:4a:6d:39:4f:
                    93:3a:ee:62:34:82:c9:87:4e:72:58:32:20:7a:73:
                    2b:34:ef:cf:b1:01:1c:4f:88:fd:11:a0:97:8b:5f:
                    6e:0c:a9:eb:31:d1:5a:7c:ce:3b:ce:af:cc:a7:9a:
                    a3:53:69:80:a8:aa:4f:4a:9e:b3:32:dc:ac:73:90:
                    c3:9f:ec:08:77:25:bc:79:ae:e1:dd:87:23:eb:11:
                    44:26:f7:a2:59:97:36:3b:cd:e6:7b:1f:dc:01:e9:
                    5e:18:61:f5:7c:63:17:7e:c2:5a:2a:6e:9d:5c:9c:
                    21:ad:ef:bf:55:7b:cc:08:05:bb:18:0b:20:13:43:
                    66:49:a1:12:4a:da:bb:ed:14:39:36:d0:9d:88:2a:
                    65:8a:d5:0c:e3:28:cc:e4:f7:4c:3f:13:4d:be:21:
                    51:2d:35:74:a4:c5:26:0f:17:4f:4b:b2:d0:8b:b0:
                    b8:c1:bb:ef:93:0a:93:54:e7:77:ae:ab:62:ac:ec:
                    7b:64:6a:66:51:25:ea:48:23:bb:47:e7:7a:c5:fa:
                    69:d8:92:9a:58:ef:b5:f9:e3:5f:0f:65:f1:b4:05:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7E:68:C0:3C:84:90:30:2C:A9:65:49:65:FB:1A:E0:2C:58:3E:BB
            X509v3 Authority Key Identifier:
                keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:29:b9:ef:ad:23:60:bf:fe:46:52:2b:bc:ee:1f:75:44:
         d8:03:ff:f6:e8:af:b1:75:8d:5b:b3:ca:02:ba:40:52:68:42:
         e1:2f:0a:b9:a7:51:8c:73:06:3f:4a:27:f6:4a:3c:b1:e8:07:
         75:44:bd:f9:a7:96:44:52:3d:3e:20:7b:8b:df:bb:b4:a6:d1:
         8d:6a:32:4d:a6:70:ea:c9:91:b1:c6:63:fa:0e:09:26:84:be:
         71:c3:f2:26:30:91:d3:e3:90:fd:4c:50:02:b8:76:f5:db:4f:
         c6:60:30:2c:ad:31:69:b7:76:06:f0:72:46:23:5e:dc:9e:81:
         37:f1:18:73:87:13:b0:dc:21:2d:2e:ff:18:58:09:09:e6:75:
         fb:7e:d3:51:a5:47:77:8a:25:45:8e:9f:32:f4:65:98:ac:3a:
         47:97:40:9f:28:e8:21:54:61:4f:5e:9a:83:fd:3b:9e:cc:81:
         8e:c8:99:5c:f8:c4:54:ac:6e:e1:3e:bd:17:f1:00:2a:bc:28:
         6e:9e:a0:5e:3d:21:7b:41:67:38:46:c3:4a:a9:e0:8f:5a:75:
         d9:f8:4c:e3:70:31:05:1d:dc:2f:34:6a:14:30:35:96:79:f6:
         67:87:45:66:a0:82:ed:12:c4:a0:72:3c:98:82:a8:cb:45:26:
         c0:46:a2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:33:10 2026 by rpki-client