Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
File:                     GoJXc-kkMy6e5aRPyry6avE1yvA.mft (raw, json)
Hash identifier:          Mlus83VFaELkKjKcp9P5vZ3G7vx6Nvtf1ls1zMI7XV0=
Subject key identifier:   AF:F0:8B:8F:37:C2:8E:FA:D5:A7:D1:58:72:6C:BE:DC:FC:06:55:82
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Certificate issuer:       /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial:       01A1163CCC113DA5A62A1360F2FBA6344EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
Manifest number:          F8
Signing time:             Wed 07 Oct 2026 12:00:45 +0000
Manifest this update:     Wed 07 Oct 2026 12:00:45 +0000
Manifest next update:     Thu 08 Oct 2026 12:00:45 +0000
Files and hashes:         1: GoJXc-kkMy6e5aRPyry6avE1yvA.crl (hash: mbztn227htRvHNvAqm7WmibhmtZBAU6UM2aSkjPPO7o=)
                          2: caspFMJZJD-i0t3tee0YjZ1lkAI.roa (hash: gASmiMFvSfOAn2nz4guY4aoPVKVMWp+u918PhFSqz48=)
                          3: ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa (hash: lr9SiZAxytRoSZDzBrTYj7nLRcvRM5Ct8mwl/09v1jc=)
                          4: iULSu1XOMW528tmeTQYP8c_wAb8.roa (hash: RURInJ6+YkolxYt5T8//7OYPXS8SUDD30iDV+JQ/+4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:3c:cc:11:3d:a5:a6:2a:13:60:f2:fb:a6:34:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
        Validity
            Not Before: Oct  7 12:00:45 2026 GMT
            Not After : Oct  8 12:00:45 2026 GMT
        Subject: CN=aff08b8f37c28efad5a7d158726cbedcfc065582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:ed:93:af:af:63:93:c3:75:fd:84:bc:3f:
                    24:b0:30:cd:b0:e8:ee:bb:ca:b3:ab:2c:4a:f8:7b:
                    c9:1f:bf:05:e5:b4:81:74:c7:4a:d7:d3:86:40:e4:
                    07:6f:44:e4:aa:a5:69:8f:9e:3a:69:91:a2:e5:09:
                    4a:94:65:36:ea:e3:e9:0d:30:c1:93:76:18:e2:34:
                    01:fc:e1:15:06:be:2f:cb:fa:cb:58:dd:1c:87:ef:
                    42:d1:f2:72:31:93:33:d7:cd:94:25:a6:d1:7f:61:
                    02:ba:48:17:54:38:da:63:51:96:9a:51:c6:27:86:
                    62:cd:3a:c4:b2:dd:2e:b6:7c:3d:16:25:da:8e:a7:
                    e5:9a:43:a8:af:d0:1c:51:27:2d:86:e6:f1:b3:d2:
                    2a:83:ad:7d:fb:7f:29:5f:74:24:02:0d:59:61:9b:
                    6d:7f:53:5c:42:78:ae:b8:6a:19:7c:8e:3c:3c:0f:
                    0b:ec:05:fc:82:a9:de:61:80:5d:57:c1:78:06:db:
                    61:e5:35:53:b7:a6:db:94:c9:a8:75:3a:1f:9d:ed:
                    27:0e:a4:dc:8a:f9:ee:f5:ba:fb:57:e8:5b:bb:4b:
                    3f:0b:c9:9a:e9:70:63:f8:38:60:83:6f:46:07:b6:
                    e1:ac:ca:23:9e:c3:27:9b:fe:af:f3:15:a6:9a:f7:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F0:8B:8F:37:C2:8E:FA:D5:A7:D1:58:72:6C:BE:DC:FC:06:55:82
            X509v3 Authority Key Identifier:
                keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:58:a5:af:b1:75:85:d8:9c:c5:be:99:3d:40:21:9f:84:73:
         55:7c:fd:34:d7:72:81:a9:82:9d:5a:b5:69:d6:28:2f:d5:0c:
         53:f3:78:c8:ab:82:a4:69:ba:d2:4e:c6:68:ca:ea:cf:aa:bf:
         cf:1c:a0:c9:db:af:e3:a7:28:dc:a7:16:25:bc:40:0c:d4:af:
         d2:98:1e:e2:a5:a7:95:08:85:2f:72:d0:20:b3:e6:28:a1:03:
         91:9a:c5:c1:7b:78:b4:5f:20:63:1b:91:f4:99:7a:92:d8:07:
         0d:7b:5a:49:2e:c3:67:fa:7e:60:d3:9e:db:7e:af:84:02:16:
         9c:55:72:50:b6:e1:d0:b3:8e:e8:27:c1:6b:3b:ad:cd:e0:3a:
         ae:15:e1:99:b6:ff:74:b5:20:6d:6d:06:5a:f5:88:c0:4a:04:
         45:66:17:25:e3:b5:77:25:0a:af:35:7b:0e:32:cb:f3:c8:cd:
         42:08:81:3d:f7:8d:0a:e6:7d:dc:74:e0:2e:a9:26:19:cc:48:
         4c:7d:bf:e0:00:e7:d5:71:02:75:d6:db:99:db:92:2f:4f:63:
         16:e5:c1:b0:20:bc:b4:30:e3:1c:ea:20:7c:b3:6e:5e:ea:77:
         72:e4:b7:50:73:f4:b4:75:00:66:dc:19:b2:e2:8a:e7:7c:c9:
         08:7a:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:30:02 2026 by rpki-client