Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
File:                     gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft (raw, json)
Hash identifier:          iFD3kDb+gGxj8qUGrKR3k357FfY7g5Y27P5yq/R2cTc=
Subject key identifier:   AB:D7:E1:5F:5C:37:FF:70:8E:BF:EA:CA:F6:4E:6C:95:BA:2B:D7:3C
Authority key identifier: 81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75
Certificate issuer:       /CN=81062dce1a791e7341d5f4259811ab4d65f6b075
Certificate serial:       01A17A717F69915D08403057BBF37E926632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
Manifest number:          1655
Signing time:             Mon 26 Oct 2026 23:00:20 +0000
Manifest this update:     Mon 26 Oct 2026 23:00:20 +0000
Manifest next update:     Tue 27 Oct 2026 23:00:20 +0000
Files and hashes:         1: gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl (hash: C/RUlwamiQg2y/sV2jZFb6CFY86Jw9bcrxfQ3cctidc=)
                          2: vaFLq2PS-Ze0CGgub62mzNljBjk.roa (hash: /5UMsBynyn/kGaKMuuHPXeXo9vSUE24CvsJczMrXDeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:71:7f:69:91:5d:08:40:30:57:bb:f3:7e:92:66:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81062dce1a791e7341d5f4259811ab4d65f6b075
        Validity
            Not Before: Oct 26 23:00:20 2026 GMT
            Not After : Oct 27 23:00:20 2026 GMT
        Subject: CN=abd7e15f5c37ff708ebfeacaf64e6c95ba2bd73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:5c:e1:51:0d:1e:3e:f5:d4:12:21:f2:40:
                    2c:67:7f:00:88:cc:00:71:81:20:43:9b:8d:37:1a:
                    95:9f:60:93:4a:a4:50:65:b0:34:3b:d1:32:6a:35:
                    61:c2:c7:d9:8a:f1:04:13:33:7d:20:d6:40:f2:3e:
                    43:6b:ed:43:6a:cf:25:25:f0:74:b4:07:f9:7c:c1:
                    1a:e6:69:73:58:73:12:e1:1f:23:a5:da:71:4c:c2:
                    ae:c8:8b:2f:fb:18:7d:4a:24:d4:d7:74:e3:05:1b:
                    37:f4:c8:24:77:d4:45:f8:c8:6f:4b:4b:63:cb:d9:
                    38:a6:6d:9e:ba:98:b0:af:86:7b:97:72:41:9c:37:
                    36:70:f7:0b:f5:95:75:11:f1:0e:2e:ae:dc:83:59:
                    78:8c:98:81:17:43:5f:f8:4a:74:aa:f6:ea:16:0b:
                    2a:31:72:c2:89:9c:34:56:c1:14:5b:14:5b:0e:ff:
                    f7:a4:89:8f:a6:1f:98:d6:f0:45:c3:91:17:d5:1b:
                    e5:43:75:39:96:db:c7:be:54:18:bd:a6:98:ca:63:
                    e6:12:5f:f0:85:9d:c6:ed:24:fb:e1:97:77:51:f0:
                    5a:67:7f:34:2e:55:c0:5c:db:3f:10:2e:c0:e8:70:
                    7a:87:3b:f3:25:9c:46:20:7e:cc:68:f2:34:6a:43:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D7:E1:5F:5C:37:FF:70:8E:BF:EA:CA:F6:4E:6C:95:BA:2B:D7:3C
            X509v3 Authority Key Identifier:
                keyid:81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:b1:f9:52:73:1c:9a:d7:5d:86:0b:22:70:48:f5:d5:cc:
         34:ac:3b:d1:16:d2:53:de:3c:ac:8d:50:0b:fd:e9:69:b0:4c:
         98:a6:e7:ef:e1:b6:60:ca:19:ab:cf:6d:9c:98:ca:fd:89:fa:
         3e:05:e9:24:0a:16:aa:d5:ee:10:90:c9:88:ad:90:ad:3e:8d:
         a9:f7:45:bd:b3:ad:72:4e:48:43:51:f5:f8:ad:fc:8e:81:73:
         5e:16:0f:25:d8:b8:0d:88:ae:52:69:d6:93:56:38:85:06:b0:
         c9:79:c9:17:cd:a4:39:1f:ef:90:73:06:96:d6:7b:6d:0f:d3:
         5e:d1:84:1c:b4:34:6a:74:56:54:bd:ad:06:4a:3b:0b:65:c5:
         b1:e9:a8:4f:0d:a2:37:f4:e8:e1:20:97:dc:9a:9f:98:8b:88:
         ab:cf:ad:ba:23:c3:0f:18:50:6b:ea:f3:da:44:80:3e:c0:d5:
         95:6e:c9:0e:b2:d9:db:3e:01:fe:23:a0:6c:d5:43:43:f6:5a:
         be:34:e9:3c:49:30:d3:17:08:51:95:b2:28:a6:53:a0:58:5e:
         50:7c:03:56:9c:9b:47:5e:98:4e:94:e8:46:00:55:69:f2:98:
         a7:ce:f7:9d:3d:45:30:f7:9b:68:d5:67:e8:9a:af:3d:92:f5:
         c5:4d:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:46:35 2026 by rpki-client