Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
File:                     Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft (raw, json)
Hash identifier:          qxtm3Bk9/ckT0jkNaTcWiIMUw2aA2usmH/85qZpmeWg=
Subject key identifier:   D4:7D:FA:99:60:4B:15:C0:63:D6:91:14:1B:43:C1:4B:D6:CA:03:6F
Authority key identifier: 1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
Certificate issuer:       /CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Certificate serial:       01A08AFA54DC0FBE8ED8E18668780B8A3A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
Manifest number:          1A44
Signing time:             Thu 10 Sep 2026 11:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:56 +0000
Files and hashes:         1: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl (hash: 25ihh8XvAmm0lZMnLGTyanWuYb6vMpJQ2bE1jC/XUeI=)
                          2: l97Dui8c8NGGXwj8ZGvsNrMVmQ8.roa (hash: L0nSl6w8NFmZ6xiyZGLVSsN/XXDBn3eOQidAlDJvDmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:54:dc:0f:be:8e:d8:e1:86:68:78:0b:8a:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
        Validity
            Not Before: Sep 10 11:00:56 2026 GMT
            Not After : Sep 11 11:00:56 2026 GMT
        Subject: CN=d47dfa99604b15c063d691141b43c14bd6ca036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:5b:25:9c:dd:34:40:0e:b1:fc:6c:51:81:
                    c6:f1:38:53:6f:47:6f:70:b2:01:7a:c3:6b:b5:4b:
                    b1:42:fe:ba:93:bd:2c:60:8e:e7:1c:dd:3f:fe:0e:
                    6e:4f:80:a4:8f:08:8f:30:86:16:d9:83:63:57:7a:
                    1b:5e:b3:66:40:1d:33:52:a3:43:39:af:87:ad:c5:
                    a7:65:4b:17:52:bc:fa:a9:ad:7d:52:8b:6b:77:d1:
                    24:40:d4:66:e4:c1:03:39:ed:da:d8:44:7e:61:93:
                    e8:42:86:1c:54:4c:48:26:97:60:d3:5f:13:2b:a9:
                    4c:14:a2:6e:4d:7a:9a:5e:ea:21:32:b3:1b:eb:6c:
                    98:a1:7d:ce:56:fa:7a:1e:24:a7:7e:56:b0:11:e0:
                    89:86:77:f5:54:39:c0:01:c2:d4:70:62:58:2b:6d:
                    96:56:7c:70:55:83:73:1d:97:5c:da:26:b9:d5:67:
                    32:50:85:dc:89:85:07:4c:1e:72:3e:53:03:b1:f6:
                    10:6a:bc:44:f2:ea:f1:b3:b7:ad:5f:27:e6:64:50:
                    34:2b:a3:02:31:72:87:3b:61:d3:cd:13:a5:28:e5:
                    86:08:bb:bc:8f:47:d9:6a:ed:25:17:27:1b:8e:a7:
                    c2:f0:43:3d:40:74:6c:c5:ab:5b:c8:9a:aa:59:f6:
                    32:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7D:FA:99:60:4B:15:C0:63:D6:91:14:1B:43:C1:4B:D6:CA:03:6F
            X509v3 Authority Key Identifier:
                keyid:1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:42:c8:1e:11:0d:0a:25:21:df:00:82:a9:f1:b2:61:32:a8:
         40:9d:7a:01:65:a6:fe:c6:30:1b:4c:1f:81:32:e4:40:c2:71:
         27:ba:ff:48:77:ca:5d:dd:4b:f0:66:be:69:94:57:0a:49:b6:
         82:2f:05:1f:e5:43:5b:20:17:c7:14:51:2f:90:a3:1c:74:65:
         f1:92:9c:a3:21:d4:0a:5a:61:ef:ae:3f:ac:d6:5b:0a:65:3b:
         35:7b:84:4b:da:d4:03:3b:ab:2f:c3:f8:f5:6a:de:bf:b2:86:
         8f:85:6d:dd:28:25:01:2a:d1:50:c9:4d:d1:a3:68:92:a7:17:
         67:1a:8c:9f:91:79:34:62:f9:de:8e:14:be:47:a5:8f:de:4a:
         0e:8a:d2:ea:50:c8:65:c8:d8:f8:59:21:31:98:d5:55:f5:00:
         25:ef:63:a6:10:26:df:35:79:20:3c:db:27:74:9f:ff:c4:c1:
         85:ac:ee:38:2b:54:de:9a:59:ab:40:3c:4f:10:26:02:0d:5b:
         20:55:19:7d:c0:a4:4a:01:a1:e9:3e:df:07:a9:7d:50:02:8f:
         78:84:5f:35:d4:62:1b:e2:72:0b:f4:7a:c0:d5:ba:ca:3a:26:
         14:c0:05:ee:11:33:fd:a3:43:8e:cb:6d:27:ac:c2:1e:29:8a:
         ac:f2:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:03 2026 by rpki-client