Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File:                     G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier:          fDG9xGiiwO5//9oNQkDJi59NDwv31LzeL42wClH2w5w=
Subject key identifier:   8F:F2:B9:DE:E2:BD:98:8A:0A:6E:FC:E7:23:07:FC:81:E1:BB:03:A8
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer:       /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial:       01A1807453B23FE152620CC93C5AABDF2397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number:          1AC6
Signing time:             Wed 28 Oct 2026 03:01:09 +0000
Manifest this update:     Wed 28 Oct 2026 03:01:09 +0000
Manifest next update:     Thu 29 Oct 2026 03:01:09 +0000
Files and hashes:         1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: wj7HOIubYOLxDdFKbFRgEqdzS6JAQwDRKx8AYaIlq9I=)
                          2: dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa (hash: FiQzj2IJBDAdsIUNZqGewdZB+7P9vXYxqwfhvf0ZCJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:74:53:b2:3f:e1:52:62:0c:c9:3c:5a:ab:df:23:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
        Validity
            Not Before: Oct 28 03:01:09 2026 GMT
            Not After : Oct 29 03:01:09 2026 GMT
        Subject: CN=8ff2b9dee2bd988a0a6efce72307fc81e1bb03a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:ca:ea:45:3b:f2:a5:e0:5e:6a:ea:3c:69:
                    2d:c6:cb:d4:e2:a1:e5:b3:31:10:fa:d6:f8:6c:cd:
                    7b:5c:0c:1a:3f:c7:ac:48:13:aa:a7:9f:31:51:09:
                    9c:ed:86:24:14:6d:db:5a:f7:d0:1d:ab:0b:7d:77:
                    92:54:54:63:e0:f1:c9:59:dd:a1:ec:70:95:01:25:
                    c3:73:6b:bc:d1:a1:f0:bc:d1:c3:34:1f:3d:b4:2e:
                    16:69:64:47:8f:a1:99:a8:05:60:82:f3:a3:cb:af:
                    49:d4:27:03:81:1f:90:b1:f8:4e:de:e9:b0:5a:2c:
                    4d:4c:6e:09:2f:a2:dd:d6:14:b4:fc:66:6d:0e:82:
                    97:5d:5d:4f:3d:ba:91:78:31:ae:1c:06:34:82:5b:
                    18:1c:2c:45:e0:cf:1d:9c:5b:a6:b7:a1:a6:cc:2a:
                    ce:f4:4b:39:d0:47:f0:0f:1b:48:95:ca:a9:4a:68:
                    09:f0:d4:b0:3e:69:b9:4e:3f:4e:1c:d9:69:0e:9a:
                    93:a9:b5:61:1f:3e:06:f8:eb:78:b1:87:8f:98:1d:
                    33:7d:7c:c1:76:cb:54:3f:af:d7:06:c2:25:e4:97:
                    c6:0b:4f:66:3f:e7:eb:01:7e:3c:b0:ee:ea:68:9d:
                    1f:cd:f5:32:65:c3:12:cf:23:20:1e:ea:44:7d:74:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F2:B9:DE:E2:BD:98:8A:0A:6E:FC:E7:23:07:FC:81:E1:BB:03:A8
            X509v3 Authority Key Identifier:
                keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:8d:c6:8b:10:ab:09:58:16:fb:ed:da:cc:89:0b:0a:9c:
         19:7f:b1:da:50:c9:cc:80:27:a9:35:dc:a6:02:3b:7f:04:56:
         1d:73:3f:ae:e9:17:a2:0d:e8:cf:d3:79:95:84:f6:96:37:7b:
         22:7f:6b:f5:40:fc:8a:68:a0:fd:a4:48:7b:02:e4:d4:9c:bd:
         9f:5f:1b:02:47:20:d0:1e:21:6f:d8:21:1d:9e:33:32:e8:9a:
         c1:38:69:98:56:8d:1b:7f:66:29:e0:18:8a:ba:b9:c0:e6:82:
         1c:04:67:0b:d7:69:a2:b8:94:f1:8b:c9:a3:94:a7:04:c0:40:
         3b:1c:93:4e:c6:8c:cc:5e:80:33:8d:27:84:02:c3:c2:a2:74:
         b0:d5:26:f3:e7:bc:57:be:48:04:1c:c1:30:64:83:04:79:0f:
         ed:f1:f6:22:3a:3b:e3:77:68:2a:b4:b8:67:f6:05:58:b6:83:
         60:5f:35:fb:a4:a4:f9:ac:8e:97:bc:a1:78:03:95:e3:ad:98:
         66:d7:5d:3a:ae:9d:a6:b5:b8:78:51:8b:6a:90:55:6f:ec:d3:
         98:8d:44:47:72:ea:47:f9:73:cb:6e:2c:62:96:1f:78:3e:b2:
         66:53:2e:33:60:77:d4:e3:10:70:a2:14:49:fb:33:21:19:9d:
         eb:bf:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:24:58 2026 by rpki-client