Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File:                     GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier:          QwdivMINERhUox900AcZCooRmoYKUjVXhS22huwFZnw=
Subject key identifier:   BB:88:C6:54:78:5F:F5:50:29:92:64:2B:9B:30:E8:A5:11:68:3B:AF
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer:       /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial:       01A002B8E5B9F62CA6047BFA8DF720373527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number:          1A05
Signing time:             Sat 15 Aug 2026 00:01:06 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:06 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:06 +0000
Files and hashes:         1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: 4IeXrQ3dT9yrQhBHTVoQ3qn7/hXSdG3+N3DNGr0jhT0=)
                          2: cKcEH95-xZkMRq9n8qxJQ8taC0I.roa (hash: 5CGu3gKojPJu4bccEdLgCE4zbwffs6jrhAuLccKD0VM=)
                          3: qOGZnmJn9twBLNZ-YPGtBuaarUA.roa (hash: 8dGXa2ecQGk4C5r7XMrelqu+XdDeVoRN8xB6oD32Evs=)
                          4: r7k-qYwu_gVhVP_qzP1I3k06xN8.roa (hash: Qmj2gAagugrdnVz/mHy0g80G5C8fPaZdzMVSJwy2cLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:e5:b9:f6:2c:a6:04:7b:fa:8d:f7:20:37:35:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
        Validity
            Not Before: Aug 15 00:01:06 2026 GMT
            Not After : Aug 16 00:01:06 2026 GMT
        Subject: CN=bb88c654785ff5502992642b9b30e8a511683baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:55:61:d7:3c:9d:69:19:8b:b2:6f:da:ee:
                    7b:6b:de:ac:b7:93:7a:a7:b8:2d:53:ba:18:e8:a4:
                    c2:55:c0:c5:13:ef:14:3c:31:2e:92:72:3b:d3:20:
                    bc:d1:19:b0:e7:a1:bf:f6:48:9c:84:05:34:88:65:
                    33:ef:f6:47:06:64:ff:b1:aa:1a:a0:e6:0c:5b:1a:
                    09:5d:a7:7c:2c:77:9e:97:48:25:70:6c:a9:62:06:
                    c4:7d:2e:15:9c:a9:02:55:4b:8b:a6:81:fc:ca:38:
                    1a:62:aa:7e:4e:94:a7:d6:18:55:30:96:79:f0:f8:
                    b4:88:4e:fc:3b:ca:af:69:e1:13:d7:ab:f9:e9:a3:
                    38:f1:5f:34:3f:fa:af:c7:77:6b:a3:ef:c5:ad:f8:
                    49:ae:80:de:85:20:e2:15:ec:84:96:5a:4d:a5:c2:
                    2f:4e:cb:17:b6:b8:39:44:76:01:7f:2a:0d:bb:24:
                    63:a6:0c:42:ea:a0:e9:05:b5:ee:8f:c9:fe:7b:96:
                    47:d2:c0:ec:44:26:8c:5f:22:6c:75:1e:c4:db:51:
                    1d:b1:e2:a3:f1:36:ee:5b:66:4c:b9:c3:82:69:fc:
                    7e:f2:b3:20:1d:7f:b8:42:1c:6e:d3:ae:59:9b:17:
                    64:6f:73:bf:00:0e:61:a1:d3:4a:62:53:eb:1a:90:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:88:C6:54:78:5F:F5:50:29:92:64:2B:9B:30:E8:A5:11:68:3B:AF
            X509v3 Authority Key Identifier:
                keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:ee:86:e3:ac:bf:6b:c1:9d:c1:cb:56:8f:2a:dd:42:ee:
         00:82:36:66:31:3f:35:5a:bd:c8:e9:02:4f:a4:3c:91:82:ec:
         ac:a9:79:6b:c5:6f:0f:dc:c2:b8:c6:e2:75:cb:a1:bd:7a:f6:
         8c:a9:1c:6e:31:57:6e:1e:c7:48:da:de:ab:b8:49:c3:3e:31:
         5a:44:74:8d:e0:ca:69:4e:46:4e:07:ac:6e:17:c9:39:19:f1:
         34:9b:6d:41:de:da:92:58:47:df:cb:0c:70:0b:55:b7:de:58:
         1c:d2:a2:a4:c4:21:70:1a:31:ee:0c:2d:09:60:46:61:a1:ac:
         b1:2a:ad:e5:eb:a7:3b:c7:7c:2f:e9:d9:15:4e:ce:69:18:8f:
         2e:37:06:f2:71:ea:bd:d9:f8:34:96:86:42:5b:4e:d4:db:4f:
         0c:d5:9e:76:9e:d4:e5:fe:33:ea:49:c9:99:12:93:26:67:91:
         b7:3d:89:62:a2:c0:9f:40:56:76:73:47:3c:c1:e1:8e:ed:e8:
         df:70:bc:1f:aa:89:a3:8f:5a:c5:60:98:be:46:aa:53:03:87:
         1a:da:a9:bc:65:8d:32:1c:01:1b:64:a0:27:bf:90:7f:4a:36:
         f8:44:fc:18:1c:7e:be:1d:47:b8:3d:8b:cc:60:6a:a3:34:fb:
         0b:50:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:53 2026 by rpki-client