Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
File:                     gGcKCuUZoyz9hbowc3yOPQfEvM4.mft (raw, json)
Hash identifier:          TurHr6YcBjgWew1X8QTk/n5BjSploXasck4fvBha2rE=
Subject key identifier:   24:3C:0A:1C:68:67:6D:8F:93:B4:75:AC:9B:FA:16:56:BD:44:76:1B
Authority key identifier: 80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
Certificate issuer:       /CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Certificate serial:       01A1781578EF50FC89210855864A280DF69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
Manifest number:          013C
Signing time:             Mon 26 Oct 2026 12:00:35 +0000
Manifest this update:     Mon 26 Oct 2026 12:00:35 +0000
Manifest next update:     Tue 27 Oct 2026 12:00:35 +0000
Files and hashes:         1: 4bGr-yXBWayGcjl1qM4F7v2Bc2M.roa (hash: eCKqYMCveD4+cT5IE20UBn+5fdkZH3p4iIVGa8fR06o=)
                          2: 7KMei89cF5bMU_4TaRPp6g42s1E.roa (hash: NRXPLOV3OLAB5gs1dIMy5Wr/b2KoynjrFtKRrh8XYUo=)
                          3: 8oTK3TC0D2Jp0RoOQfL5lALHOb0.roa (hash: bDWj0S7zTHlaNQd9wpyLKfimVq/tWXy8hbrpF7M3lP8=)
                          4: GYKQ0334-OMW8rJhiyMdFoDF1bA.asa (hash: YAXSLUp33H5lCmvEZdnmSsgUIL8C1t9c3ekAGHDBNDg=)
                          5: MkOrn3cx2BQqm02t_vueOKsFKPk.asa (hash: 8g1RjrvQ79n3k/tOZkjWDSSi6fzCwbwd+67DGegC7ZY=)
                          6: gGcKCuUZoyz9hbowc3yOPQfEvM4.crl (hash: HrinpIlQR317J6o21lIfLvK7sGFqpZRX+/RMQrjwUyE=)
                          7: o-m7cT62SUN3tXUWb6144IEDJko.roa (hash: GUeFgCZSQLXdFp7pq8g4v2HhOf5ueahzNXG4APOlM3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:15:78:ef:50:fc:89:21:08:55:86:4a:28:0d:f6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
        Validity
            Not Before: Oct 26 12:00:35 2026 GMT
            Not After : Oct 27 12:00:35 2026 GMT
        Subject: CN=243c0a1c68676d8f93b475ac9bfa1656bd44761b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:7f:b9:41:6d:b4:be:32:7e:50:84:b4:9a:
                    c2:12:a2:e8:10:b3:fd:88:ca:fd:b3:35:ee:c2:07:
                    97:d9:97:dc:06:3f:89:4c:74:65:d6:21:1b:7d:28:
                    49:06:cc:60:3b:f3:ca:3c:18:7e:c1:f6:b4:b4:82:
                    c9:74:05:fa:50:f6:8e:7e:3c:75:33:8d:a1:a7:b3:
                    6f:a5:0a:e9:f6:41:61:c2:68:cb:0e:fe:9b:8f:d2:
                    f7:87:fb:47:2d:a1:ce:b0:52:ec:82:84:52:43:40:
                    95:dc:f3:43:be:5b:8f:a3:96:71:03:0c:e0:61:a7:
                    ea:9c:cf:13:57:32:fd:fa:bf:78:bc:2b:3e:45:00:
                    ff:48:06:ef:49:fd:82:a5:39:c4:83:32:1f:06:5b:
                    c5:f3:41:c7:9e:7e:bb:0f:ca:5a:5a:dd:82:be:7b:
                    17:7f:84:0a:b0:a2:b6:e9:c5:8d:b3:e7:07:d9:32:
                    5b:b4:cc:c2:3a:42:c3:6b:5b:f4:2b:f6:c8:c3:95:
                    da:ec:a6:15:82:1c:10:0d:6a:e3:e9:a6:96:1d:00:
                    5c:9c:d0:71:f9:e7:39:ad:82:3a:73:71:44:84:63:
                    b1:5d:30:35:fd:6f:96:ae:f9:a6:b0:b6:15:73:03:
                    91:68:36:70:ba:9a:39:6b:82:fa:c7:61:b4:dc:25:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3C:0A:1C:68:67:6D:8F:93:B4:75:AC:9B:FA:16:56:BD:44:76:1B
            X509v3 Authority Key Identifier:
                keyid:80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:67:98:99:64:3b:ee:55:ea:39:f0:27:9a:be:01:20:9c:1e:
         da:66:f6:ac:02:c0:89:48:33:ee:67:2f:b5:3f:81:bd:83:d6:
         ba:77:2c:5f:e1:12:e4:a5:36:05:fe:ee:63:c5:ed:66:90:05:
         a3:9e:0b:c7:4f:4f:16:2c:b5:11:8e:f6:a3:f1:e1:66:49:1e:
         8f:47:3e:db:7d:99:92:5d:99:10:8a:01:fc:3f:2a:9b:5a:cc:
         70:45:13:53:01:0c:cc:3b:ef:9d:78:95:07:be:13:16:6b:f9:
         68:df:f5:8a:57:42:ec:ce:e6:06:dc:db:11:39:d4:15:0c:3e:
         64:16:60:10:88:33:ff:45:b6:e9:a8:93:3a:f9:ba:ce:16:a7:
         be:64:d9:11:ae:f1:b3:96:b1:eb:8d:e4:f4:dc:bb:02:d6:46:
         f2:f0:fe:f3:2e:87:6f:b7:ac:bf:3e:a1:56:7d:1f:72:5e:17:
         d6:0f:03:21:96:0e:b9:2e:bb:29:e5:8e:ad:b2:30:d2:80:33:
         16:f3:09:40:17:f1:87:7a:25:07:0f:c4:55:c0:d1:68:38:e7:
         95:a8:ed:9c:21:e3:3e:ed:be:7f:23:2d:3d:b1:2d:45:96:d6:
         dd:17:5e:bb:49:63:7c:c5:00:68:7a:d4:89:b2:63:27:03:b3:
         2e:ee:bd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:07:42 2026 by rpki-client