Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          ScFusOdcLlbDIBQ9FzdjeOarYP31jNfIhjkvLku5+5k=
Subject key identifier:   E9:B4:BD:DB:E0:C7:29:15:62:BC:8C:DB:B6:E3:0D:B9:E6:1D:D5:99
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       01A12466B7A9F328302133026012A5B47E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          1A97
Signing time:             Sat 10 Oct 2026 06:01:13 +0000
Manifest this update:     Sat 10 Oct 2026 06:01:13 +0000
Manifest next update:     Sun 11 Oct 2026 06:01:13 +0000
Files and hashes:         1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
                          2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
                          3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: qIEvAxWnfL7HuRTELCRxzR9gRU/Gk/9DCmv5ftyKvYs=)
                          4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
                          5: WYkunCsYhA2teRxLAg2Szm4t8hg.roa (hash: qVG+UMRzYieYY8QAWvVzEcBUYsd1eqpIARZQP14+D/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:66:b7:a9:f3:28:30:21:33:02:60:12:a5:b4:7e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Oct 10 06:01:13 2026 GMT
            Not After : Oct 11 06:01:13 2026 GMT
        Subject: CN=e9b4bddbe0c7291562bc8cdbb6e30db9e61dd599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:92:29:7d:3e:1e:0f:3c:84:cf:c8:97:52:
                    ee:d8:5b:80:2e:fd:5a:e3:8b:2c:fe:de:da:8d:bd:
                    60:75:95:63:82:f6:4f:fb:78:0c:ac:56:5d:5d:2b:
                    31:33:2b:5e:41:11:e7:c9:6f:7c:ff:ce:25:75:5e:
                    3f:71:c7:94:9f:f9:b8:22:24:38:c8:1f:8d:f8:65:
                    ad:c5:13:ce:7f:11:d7:a6:34:ce:d2:5d:c8:4b:28:
                    2e:bc:3a:b5:88:4d:07:99:60:49:9d:e0:00:77:62:
                    51:56:50:6a:3b:85:e2:6d:c6:38:73:14:e8:af:ba:
                    6b:9e:c4:a4:46:f6:fa:f1:97:3a:1a:69:76:a6:f5:
                    66:58:33:ca:89:3a:f9:fe:fe:d2:83:d1:37:03:82:
                    f4:3c:26:de:b7:f1:ee:22:15:9d:ad:fc:7c:db:c0:
                    e4:ab:6c:80:4e:1d:1b:27:48:6f:ad:46:8b:80:70:
                    2a:87:fe:e8:a9:11:76:2b:65:f6:af:fd:32:84:3a:
                    dd:ac:cf:7a:a8:1a:05:c3:63:64:fc:2c:ad:a2:14:
                    7d:f2:f2:15:72:b5:a8:19:ac:c9:58:84:8b:d4:b1:
                    20:c5:58:f9:d9:7b:65:a5:cb:b4:1e:47:c1:84:0c:
                    b7:ad:e8:d7:a1:62:0c:a7:4c:44:9c:83:7b:2e:c6:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B4:BD:DB:E0:C7:29:15:62:BC:8C:DB:B6:E3:0D:B9:E6:1D:D5:99
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:cf:49:99:22:9b:23:2c:5e:42:ab:4b:be:49:5f:8d:da:
         4d:53:13:37:4a:c8:bc:87:97:87:f6:19:5c:2d:35:40:85:c8:
         6e:af:85:c4:e0:f1:a9:45:70:85:b2:7d:46:49:5a:a3:49:66:
         3a:72:a3:50:40:bf:d3:38:d1:1c:1e:b8:f0:e1:8d:f6:4d:81:
         89:c7:53:72:74:04:96:e5:11:f2:53:28:2a:82:5c:93:0c:af:
         10:a1:65:80:c4:dd:37:dc:48:ae:dd:72:66:52:d0:74:ad:6b:
         4e:d9:e2:19:8b:b9:08:c7:6d:07:ad:e1:ac:e1:2c:a3:66:04:
         4e:6d:3c:dd:b8:7b:e4:d0:b8:4f:c6:78:67:eb:88:30:38:76:
         0c:0d:31:78:51:31:dc:42:61:cb:bb:e1:df:16:e7:9e:3d:6e:
         5d:46:c6:4e:3c:bc:3a:4a:e4:9c:1d:03:fd:13:25:00:30:6f:
         3b:ae:87:73:ca:8a:59:91:ab:e0:11:0c:c9:65:41:00:15:19:
         77:df:23:ac:51:01:44:72:a1:5f:30:e7:f0:3e:80:a9:93:ff:
         90:94:0e:cf:9a:8b:31:6a:a9:61:6d:5a:b5:59:d2:d0:03:39:
         df:e7:45:b5:b7:8b:df:86:a2:ac:53:32:15:2b:98:7f:02:f9:
         32:7f:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:38:21 2026 by rpki-client