Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File:                     GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier:          oUe9LlW+rjTZcysTjmaa8V13/B9KetG5iKokzShYTFM=
Subject key identifier:   25:02:3B:85:03:F1:91:E9:04:21:56:37:C6:98:CA:9D:FD:59:81:67
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer:       /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial:       01A002B93B6CBB9B5E1B5A8AB71C3BBBD3BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number:          0EDE
Signing time:             Sat 15 Aug 2026 00:01:28 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:28 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:28 +0000
Files and hashes:         1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: aMkwXZARbUUkR04d6QCEyPZchcHM3tPm88luj5BqzIE=)
                          2: SkKZfC38ghmrpySCpGvRpFixxKU.roa (hash: o3RJWOBJfQjmbxei+seF+/aOYTLshRFp1ICoacA0zAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:3b:6c:bb:9b:5e:1b:5a:8a:b7:1c:3b:bb:d3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
        Validity
            Not Before: Aug 15 00:01:28 2026 GMT
            Not After : Aug 16 00:01:28 2026 GMT
        Subject: CN=25023b8503f191e904215637c698ca9dfd598167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:7a:1f:51:f5:93:44:2e:55:ee:de:f0:e7:
                    3b:2c:e0:79:1c:b6:d7:6d:26:a2:47:e3:c0:5f:9a:
                    b7:24:b4:68:a4:2e:1e:dc:44:f4:6a:62:b1:88:2e:
                    4f:16:c4:5e:f9:5a:22:27:c0:00:8f:9e:85:69:ac:
                    15:54:52:7c:8f:9b:11:61:00:97:0c:da:c1:09:e3:
                    de:8b:9f:07:20:d6:33:e5:eb:bb:02:3f:50:ab:3a:
                    da:db:e6:37:9f:fd:af:65:72:65:22:3a:60:76:df:
                    9d:4f:ba:4c:f0:5e:4b:bd:f2:0e:74:20:af:d8:5f:
                    5d:af:a4:4e:f0:0f:72:94:c7:ea:65:45:c8:78:81:
                    8a:06:62:eb:9c:f8:5b:72:91:24:ef:2d:28:ea:d5:
                    8f:e8:e5:8e:ea:d6:4e:fc:c3:12:6c:ab:99:ba:02:
                    c6:b5:a5:28:ad:b9:7d:1f:ea:c8:92:dc:6d:78:9e:
                    23:db:d8:27:63:f6:51:6b:2e:3b:23:b2:b5:15:e9:
                    fa:9d:76:68:c2:a3:a8:c4:8c:38:ad:c5:68:9d:48:
                    d8:9a:6f:5d:de:24:f6:35:0a:c4:82:0a:91:41:bc:
                    66:44:72:34:60:4c:09:ce:6e:b0:6f:d5:8a:dd:11:
                    39:3a:72:d0:bb:b9:a5:dc:6e:70:c8:5a:ea:79:03:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:02:3B:85:03:F1:91:E9:04:21:56:37:C6:98:CA:9D:FD:59:81:67
            X509v3 Authority Key Identifier:
                keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:4a:6a:64:12:76:e5:14:f8:16:87:71:10:a1:be:48:b4:
         56:d2:09:ed:46:0a:9b:3f:13:a6:be:13:7e:b9:a1:d8:ec:58:
         65:c6:ae:19:dd:70:bb:b8:ff:a5:15:7e:5c:ee:a2:45:c1:e8:
         19:f1:35:1b:d9:8d:78:ba:bf:0b:fa:9f:dc:10:2a:b1:2e:7e:
         a8:7e:60:6f:fd:26:a0:b0:f6:e7:6c:ea:5d:b5:c0:03:b6:1a:
         84:ce:32:e9:c8:1d:aa:19:67:7c:f2:1a:e7:a6:06:1a:68:28:
         5b:72:a6:cf:fc:57:cd:d1:cc:6f:7d:1c:bd:61:f0:f2:d0:42:
         cb:9c:4e:87:a4:ab:8f:c6:ae:18:62:e5:21:a4:38:3d:fb:2b:
         e2:06:9f:67:a0:39:4c:ff:92:0c:b1:15:e3:80:a6:21:90:ff:
         b0:75:8f:07:e6:1c:23:85:ca:9a:c6:ba:b6:9f:4f:c4:04:5d:
         d3:48:41:d8:fe:d6:1f:aa:12:a6:6b:7f:e5:81:cb:31:e1:e2:
         17:5c:59:9d:0b:7e:74:67:9f:1e:6f:67:0f:14:b7:c3:f8:09:
         9a:ab:7c:d6:5d:eb:1f:56:e1:9b:ad:2f:e6:9f:f8:91:68:58:
         71:f0:f3:a4:fe:1b:72:b8:82:5e:97:e9:59:1d:84:98:56:32:
         d6:92:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:50 2026 by rpki-client