Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          QEAbeAe9pDRUQf4CQS4RnaThN44Z3f9VhEAdIqOJ5YY=
Subject key identifier:   CF:D9:F6:88:36:31:70:17:D9:4A:BA:33:52:4C:8E:92:6D:22:29:BD
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       01A0336E4A0B9B36DE98A8C89A7484664AE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0D3F
Signing time:             Mon 24 Aug 2026 11:01:00 +0000
Manifest this update:     Mon 24 Aug 2026 11:01:00 +0000
Manifest next update:     Tue 25 Aug 2026 11:01:00 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: wyrKQS9Z37gcw0rPV/7B+wZ0ZbPSr4HB6dolZDN7aXI=)
                          2: HMpfD8yWZ0j1ouvG1EDM2ZSSE8c.roa (hash: SGGQvvIcUh55SsmT9zcE0INbCSKqRJfWxR5dRHBgMA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Aug 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:33:6e:4a:0b:9b:36:de:98:a8:c8:9a:74:84:66:4a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Aug 24 11:01:00 2026 GMT
            Not After : Aug 25 11:01:00 2026 GMT
        Subject: CN=cfd9f68836317017d94aba33524c8e926d2229bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:b3:c9:1c:39:a6:bd:80:64:27:e1:15:be:
                    1d:8b:89:1f:1c:94:9c:65:75:02:33:a6:04:62:e8:
                    83:3e:c6:bb:0e:08:1e:2a:1f:c4:c9:5d:e3:78:0f:
                    97:f8:42:da:8a:78:e1:bf:fe:b2:47:7f:f2:1b:ec:
                    64:6d:a9:20:ed:44:75:8a:e2:c2:08:32:d8:70:39:
                    23:bf:09:e9:b6:40:8e:ed:f2:44:2d:50:2e:ad:81:
                    1e:39:4a:2a:6f:93:d7:e6:53:85:5c:95:e9:c5:ae:
                    23:85:20:6b:99:13:93:0a:c2:9a:3c:95:11:bd:bf:
                    03:9e:7e:85:96:48:f6:24:88:98:9a:ba:cc:49:66:
                    3c:bc:d7:cd:30:b0:89:dc:a3:47:7c:b4:29:0d:e0:
                    22:af:71:be:f1:8b:f6:e9:74:4e:d7:b2:3b:05:b4:
                    a5:cf:97:e9:d7:c3:64:ba:75:10:d2:84:50:19:23:
                    1d:71:b5:53:32:e2:12:2f:1b:e7:03:52:38:4a:e6:
                    2f:c1:6b:30:52:2d:5c:a8:8c:8e:05:24:dc:53:04:
                    16:ac:d5:35:27:26:41:fb:6f:e8:79:b5:8e:16:df:
                    59:b6:37:b6:9d:ad:78:bc:75:86:8e:46:98:6d:82:
                    4e:fc:9b:c7:2b:44:58:08:e2:c2:50:a9:cd:90:e1:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:F6:88:36:31:70:17:D9:4A:BA:33:52:4C:8E:92:6D:22:29:BD
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:a4:44:30:83:65:7b:8e:a7:81:46:0e:75:75:13:20:85:
         8f:6f:8c:3e:b4:f6:63:39:f6:db:e1:68:1b:81:56:2c:55:f2:
         7b:50:b1:a5:d2:a8:74:0f:85:83:03:3d:bc:c9:23:f3:d7:98:
         25:4f:4e:9b:93:5f:a6:94:77:3c:ab:94:cd:d7:f1:74:4a:ea:
         a0:97:d0:0c:ea:ee:5a:62:7b:4a:b7:73:25:e3:bf:98:fb:0f:
         36:63:1d:5f:b3:0f:7e:a0:72:ad:c1:68:7f:0d:2d:1e:a0:47:
         8a:d9:88:f0:a6:a4:fb:18:19:43:fc:37:fb:70:31:a0:06:c1:
         42:3e:93:1b:74:e0:03:6c:03:47:42:3a:70:3b:7f:69:1f:b3:
         07:55:a9:26:f8:63:57:66:3c:91:2d:18:e2:6e:9e:9f:02:3a:
         b9:8c:f5:96:ed:4a:67:77:07:47:da:21:05:40:f8:be:c8:fa:
         3a:74:a3:e9:d2:00:d0:48:bb:1b:79:7e:97:cb:2b:65:1d:21:
         a7:d7:75:45:fd:ba:65:0d:b2:ab:72:58:15:ff:7c:6c:84:d7:
         42:f6:fd:f3:04:c7:7b:95:90:52:7e:c4:a4:ff:5f:53:1d:b9:
         41:23:e1:36:8f:78:1e:a6:80:13:73:9b:62:94:17:99:15:44:
         ae:55:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:08:03 2026 by rpki-client