Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          Pg1KuP8vIpTFxz1sOpr1faEumkCVWak/PJfPYU/WbVA=
Subject key identifier:   D8:F3:AC:CF:E9:3D:B6:11:F5:ED:EF:10:D8:E8:FF:81:6A:BF:41:AA
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       01A13A1234FBDDCE148D3678FD2617B3FE93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0DC7
Signing time:             Wed 14 Oct 2026 11:00:33 +0000
Manifest this update:     Wed 14 Oct 2026 11:00:33 +0000
Manifest next update:     Thu 15 Oct 2026 11:00:33 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: 04YmmO02780pd6x9B6kp4dm/A0+MlYOzYl8HjK33l5c=)
                          2: HMpfD8yWZ0j1ouvG1EDM2ZSSE8c.roa (hash: SGGQvvIcUh55SsmT9zcE0INbCSKqRJfWxR5dRHBgMA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:12:34:fb:dd:ce:14:8d:36:78:fd:26:17:b3:fe:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Oct 14 11:00:33 2026 GMT
            Not After : Oct 15 11:00:33 2026 GMT
        Subject: CN=d8f3accfe93db611f5edef10d8e8ff816abf41aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:46:31:e2:21:72:f9:e0:4b:8c:f0:28:c8:
                    a4:34:55:e0:1a:06:b9:bc:7f:0a:ce:47:0b:15:b7:
                    3d:b8:6a:dc:49:cb:7b:6c:ef:3a:2f:48:15:e3:eb:
                    14:f9:86:d6:d3:b6:04:28:39:b6:b2:42:55:45:a8:
                    ef:fc:e4:49:b5:91:e8:a7:f6:2a:46:23:54:ff:21:
                    14:b0:0c:82:29:eb:27:25:15:7b:ed:ac:f9:3d:70:
                    fb:13:13:ff:9a:b1:b2:c5:af:8a:22:67:31:59:7c:
                    94:5b:bf:8a:01:3e:75:96:c9:17:3d:2b:77:d9:d6:
                    04:e3:5f:e0:e4:af:d6:f2:23:b8:1c:f1:2c:48:77:
                    49:f3:d5:b0:9b:4c:c2:a7:33:11:df:f0:ae:9e:f4:
                    88:e4:02:e2:99:55:49:14:2a:5f:f2:6f:ee:23:50:
                    93:af:55:83:4b:9e:cf:d3:a9:3e:11:5a:22:77:5a:
                    bd:bf:96:a0:1e:96:c8:35:8e:ca:b6:e7:f8:a0:83:
                    b0:88:b7:c4:ad:99:69:c3:b9:33:57:16:b6:19:b2:
                    f0:ff:48:c7:04:55:94:dd:fb:a7:04:77:67:ea:b7:
                    39:b1:bf:d1:fb:7d:de:12:5f:39:78:15:2b:a0:01:
                    b4:ed:1d:51:47:32:5d:a1:57:e3:d9:2b:ed:0a:ff:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F3:AC:CF:E9:3D:B6:11:F5:ED:EF:10:D8:E8:FF:81:6A:BF:41:AA
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:45:72:af:55:ea:f8:49:9f:99:d1:81:a3:54:f7:16:13:
         71:cb:db:45:fa:7c:06:e9:9c:af:c1:bc:85:62:21:af:4f:5d:
         4a:e5:41:e5:39:d5:07:9f:1e:11:58:d6:e6:ef:1d:e6:09:16:
         bc:dd:70:7f:b7:f0:eb:aa:87:c2:31:e4:43:11:34:83:8f:b9:
         48:2a:7e:02:b2:44:e3:f3:22:5f:74:49:1e:88:b2:1c:7d:a4:
         60:a4:bd:a6:bf:d2:47:e2:b0:d8:e9:9c:5a:f8:b7:73:d5:e0:
         1b:54:e9:3a:b2:27:49:07:85:b4:d9:a0:3d:e8:51:0c:ef:84:
         cf:62:d5:76:24:8d:1e:b6:ca:3a:77:71:bb:5f:05:67:04:75:
         db:a2:d7:2e:6a:3c:fa:f1:00:d0:e3:a3:88:08:e3:7c:44:f8:
         7c:55:67:ce:92:7a:ff:0c:9a:00:cf:35:ca:fa:4f:94:cb:ce:
         00:45:ec:a6:6a:34:d0:9f:dd:04:ba:77:78:5b:5d:64:f6:be:
         c2:6c:b8:f2:c2:62:d2:5b:59:ae:b2:eb:a8:b7:6e:1a:27:e5:
         17:e3:1e:6e:8f:42:17:be:9e:bd:ea:e2:4b:ff:8d:20:88:e3:
         9c:07:4b:2c:58:67:cb:d0:aa:11:36:02:72:d3:ff:4b:cf:ef:
         61:a7:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:37:50 2026 by rpki-client