Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File:                     GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier:          5kfT/TvVY6PVIy1pfW4thBp/od5eSlGTcMRBERx6KJ4=
Subject key identifier:   DF:C4:E1:E8:2A:BD:75:E6:5E:2F:23:5D:19:11:7D:33:90:79:83:96
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer:       /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial:       01A06D26C8BDD90D4C265904FFD23BC49B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number:          0B13
Signing time:             Fri 04 Sep 2026 16:00:53 +0000
Manifest this update:     Fri 04 Sep 2026 16:00:53 +0000
Manifest next update:     Sat 05 Sep 2026 16:00:53 +0000
Files and hashes:         1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
                          2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: m/VUDYh0Eox6PvsKYil0ggfhOLIOjDCeJwXqU+bcnBg=)
                          3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
                          4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
                          5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:26:c8:bd:d9:0d:4c:26:59:04:ff:d2:3b:c4:9b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
        Validity
            Not Before: Sep  4 16:00:53 2026 GMT
            Not After : Sep  5 16:00:53 2026 GMT
        Subject: CN=dfc4e1e82abd75e65e2f235d19117d3390798396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:a0:6d:12:a3:ca:17:cb:8c:f9:e3:69:01:
                    08:d1:81:7b:db:71:69:1d:4f:dd:ab:2f:5a:64:3b:
                    ad:f7:35:68:1d:b2:67:81:84:2d:df:60:83:38:f7:
                    6d:96:4e:4a:e3:b8:ab:93:de:73:0e:16:4d:9c:df:
                    5f:7d:07:37:0b:a0:9f:c0:cc:f5:5e:8d:aa:b2:4e:
                    8c:01:78:61:cb:a4:5b:dc:fd:63:b5:bc:86:43:10:
                    b1:a8:69:4e:48:6a:8f:56:a0:d7:bc:70:64:64:7f:
                    3a:15:e9:2e:7e:eb:37:60:3d:83:3b:b7:31:e8:e1:
                    5a:26:65:b1:6b:d5:66:5c:88:b1:99:3d:3c:3e:40:
                    37:24:c3:9b:c5:94:91:13:96:63:c3:78:37:af:a1:
                    ad:a9:37:b7:dd:96:bd:52:92:ba:c6:79:eb:df:01:
                    37:a0:c1:e6:99:0e:22:b1:b2:00:87:c3:f0:3d:72:
                    1d:6c:6d:cf:ee:2b:8c:8e:d0:95:85:e9:6c:ae:0a:
                    34:4c:a6:83:b1:76:c2:96:16:38:9a:79:af:97:ad:
                    12:06:37:b4:e6:30:62:20:3a:6c:a0:66:e8:61:7f:
                    3c:4d:79:63:9b:e1:07:b0:5d:a6:2b:2d:da:fe:60:
                    df:05:c8:ce:41:37:7c:a6:b1:db:a8:00:d3:bc:ad:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C4:E1:E8:2A:BD:75:E6:5E:2F:23:5D:19:11:7D:33:90:79:83:96
            X509v3 Authority Key Identifier:
                keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:32:bf:e7:49:ef:c4:9e:b5:66:57:64:67:d3:91:22:e0:7f:
         7a:d1:64:b4:d7:ec:df:33:57:fa:ee:65:3a:93:e6:bc:8e:aa:
         9c:18:66:ba:e1:56:2e:ea:29:2f:cb:e2:08:d6:8f:e0:c7:bc:
         b4:de:24:44:a5:47:ad:84:76:ac:4d:2e:8b:18:c5:fb:08:bf:
         0b:b5:15:8b:6d:53:60:e0:57:58:af:e4:64:51:92:9c:14:c1:
         83:8a:6a:4f:dd:77:9c:e8:70:59:cb:a3:2e:9b:f6:a4:d4:ab:
         54:9a:b8:e1:37:aa:bf:0a:ff:45:1a:6c:23:4a:c6:7b:fe:40:
         e9:34:ed:02:80:c3:a4:88:8b:c4:c0:5b:2e:2a:b0:97:c3:16:
         a6:56:60:fc:15:3e:ac:b0:c2:1f:4e:5e:14:88:2d:a0:52:c5:
         02:cb:0f:08:24:0a:d4:c3:1d:3f:70:44:09:0f:3c:a1:28:09:
         80:50:7e:d2:76:22:f6:cd:41:60:91:c5:b7:5a:55:ca:21:e5:
         75:77:a9:ca:d8:58:b1:17:c4:47:dd:00:24:a0:de:72:7a:c9:
         91:e1:e1:9b:b2:9d:33:9c:7e:ea:c5:be:8b:1d:2c:d1:f7:2e:
         3c:b5:9f:e4:79:01:dd:04:5c:74:b3:fe:56:e1:29:fc:32:ce:
         2a:9f:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:05:19 2026 by rpki-client