Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File:                     gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier:          eHR1Viu+qCBNa0GZ57Z8oz07vGC+NbQ6BcP5pN0vIww=
Subject key identifier:   1D:02:B6:86:42:66:C3:8C:CD:08:53:CD:38:C0:DC:02:66:D0:17:1B
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer:       /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial:       01A1103B25B6FACC70AD72C0108BC9ADEB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number:          1A46
Signing time:             Tue 06 Oct 2026 08:01:14 +0000
Manifest this update:     Tue 06 Oct 2026 08:01:14 +0000
Manifest next update:     Wed 07 Oct 2026 08:01:14 +0000
Files and hashes:         1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
                          2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
                          3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
                          4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
                          5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
                          6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
                          7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
                          8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: t6fXKx9JAWqZzahFdItnPSuM4hXAW8fCjL19CPe3GWE=)
                          9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:3b:25:b6:fa:cc:70:ad:72:c0:10:8b:c9:ad:eb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
        Validity
            Not Before: Oct  6 08:01:14 2026 GMT
            Not After : Oct  7 08:01:14 2026 GMT
        Subject: CN=1d02b6864266c38ccd0853cd38c0dc0266d0171b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:2d:5c:0d:fb:8e:ca:25:c9:fc:70:48:1d:
                    c5:de:85:5f:cb:93:77:db:d5:42:eb:80:55:48:33:
                    18:e6:4c:83:ae:fe:22:58:0b:f2:0a:1f:b2:b0:ab:
                    76:59:8f:c1:48:f3:84:bc:29:84:54:c3:7a:33:23:
                    ee:60:70:83:82:c0:f0:7b:b3:18:29:e4:b0:ef:41:
                    fe:4d:27:56:f9:ad:36:f5:e4:6b:f8:6c:34:07:4a:
                    f3:63:bb:5d:85:2a:02:43:5f:ed:7c:e4:d7:b0:99:
                    b3:ac:a5:e2:c0:79:ef:28:af:0f:cc:5b:fa:57:4c:
                    cb:a7:4c:1b:79:3c:92:2f:23:34:08:fb:c0:82:4c:
                    9b:7d:31:5d:96:e0:77:f0:47:ca:7c:ee:ca:ef:f1:
                    29:1d:e0:50:63:fd:84:45:7b:d1:a1:21:45:a4:bf:
                    ca:99:8f:63:94:33:2a:9b:2b:e8:ff:fb:6e:b3:fa:
                    e2:ec:3f:d9:f1:bf:cc:ca:93:7e:c1:5f:78:0f:25:
                    d2:ac:29:ba:03:3c:e8:9f:8f:1f:5c:58:5c:72:bf:
                    0d:b7:f0:81:b3:23:f4:31:c9:75:b7:89:1d:52:e0:
                    08:5d:fd:e3:99:7b:1a:81:90:cd:27:79:8f:bc:ae:
                    e5:87:e7:53:83:da:1a:d4:d8:6f:61:07:8e:c9:f1:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:B6:86:42:66:C3:8C:CD:08:53:CD:38:C0:DC:02:66:D0:17:1B
            X509v3 Authority Key Identifier:
                keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ef:8f:18:a7:f7:ab:96:fd:95:96:c1:32:db:7a:a3:5a:70:
         3f:48:ae:97:6f:9a:2c:54:0f:a1:11:35:cc:9e:24:5f:54:49:
         4c:02:5d:60:41:f0:8a:dd:64:81:aa:02:2b:de:73:4c:b1:c1:
         34:27:7e:75:c6:0a:4f:0a:0c:4e:22:9d:dc:29:31:cc:10:7b:
         e7:21:93:fa:b4:53:28:f0:e6:ec:93:07:40:ce:ec:9a:37:ef:
         a8:3e:26:3b:78:42:86:dd:fe:c7:1b:02:13:08:0a:4e:85:a2:
         8d:52:a5:a0:bc:f0:f0:53:88:20:1d:92:e2:97:cf:9b:11:21:
         89:19:3e:af:b8:8e:71:f2:b8:8c:25:2a:87:22:d2:f7:e3:f8:
         32:58:dd:5e:3a:fe:9b:6d:53:d6:76:74:cc:94:d6:a4:72:8d:
         61:5b:43:42:e4:83:3d:99:82:8f:a6:81:a5:81:11:e8:eb:6c:
         5c:07:1a:18:b8:c6:6f:de:7a:07:99:e8:3d:d1:e0:40:b2:2f:
         66:72:d7:74:66:05:7b:9f:00:3a:b2:e0:32:13:fd:e9:e5:3d:
         a7:0d:05:39:51:a2:8e:f8:18:5b:6f:88:ea:e6:15:97:e4:7b:
         62:6e:13:f8:3d:7a:99:55:01:b0:99:da:57:da:e9:dd:18:98:
         47:52:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:56:48 2026 by rpki-client