Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File:                     gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier:          68VO04/XfMifMpKhwCwUOjsMiGQMceFbeu7Dhwt4BE0=
Subject key identifier:   CD:77:5B:9A:A2:22:41:EE:3A:09:D3:87:6E:27:5C:13:5D:49:60:DA
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       01A125E7901FF4890FC850603DAAABD892B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number:          1AA6
Signing time:             Sat 10 Oct 2026 13:01:35 +0000
Manifest this update:     Sat 10 Oct 2026 13:01:35 +0000
Manifest next update:     Sun 11 Oct 2026 13:01:35 +0000
Files and hashes:         1: BfT142IZrG6w9x_sdv9NlYOwnjk.roa (hash: nMyUMScF9ierHQNaWf4H2FAJS6EPcrZmAIOFL2K/38E=)
                          2: WbmA7_GX8lhYD5gwDfMty_B0UMU.roa (hash: pbu61dkoeJNOEFlPCcPVO/fOlKpt2IKFm6HwfwnwwJQ=)
                          3: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: 6ZdMT4ND9DDGs8xma9FkS/hVasw6HKkC+1Dye7dXpiY=)
                          4: hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa (hash: VGcdVOE9BIoWHNOMBje5zrVkxvWhg/+tqscfV1XcAU8=)
                          5: ltFa2izzbGOqtwBVA_TWfrJgXcI.roa (hash: OPV1MRSkrBUfBNL/wEtgSLV80hiGFh9joek6UVN6nV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:e7:90:1f:f4:89:0f:c8:50:60:3d:aa:ab:d8:92:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: Oct 10 13:01:35 2026 GMT
            Not After : Oct 11 13:01:35 2026 GMT
        Subject: CN=cd775b9aa22241ee3a09d3876e275c135d4960da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:c2:06:a8:94:89:ba:47:ec:0c:2d:4c:19:
                    e0:28:62:19:f6:26:f1:1f:30:ba:db:7b:5c:d8:52:
                    22:f2:49:9c:4b:12:8c:df:06:ba:ad:ae:5b:2d:67:
                    c9:b7:50:b6:07:76:fa:c0:ea:b4:db:b1:a1:d3:99:
                    69:0d:ef:cc:14:a6:db:9c:c7:40:d6:e8:d2:a9:0b:
                    9f:a7:47:da:55:ce:64:4b:e0:5f:b7:15:36:71:1e:
                    21:69:56:63:82:b3:2f:4f:a6:b3:14:d4:18:d8:ab:
                    78:6f:69:8f:28:b7:83:41:7d:2f:b3:a7:54:68:8b:
                    7f:65:88:d3:e1:63:55:70:8e:70:68:65:02:d7:c8:
                    f8:83:45:bc:04:9c:6d:19:62:23:36:94:e9:39:ef:
                    60:94:3f:76:e8:36:22:1e:16:d2:27:b8:96:dc:b3:
                    8d:b9:e4:bc:5b:3f:b3:aa:ff:ab:e8:3b:eb:5b:88:
                    da:a8:d5:9f:da:54:b7:01:5e:71:28:38:3f:95:92:
                    3e:67:7e:93:05:3c:31:21:14:ac:35:99:09:b2:a6:
                    cd:e5:ab:4b:ad:82:e6:d0:2d:7a:29:dd:88:f1:d0:
                    0c:5b:3a:6a:93:5a:74:c9:86:e1:22:c8:5f:f4:5d:
                    2d:46:90:fc:e7:39:ae:07:0c:29:98:13:0d:50:73:
                    a7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:77:5B:9A:A2:22:41:EE:3A:09:D3:87:6E:27:5C:13:5D:49:60:DA
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:bf:94:7e:ff:50:de:cd:ac:13:c2:e0:0a:09:32:b0:e4:
         c3:70:5e:12:0d:f2:41:bd:6a:de:25:c7:2e:d4:1b:b5:88:8e:
         a0:6d:e9:82:6c:b2:53:41:08:02:2d:7a:d1:c1:7f:7c:1d:ea:
         03:b2:3c:77:d4:87:22:69:82:e1:90:28:63:b9:75:ef:9e:9b:
         86:bc:be:55:10:2d:a5:aa:70:6a:2a:20:b8:7d:15:83:47:09:
         36:18:55:69:23:2e:92:bf:aa:28:77:42:a2:ca:b0:60:bb:98:
         8c:f0:59:18:83:5a:0b:4f:90:87:2d:62:d3:cb:9b:dc:b6:58:
         37:f0:ac:e3:72:0a:ac:23:46:62:7f:1e:ab:cd:da:f1:f9:6e:
         9c:9a:e9:18:0f:a8:7a:8f:17:5c:cc:81:07:4c:fa:70:bd:d9:
         7f:ad:ee:f8:e7:72:11:85:61:41:bd:76:52:15:34:a2:8a:cb:
         98:e9:68:51:33:cd:c1:84:53:8c:52:e4:26:76:15:38:53:f3:
         e2:24:7b:31:c5:b4:d4:1e:0c:03:90:6f:ca:4a:3e:a2:5a:45:
         1f:bc:cd:64:e6:4b:fc:b1:65:59:c0:49:2a:39:70:45:26:32:
         70:19:cc:6d:2e:99:44:f6:c6:ae:13:6a:c7:b4:73:9a:e3:b3:
         79:95:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:20:37 2026 by rpki-client