Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File:                     gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier:          HlvePClrMd2iRQhujMSxiS4Mk7zlc03naYmGNkGcZNE=
Subject key identifier:   C0:75:15:09:4B:31:F0:D0:BC:64:CB:D5:6A:47:24:89:B3:F3:64:AB
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer:       /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial:       019FFF8154BB2528CC4E09DE0E42CCF8EE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number:          09AB
Signing time:             Fri 14 Aug 2026 09:01:33 +0000
Manifest this update:     Fri 14 Aug 2026 09:01:33 +0000
Manifest next update:     Sat 15 Aug 2026 09:01:33 +0000
Files and hashes:         1: QKjiIqM0UbknWM_0hZSPOOQrhbE.roa (hash: Ym8+l1LE5PwdsL5Z1gyeamQjMBjG/nU2Uc7hHjtf64w=)
                          2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: L/lpKFh9TbC3w7VKnknth32xILDK/4w8PBTOxi6Geyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ff:81:54:bb:25:28:cc:4e:09:de:0e:42:cc:f8:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
        Validity
            Not Before: Aug 14 09:01:33 2026 GMT
            Not After : Aug 15 09:01:33 2026 GMT
        Subject: CN=c07515094b31f0d0bc64cbd56a472489b3f364ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:95:12:d0:18:32:80:ca:4c:8c:47:b9:e8:
                    13:09:e8:da:fa:e2:07:e6:a1:4d:73:02:36:85:ad:
                    97:80:73:c9:82:bc:c9:56:70:ea:9d:7a:4a:eb:4d:
                    4f:55:5c:1c:54:29:1a:83:19:ce:3a:3f:ab:00:97:
                    c7:dd:bf:dd:4e:4b:3d:69:62:30:fb:21:3d:da:11:
                    c5:7f:70:d6:56:a8:61:04:50:7e:b3:56:80:43:48:
                    29:b6:28:a6:f4:66:e0:1e:be:8b:a1:0c:4e:47:db:
                    bc:02:b6:c0:ff:57:c5:0b:16:6a:ef:a2:c7:89:2c:
                    cb:9a:77:84:e9:89:3e:eb:e5:0e:ac:84:2b:d8:53:
                    d7:41:ff:8c:ff:8b:6a:2b:b0:90:1e:f3:10:44:a5:
                    c4:f9:c7:4c:99:1e:99:55:3c:0a:cb:a0:7e:04:3e:
                    f5:03:87:e9:30:5c:8f:46:5e:f8:bf:a1:b5:b1:c8:
                    7b:01:0e:47:ff:dd:80:93:c6:fc:26:41:57:9f:d3:
                    ec:07:b2:c1:c0:9f:16:ef:b5:96:97:90:ed:ca:05:
                    2a:04:c8:c1:02:5d:37:50:b0:fd:59:ef:19:c9:18:
                    63:58:9f:94:c1:d5:85:a9:f3:5a:8f:f3:23:a0:d1:
                    03:7c:ba:d4:f8:2b:5d:d8:ab:e2:2f:12:0d:ed:d6:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:75:15:09:4B:31:F0:D0:BC:64:CB:D5:6A:47:24:89:B3:F3:64:AB
            X509v3 Authority Key Identifier:
                keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:09:fc:b2:fd:59:ff:6f:7c:6e:60:5a:15:d1:24:89:26:46:
         87:17:2d:49:bd:4b:96:c3:04:f4:d5:81:65:0a:ad:5d:de:34:
         5d:6d:b6:63:1f:84:a7:d5:37:c3:41:f0:09:8f:d7:b6:35:c9:
         cf:e8:c8:14:65:26:61:0b:e8:b0:d0:e0:69:da:eb:d8:60:de:
         00:d6:31:7c:97:28:1b:8d:5a:18:87:7a:18:04:6b:91:56:98:
         50:6c:21:01:f4:24:89:2d:45:ef:6b:e6:3b:16:14:87:6e:4c:
         06:7b:bc:7c:ce:a2:a6:f3:d5:c8:82:a6:74:c7:e7:b7:f0:09:
         cd:d9:e4:3a:9b:dd:9f:2a:b2:2d:64:2c:21:fd:df:f4:0d:d9:
         33:f9:2f:65:8a:46:70:b5:02:0b:88:96:54:0b:7a:0e:be:82:
         7b:2d:bb:d8:01:12:e0:ca:29:75:66:69:78:4f:04:6b:40:5d:
         27:a8:54:0b:ff:e2:46:7e:80:2f:64:4a:11:99:10:98:7f:af:
         dd:93:3c:fa:b1:cf:40:b2:bc:ac:1d:73:d4:b0:6e:db:36:5a:
         24:24:a8:e7:ac:8f:5a:3f:af:9c:3a:d0:a6:80:eb:5b:15:70:
         ce:15:cd:fc:a8:9c:91:1a:b0:06:b4:c5:1b:e5:5c:0c:a6:b2:
         f2:d5:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 11:11:00 2026 by rpki-client