Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          CSsM8aqJScSSEKfavVqwcD5XUFMEPDyiwC2wUUzA9no=
Subject key identifier:   87:65:A5:24:FC:CE:91:F3:B9:D7:F3:C9:3B:B0:1F:83:1D:BA:91:A5
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       01A18F0B259F17DB9A452A11F0B1B332B2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          1AD1
Signing time:             Fri 30 Oct 2026 23:00:34 +0000
Manifest this update:     Fri 30 Oct 2026 23:00:34 +0000
Manifest next update:     Sat 31 Oct 2026 23:00:34 +0000
Files and hashes:         1: BW_NoLK8bvq98NW3uQCVBILUjdc.roa (hash: Yv7HzXY6brkJdNWi4vkWfsAkacdbGVR0g6RZPDb2Wbo=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: 8a9huX79qolwsF3KdL7j3j3fb95TLvTjtLlEioqBK1A=)
                          3: UvhzMGyTfEF1hpgc3K2nc1IVHoI.roa (hash: cbsC5/gFhJ1QzmTO5tqc9Od4dJZpIwpWSVpRJbM9KoY=)
                          4: vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa (hash: FsUD/qILrBqWkPuIKdZisJEsoMgHswVeHLUrDTTRgbo=)
                          5: wIewyVcuV4glOwAciJdc6xtEcA0.roa (hash: P+orYhZY32r0vN37BZW90hJsNwEYMuvTdq9aVkdcNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:0b:25:9f:17:db:9a:45:2a:11:f0:b1:b3:32:b2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Oct 30 23:00:34 2026 GMT
            Not After : Oct 31 23:00:34 2026 GMT
        Subject: CN=8765a524fcce91f3b9d7f3c93bb01f831dba91a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:8a:77:de:92:89:6d:f5:d3:8e:37:a7:66:
                    4f:73:23:94:9c:18:49:2f:d1:f4:37:28:c2:12:3b:
                    38:0f:df:95:5a:a0:54:3d:ad:db:70:2f:9e:9b:4c:
                    e2:9c:06:8e:4f:23:a5:d3:3e:3d:fb:ac:09:33:04:
                    33:9d:31:bf:bb:f0:af:0b:75:a7:74:b6:38:e7:0e:
                    77:4d:09:4e:dd:ca:e3:21:24:84:4a:31:46:36:71:
                    32:e9:01:22:99:de:9a:8f:31:04:f2:e5:a3:01:76:
                    25:29:e8:64:84:bb:fc:09:a1:5a:7f:07:48:39:74:
                    31:73:00:0d:6f:12:cf:2c:4b:91:17:ea:da:2c:e3:
                    9a:f6:eb:f1:49:17:ba:76:b1:ce:30:7e:11:6e:3a:
                    62:8e:0f:7a:05:ae:d7:fb:ef:aa:05:0d:e5:34:25:
                    19:c6:12:ed:00:7d:09:39:fe:1a:89:1c:0c:bb:3c:
                    f0:86:14:09:3d:33:99:45:24:08:33:4f:6d:fd:86:
                    15:33:dc:f9:cb:19:41:c9:f2:c9:83:58:39:d7:e7:
                    a3:5f:da:2a:3d:44:24:fa:d1:11:0b:a2:77:57:1a:
                    17:dc:9b:97:0c:2b:32:48:fd:4d:b9:6c:b0:17:09:
                    61:28:80:df:02:15:48:5f:2e:19:66:a0:c9:26:12:
                    b9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:65:A5:24:FC:CE:91:F3:B9:D7:F3:C9:3B:B0:1F:83:1D:BA:91:A5
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:63:da:b2:db:07:d7:7c:14:50:1d:d7:4b:57:29:9b:2d:7b:
         0f:e1:24:da:15:9b:95:bc:80:b2:c4:d3:2f:db:ae:a9:b3:1d:
         99:ee:b2:50:7d:d7:88:f8:4d:b7:f2:07:98:ee:51:8e:75:6f:
         e5:11:e1:20:82:70:30:a4:88:a4:41:17:7d:0b:e5:1b:d0:89:
         1b:8e:ac:8a:a5:2c:b9:d8:b8:93:ff:f1:1b:7d:a3:69:3f:54:
         4f:c2:c2:9f:86:05:0f:20:93:31:8c:c2:4e:b1:78:0c:b6:74:
         34:87:43:e3:b4:91:bd:14:eb:43:ec:d7:94:e6:40:8c:28:f6:
         f6:ec:c3:dc:6d:f4:3a:a2:77:5d:f5:37:8e:2c:16:23:b9:4c:
         56:76:84:33:9c:46:6a:f6:f8:2a:89:ec:c2:df:98:11:4c:af:
         92:0c:17:1b:83:e9:6d:e4:75:67:81:73:9a:25:34:aa:45:f4:
         53:03:7f:e4:7c:8e:71:0d:ac:12:d0:d4:bf:81:ca:96:28:4b:
         5e:cd:ca:ab:a8:8f:a3:d8:48:eb:96:06:a3:08:c5:25:5c:89:
         66:de:d0:93:97:ba:22:a6:68:25:39:9c:3b:01:c7:73:f8:7b:
         19:71:57:e2:67:ee:95:bb:58:00:b0:b3:e9:41:43:1f:83:5d:
         76:b9:ef:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:41:37 2026 by rpki-client