Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File:                     gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier:          kROiNjgXO+TZvBt3WtlwNB8poIZ2WSdO686izLBLEoE=
Subject key identifier:   DF:03:5B:6F:A4:F3:76:0A:BD:D2:35:6C:59:63:1E:4A:7D:0F:EF:E7
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer:       /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial:       01A173CB3DC894DBC11D407C71DE023C59D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number:          0C21
Signing time:             Sun 25 Oct 2026 16:01:01 +0000
Manifest this update:     Sun 25 Oct 2026 16:01:01 +0000
Manifest next update:     Mon 26 Oct 2026 16:01:01 +0000
Files and hashes:         1: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
                          2: W0JnqG_1catAnHEXGycEO8oq48k.roa (hash: A6AJQgQl743BUazqkp43vOKzFjK/bipy9CgPiB+KG6U=)
                          3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: lTlLT79mxvf6DY05ORw0GOiWdQYHmdjTFFgw6FdLMkE=)
                          4: jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa (hash: a1X93SlCywmHujOimn+Po6M7RMMfbT2R8166ZJ7vS9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:cb:3d:c8:94:db:c1:1d:40:7c:71:de:02:3c:59:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
        Validity
            Not Before: Oct 25 16:01:01 2026 GMT
            Not After : Oct 26 16:01:01 2026 GMT
        Subject: CN=df035b6fa4f3760abdd2356c59631e4a7d0fefe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:06:99:e9:2c:58:a4:34:94:ae:1a:14:8b:
                    db:71:41:78:56:b1:08:e8:03:89:e8:bb:0b:88:c3:
                    6b:3a:e7:aa:b0:b3:bd:9b:85:fb:d7:85:29:15:c3:
                    c8:09:cc:65:81:b3:4c:a1:ca:56:94:68:db:cf:53:
                    82:8c:27:ac:44:cc:12:24:f6:64:ea:8d:11:88:38:
                    c6:2a:97:25:8c:b1:39:13:cc:e2:28:81:08:22:17:
                    9b:63:f2:fe:2e:13:cf:6a:1f:70:a4:11:71:95:80:
                    55:c8:fc:82:ad:af:de:3a:40:b6:4f:b1:d3:fe:43:
                    25:c4:42:ef:07:72:a2:bd:82:16:ce:fe:4a:58:fa:
                    bb:31:75:33:b9:ae:6d:c0:5a:ef:d3:d8:a5:20:a0:
                    e9:a5:31:30:23:cf:f5:bb:88:53:7a:ec:29:76:16:
                    be:b6:1b:17:aa:2f:d0:45:5e:58:eb:1e:c9:37:06:
                    a4:12:4b:93:ef:17:99:8e:6e:23:e4:82:e9:8b:e7:
                    4c:e8:6b:6b:4b:ef:85:48:1c:14:07:01:93:7a:77:
                    cc:0b:1a:fd:18:c7:71:ee:1c:6b:c0:bf:7b:99:70:
                    29:29:ca:e3:3f:ad:99:34:79:c3:c4:87:e4:d0:e4:
                    74:05:9d:f2:88:2b:a2:bd:a4:5a:95:08:01:33:5b:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:03:5B:6F:A4:F3:76:0A:BD:D2:35:6C:59:63:1E:4A:7D:0F:EF:E7
            X509v3 Authority Key Identifier:
                keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:44:b0:c0:ac:6d:c7:79:ca:df:22:f6:90:0c:c6:5d:a3:a3:
         e0:03:09:e5:34:ea:af:84:d3:ad:31:8c:9d:75:66:19:4e:35:
         68:07:44:fa:f5:c9:21:45:0a:93:7c:1e:35:f8:d6:76:54:c3:
         c5:60:1d:8a:48:78:ca:31:09:0b:f2:c4:6d:87:f1:f1:3a:74:
         38:72:04:c0:5a:8e:b7:08:35:6a:3e:08:07:db:eb:8d:9d:7c:
         41:15:97:50:da:6c:e5:d6:61:9b:d2:45:2d:e0:b9:bc:ce:cb:
         9b:9d:21:af:88:b0:47:30:08:ec:fd:aa:8e:41:4a:86:28:85:
         4e:54:4d:00:87:4a:6a:ed:4f:d8:e0:6b:9e:6a:72:4f:e9:82:
         28:50:de:c5:c8:6c:1c:e4:a3:df:70:52:fd:0f:ba:f0:9e:c2:
         8b:54:54:80:30:82:4b:b3:9b:5b:76:79:85:cf:e3:68:a0:31:
         d2:6d:8a:bc:5f:0f:e0:85:53:f8:82:36:a1:cb:b7:d5:63:b7:
         3d:12:92:7b:77:e2:e9:43:de:2a:aa:d5:85:f6:58:7d:f7:cb:
         1f:6d:20:7a:c9:8f:f1:1e:ef:23:f2:7e:68:8d:2b:b6:cf:ad:
         82:d2:ba:70:d5:b6:79:e9:53:13:fc:f4:f3:d7:88:f6:54:12:
         1e:bd:a5:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzyz3IlNvBHUB8cd4CPFnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx
Njg4YzgwHhcNMjYxMDI1MTYwMTAxWhcNMjYxMDI2MTYwMTAxWjAzMTEwLwYDVQQD
EyhkZjAzNWI2ZmE0ZjM3NjBhYmRkMjM1NmM1OTYzMWU0YTdkMGZlZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6YGmeksWKQ0lK4aFIvbcUF4VrEI
6AOJ6LsLiMNrOueqsLO9m4X714UpFcPICcxlgbNMocpWlGjbz1OCjCesRMwSJPZk
6o0RiDjGKpcljLE5E8ziKIEIIhebY/L+LhPPah9wpBFxlYBVyPyCra/eOkC2T7HT
/kMlxELvB3KivYIWzv5KWPq7MXUzua5twFrv09ilIKDppTEwI8/1u4hTeuwpdha+
thsXqi/QRV5Y6x7JNwakEkuT7xeZjm4j5ILpi+dM6GtrS++FSBwUBwGTenfMCxr9
GMdx7hxrwL97mXApKcrjP62ZNHnDxIfk0OR0BZ3yiCuivaRalQgBM1skDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8DW2+k83YKvdI1bFljHkp9D+/nMB8GA1UdIwQY
MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt
M2NiOGQ4MTdlMDI3LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3
LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkSwwKxt
x3nK3yL2kAzGXaOj4AMJ5TTqr4TTrTGMnXVmGU41aAdE+vXJIUUKk3weNfjWdlTD
xWAdikh4yjEJC/LEbYfx8Tp0OHIEwFqOtwg1aj4IB9vrjZ18QRWXUNps5dZhm9JF
LeC5vM7Lm50hr4iwRzAI7P2qjkFKhiiFTlRNAIdKau1P2OBrnmpyT+mCKFDexchs
HOSj33BS/Q+68J7Ci1RUgDCCS7ObW3Z5hc/jaKAx0m2KvF8P4IVT+II2ocu31WO3
PRKSe3fi6UPeKqrVhfZYfffLH20gesmP8R7vI/J+aI0rts+tgtK6cNW2eelTE/z0
89eI9lQSHr2lCA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 01:44:39 2026 by rpki-client