Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          CK6CSTBPXsOwTsCWE+3luFkOnQyMn6fUOoplvYc4pNE=
Subject key identifier:   45:59:29:B6:BE:E3:70:F7:82:C3:26:22:C6:AF:49:9A:64:28:CF:5E
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       01A08AC3B3C1CC33D96270B879A27ABA9E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          0DF8
Signing time:             Thu 10 Sep 2026 10:01:16 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:16 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:16 +0000
Files and hashes:         1: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (hash: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4=)
                          2: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: +tNsUrSW9M7XTVVVCNMQPH1ZMTQIczyCmNzjvB+emk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:b3:c1:cc:33:d9:62:70:b8:79:a2:7a:ba:9e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: Sep 10 10:01:16 2026 GMT
            Not After : Sep 11 10:01:16 2026 GMT
        Subject: CN=455929b6bee370f782c32622c6af499a6428cf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:f4:3a:94:34:b6:6b:c2:00:84:15:d8:d9:
                    0d:ec:65:68:02:c9:ad:6d:40:e3:d7:55:1b:37:c4:
                    a4:70:76:72:cf:d2:78:36:7c:4c:85:5d:24:b4:10:
                    c4:75:a8:e7:66:91:98:da:e2:6b:b8:10:6e:c2:09:
                    4a:da:f3:e2:3a:eb:16:7d:ac:b3:1f:c1:53:d1:44:
                    7e:3e:c5:2c:1d:3a:e2:2e:f2:7d:4b:f2:df:33:f3:
                    15:83:80:8a:9e:d2:aa:d5:f1:7a:1c:e0:69:8c:25:
                    4e:3a:48:88:a8:c8:a2:53:71:0e:ae:b0:82:e5:19:
                    90:4b:8d:13:cc:be:a7:9b:11:44:6d:b9:1f:ec:10:
                    e4:78:3e:63:27:e0:b0:17:56:bc:c4:ad:6b:5e:a9:
                    85:f2:c4:61:20:06:fc:32:bc:47:93:6d:7f:54:43:
                    23:eb:39:d7:d9:4f:05:c7:e2:d9:45:b3:72:b9:52:
                    fe:1a:13:0e:01:ed:2d:aa:99:6d:eb:07:de:3a:60:
                    f0:ed:9b:b6:c8:55:c6:55:0a:e4:14:44:43:38:ce:
                    34:15:cf:b0:cb:23:20:91:d4:b7:ab:de:83:8e:ae:
                    aa:de:96:71:1d:0f:62:63:de:43:d4:1b:68:4c:c6:
                    77:98:20:1b:2e:ee:04:62:64:24:ae:19:03:8d:59:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:59:29:B6:BE:E3:70:F7:82:C3:26:22:C6:AF:49:9A:64:28:CF:5E
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e6:30:c5:36:82:a6:8b:2d:8f:c2:e9:ac:f7:15:8f:2a:c6:
         6e:ba:a0:9a:0f:fa:9a:ae:fe:b1:3f:88:69:0b:38:da:a7:9f:
         d4:72:02:e2:95:cf:6c:1e:b0:03:e1:75:6e:5f:83:41:cf:9f:
         d9:b6:fa:4d:3d:32:53:f2:2d:5d:66:28:73:7e:ee:3f:81:89:
         b3:c9:5b:5c:71:c3:6e:bf:80:06:02:d3:b4:ac:8a:2e:c3:76:
         61:6b:4a:c8:80:bd:03:2a:50:16:5f:5d:78:82:10:82:eb:5b:
         f4:13:e5:72:ab:75:23:15:36:62:43:b9:bd:38:cd:bb:ed:91:
         d8:2e:fc:42:61:0b:f3:11:04:7f:f6:d7:7c:b9:2a:4e:f6:bc:
         5e:1e:4b:77:b6:58:a5:c7:7d:a8:eb:2a:30:4f:20:ba:05:d2:
         d1:75:d0:05:db:90:9a:b7:0d:cd:4e:cf:03:4e:d0:ea:a5:72:
         ac:68:d8:12:55:f0:75:d4:e4:f7:a1:40:df:c6:6d:c0:09:31:
         17:fc:e4:f2:b5:e4:d1:63:b1:e8:ac:bf:14:de:63:2e:53:74:
         26:c9:a5:22:1c:3d:9f:a0:46:8f:7d:e4:2c:20:79:49:d0:02:
         4c:48:45:59:0a:19:97:bf:bb:83:12:90:2b:0b:92:46:e0:d5:
         35:7e:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:05:51 2026 by rpki-client