Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          pQnwb2F22khxp1CIdkKrYwqQH8Vjde5/JCqQsFi8Ws0=
Subject key identifier:   53:82:86:F8:45:C6:33:52:E8:CC:65:77:76:60:43:6D:3A:CF:77:21
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       01A18F78FFCE1D0B379165ED1E88F4119D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          0E7F
Signing time:             Sat 31 Oct 2026 01:00:33 +0000
Manifest this update:     Sat 31 Oct 2026 01:00:33 +0000
Manifest next update:     Sun 01 Nov 2026 01:00:33 +0000
Files and hashes:         1: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (hash: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4=)
                          2: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: vS+4zDNCaTBTEe7UhGlp+hz5Qe7HtqMKAeO3Kcb7wS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:78:ff:ce:1d:0b:37:91:65:ed:1e:88:f4:11:9d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: Oct 31 01:00:33 2026 GMT
            Not After : Nov  1 01:00:33 2026 GMT
        Subject: CN=538286f845c63352e8cc65777660436d3acf7721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:65:dc:d7:34:47:47:b7:56:8d:1d:09:67:
                    45:00:28:09:d5:7d:3a:4e:d0:dd:b9:89:29:35:00:
                    d8:4f:44:7d:d3:6e:6c:37:3d:22:26:cd:d8:ce:62:
                    90:de:0e:c3:f0:6d:e4:9f:c5:72:55:55:79:f8:c4:
                    28:cd:16:53:5f:71:9b:83:40:16:25:f4:03:cd:ce:
                    b8:25:43:24:f3:f2:e4:15:c7:e3:45:3b:18:12:5c:
                    72:c0:50:73:b4:6a:d0:14:c3:d5:21:46:f5:50:62:
                    17:87:fa:74:04:a4:38:93:cf:fb:d3:16:28:ea:d3:
                    10:0a:43:b5:ad:38:63:fc:37:d5:0a:cb:14:47:56:
                    78:4c:51:97:db:2f:29:68:66:f5:10:63:b7:c8:96:
                    39:cf:47:6c:e9:4c:5f:2b:29:17:26:15:d2:31:5e:
                    f7:69:08:7d:e9:61:70:11:b3:59:aa:9f:c5:7f:00:
                    35:6f:26:3a:a0:d6:00:aa:c2:74:5d:29:4f:b7:e9:
                    63:5f:b0:71:7e:82:61:bd:ce:fe:b7:d0:9b:e5:62:
                    d0:9f:0f:ac:b0:c7:56:08:4e:7a:60:9d:07:e3:d2:
                    78:ea:25:b0:86:a1:2e:d7:fd:11:3a:46:5e:e5:30:
                    9f:b6:78:3a:b9:db:5c:d9:e8:8f:6f:f4:be:1e:95:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:82:86:F8:45:C6:33:52:E8:CC:65:77:76:60:43:6D:3A:CF:77:21
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:99:6b:64:95:74:65:29:27:5e:4e:13:85:b2:1d:73:dc:
         bb:c7:82:54:5a:9e:74:48:87:c1:14:75:ec:f9:00:30:16:55:
         be:f0:d1:61:3f:e7:43:49:09:23:e1:5a:50:3f:02:ce:3c:43:
         c7:1a:d0:d8:d9:e4:ce:22:29:94:1d:f6:2f:4f:fb:08:46:96:
         c6:ea:ea:9e:c2:1d:f4:b5:b0:32:13:ba:79:54:ca:6a:71:4f:
         b0:7a:82:57:ec:3c:fe:3e:c4:92:d5:f6:c1:95:34:b2:76:9d:
         12:48:79:80:26:28:4c:e4:b6:8f:e3:33:53:f0:b8:6d:b1:a8:
         89:ab:08:89:1a:6b:c5:52:92:a6:a5:3e:dd:67:3c:64:d0:56:
         d2:dd:4a:c7:b4:b1:84:b9:64:e8:8c:19:19:fe:5d:d8:64:1a:
         0a:18:a0:95:2c:38:4d:ae:39:f6:67:76:af:fe:3b:44:dd:1d:
         b6:ae:24:f4:75:e9:e6:34:27:5c:a0:0a:4a:28:7a:60:f0:92:
         49:8e:12:96:b9:eb:5d:d0:e3:44:33:47:69:41:4a:ca:b9:2a:
         49:5b:00:70:e1:e0:6c:10:4f:39:fc:c6:d4:f6:ae:c3:e4:1e:
         2e:7a:1b:85:2b:98:c3:31:82:7c:c5:69:b6:3f:06:65:e5:44:
         cc:ba:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:21:53 2026 by rpki-client