Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
File:                     G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft (raw, json)
Hash identifier:          ZKFYnau0E39yB3eUK1FrF+4Vs9K6zO+/ovjG1oPzn/Q=
Subject key identifier:   FA:7D:7B:5D:D7:00:0E:1B:5B:AC:20:FC:C0:A3:4A:E8:B1:E8:C2:8F
Authority key identifier: 1B:96:CC:42:90:2D:38:8E:61:1C:62:EF:14:68:3B:FC:CE:83:C3:AB
Certificate issuer:       /CN=1b96cc42902d388e611c62ef14683bfcce83c3ab
Certificate serial:       01A1250C3D9CBAEC95DC7537490CF4E225B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
Manifest number:          57
Signing time:             Sat 10 Oct 2026 09:02:01 +0000
Manifest this update:     Sat 10 Oct 2026 09:02:01 +0000
Manifest next update:     Sun 11 Oct 2026 09:02:01 +0000
Files and hashes:         1: 3a32IJmzLulvHDXPinVJuIWxxd0.asa (hash: k1qnCL9fUv9xE6kZymyF31c/7bS7xOt8+iPI7hRc540=)
                          2: G5bMQpAtOI5hHGLvFGg7_M6Dw6s.crl (hash: DrQrfapri5PvZvQrpconamslpqy1L6UqKCAcGiPgb7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0c:3d:9c:ba:ec:95:dc:75:37:49:0c:f4:e2:25:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b96cc42902d388e611c62ef14683bfcce83c3ab
        Validity
            Not Before: Oct 10 09:02:01 2026 GMT
            Not After : Oct 11 09:02:01 2026 GMT
        Subject: CN=fa7d7b5dd7000e1b5bac20fcc0a34ae8b1e8c28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:99:fd:95:93:2c:7f:d2:51:51:46:37:9e:
                    bf:df:04:f3:5f:84:ae:35:9a:38:2a:91:91:71:bc:
                    03:8b:63:41:72:7b:21:8c:8d:27:a5:90:d1:47:16:
                    43:ce:00:98:b0:84:ed:9d:4f:d5:22:26:d9:d5:a7:
                    96:b3:bb:77:bc:82:b5:0c:6d:42:24:32:65:3c:35:
                    33:50:73:42:bb:4a:d3:1a:87:e1:f1:a1:f4:f9:e8:
                    6f:3d:ff:42:9c:8c:2d:0b:5b:c0:9b:79:28:23:31:
                    be:68:db:fc:47:76:70:c8:19:e7:6e:e5:97:7f:77:
                    19:13:32:69:ca:a4:f7:16:51:72:94:3e:53:4c:b9:
                    f4:8d:eb:f6:0d:c5:1a:4b:c4:5c:8f:d1:a5:c3:f7:
                    ac:17:86:ca:4c:1b:6d:5e:fa:84:04:da:86:ed:93:
                    7d:23:28:16:a5:28:b6:11:e0:41:34:ac:ed:02:29:
                    72:43:a7:2e:0e:0f:f4:09:d4:fa:38:49:09:49:8f:
                    2b:bd:c2:d0:a2:6d:45:f9:fc:db:ec:05:64:d7:f6:
                    ba:c5:72:40:0e:c2:da:e4:ba:7d:a9:53:24:be:82:
                    a7:a0:a1:3f:67:c0:71:96:15:79:ac:c8:32:25:15:
                    15:a2:9d:23:52:4d:85:08:f1:42:6c:10:a3:2d:84:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7D:7B:5D:D7:00:0E:1B:5B:AC:20:FC:C0:A3:4A:E8:B1:E8:C2:8F
            X509v3 Authority Key Identifier:
                keyid:1B:96:CC:42:90:2D:38:8E:61:1C:62:EF:14:68:3B:FC:CE:83:C3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:b9:44:40:55:26:83:9d:ba:7d:a5:d0:7d:57:e2:dc:7e:
         01:f5:e8:29:6b:ad:2e:b7:cf:49:f3:26:1a:3e:a4:d0:33:05:
         6d:52:fa:72:fa:b8:b7:5e:79:13:65:ac:02:5a:00:f5:59:f8:
         99:d6:df:15:7c:54:74:51:17:75:d3:25:59:cd:46:7a:33:97:
         b4:0e:f3:af:e7:c1:64:53:04:db:08:70:e0:4a:82:0c:0c:d6:
         d2:e5:9d:f7:3d:64:82:77:29:fc:f7:69:da:9e:bd:f7:19:0a:
         43:e2:e7:06:a7:db:72:1d:ca:c7:79:c3:2c:48:17:b2:dc:23:
         9f:02:3d:ec:7f:f4:d9:9b:e9:f4:72:92:ec:18:c4:93:09:f0:
         3e:b4:1a:6c:4a:7f:50:c9:c2:5a:5b:44:91:af:5f:6f:93:2f:
         b9:31:46:64:7d:b1:93:f1:a5:c6:99:fd:6a:b7:7b:8f:85:08:
         20:28:87:bc:5f:50:cc:90:23:a0:6b:4b:3f:a4:e0:8b:fa:8f:
         b9:10:d7:a5:6e:84:bd:ee:87:d3:19:8e:61:0a:14:78:87:d2:
         07:a2:6d:cd:bf:4a:63:4f:87:c1:49:29:fa:25:ea:f6:99:57:
         03:ed:e4:e7:5f:32:9d:5b:d4:42:f7:07:65:87:c3:2a:9a:91:
         15:b7:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:22 2026 by rpki-client