Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          2Nk2jTSDDns9jF7cunhy2U/xLOFWLy5Z/MjYNgIEEBg=
Subject key identifier:   B5:59:EC:41:4F:E5:43:52:77:AD:20:C2:AD:1D:FA:DD:1E:C4:C1:AF
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       01A133D9AE01DEE323F46B8C61C85BED59BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          1AA8
Signing time:             Tue 13 Oct 2026 06:01:06 +0000
Manifest this update:     Tue 13 Oct 2026 06:01:06 +0000
Manifest next update:     Wed 14 Oct 2026 06:01:06 +0000
Files and hashes:         1: 0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa (hash: w3LcFmfi5o+ZqCPWaVzw9mcyP3jYqj4m9ROiWLMpgAY=)
                          2: 5t0r8fJd2nhioYpGfkI7Yf9otXA.roa (hash: k52ZXWE/9hDIrYh0zpZm2nywZwLzZgmA6wQ6L4w58mM=)
                          3: 6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa (hash: s//DyxiKkxSxvwwq0U0tirxt/hDGoM9Ut2Dc50YCwqM=)
                          4: Cryli7tFA3xQzdS5-qcU49qg2iM.roa (hash: ZS2Te+uiOMALn+TaiqIM3OKXyBaszdLcDeqRDP7qYwo=)
                          5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: ooTN6YHRV4g9GDBx9cWovE/BAb6awCkBZaK0MWTYBGU=)
                          6: jsVSRtJd2CDXuEExXGRqUMz5PZw.roa (hash: 3KBrD6dE8HRG9EKrovP9Lr4d9GeL2O9jLSsM034LhGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:d9:ae:01:de:e3:23:f4:6b:8c:61:c8:5b:ed:59:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Oct 13 06:01:06 2026 GMT
            Not After : Oct 14 06:01:06 2026 GMT
        Subject: CN=b559ec414fe5435277ad20c2ad1dfadd1ec4c1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:b1:6d:20:70:fc:20:20:7d:81:cd:1a:20:
                    2e:c0:2b:cd:dd:c4:14:44:f2:c3:b1:f1:a9:48:6d:
                    13:0f:f9:3f:7b:5b:84:9a:d1:87:e4:13:84:ac:49:
                    e7:9b:46:26:91:88:42:8e:a3:10:f6:fc:e8:41:5f:
                    ea:38:e8:45:eb:30:25:2d:b1:20:46:4a:c8:e7:4f:
                    c5:dc:88:54:a1:bd:cf:c7:aa:14:91:48:f0:ac:21:
                    32:5d:ed:17:de:0c:6d:ae:8e:81:3c:69:18:27:52:
                    45:81:08:87:e9:7f:a3:0d:19:91:7c:eb:51:33:dd:
                    3c:e5:ec:43:29:2d:5a:10:86:cf:c3:ee:de:35:a6:
                    98:69:af:f4:72:41:48:53:59:42:53:5f:41:45:cc:
                    10:85:8c:68:ea:b8:40:96:19:93:da:ec:40:d7:f3:
                    52:50:2f:1e:c8:f4:3c:4f:ac:6d:f0:1c:ab:8d:11:
                    96:df:74:29:c4:f5:5e:79:fa:bc:f8:20:cc:f4:95:
                    b4:b4:0b:75:c5:1f:0d:a8:30:b6:83:1b:52:b6:88:
                    37:a0:6b:75:32:42:17:27:f8:8c:f0:9c:c7:c7:49:
                    db:9c:09:58:cb:77:62:54:cb:76:05:1b:f5:19:99:
                    43:43:69:b5:da:5a:4b:63:a7:cf:13:a3:5a:cf:d3:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:59:EC:41:4F:E5:43:52:77:AD:20:C2:AD:1D:FA:DD:1E:C4:C1:AF
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e9:53:ef:1a:3b:7a:6a:cf:6a:d4:56:79:de:4d:41:09:3d:
         ea:f2:a7:4d:61:88:ae:6c:3b:9f:13:ef:f8:60:8f:63:16:15:
         60:2a:b7:2c:14:38:19:cd:42:89:b9:5e:41:8a:81:a7:36:7a:
         7f:02:29:5f:4f:93:16:1c:d1:14:70:da:77:2c:c6:22:56:b6:
         83:e9:a8:41:27:e8:91:86:12:93:fa:b1:2f:8c:47:03:5d:63:
         18:34:03:2d:ae:83:af:51:d1:41:89:c8:5a:d3:dd:76:51:2b:
         d0:48:4e:21:db:8d:73:da:0e:bd:82:2f:0e:b8:cf:d9:48:51:
         c3:2b:08:e0:2b:3b:8a:3b:25:41:c1:3f:84:e2:1c:8c:f8:81:
         1b:84:95:b1:9f:27:a9:26:f5:71:fe:00:0d:e4:ef:a0:da:10:
         f2:6d:4a:46:37:e7:10:8b:91:dd:ec:2f:98:62:fc:02:0a:28:
         54:bd:7f:11:e2:52:0c:08:74:6a:1d:c4:b5:43:48:22:8c:0b:
         bc:a2:9f:cb:13:c8:39:9c:41:cd:18:23:93:88:76:72:bb:a0:
         61:0a:86:15:a7:4b:2a:db:0f:df:aa:7e:e0:b3:6e:a8:50:b3:
         5f:43:1e:0b:b3:5f:98:6b:fa:83:b1:f6:8d:2e:85:4d:6e:aa:
         ca:53:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:47:55 2026 by rpki-client