Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File:                     gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier:          kvq/9Fdh+kE99x5wQ8dnr/mL7QZlojNPtJW+4kthIKw=
Subject key identifier:   4A:62:35:81:7E:EB:E5:F8:75:27:9C:F7:D7:42:19:AB:2D:AD:D9:1D
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer:       /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial:       01A1566603054940862CBD654B58DDFC94A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number:          1771
Signing time:             Mon 19 Oct 2026 23:01:28 +0000
Manifest this update:     Mon 19 Oct 2026 23:01:28 +0000
Manifest next update:     Tue 20 Oct 2026 23:01:28 +0000
Files and hashes:         1: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (hash: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs=)
                          2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: kjMn/B+qtHDVNwaV6CDiDbCgUXo8Kuo5H91sKYS7nvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 17:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:56:66:03:05:49:40:86:2c:bd:65:4b:58:dd:fc:94:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
        Validity
            Not Before: Oct 19 23:01:28 2026 GMT
            Not After : Oct 20 23:01:28 2026 GMT
        Subject: CN=4a6235817eebe5f875279cf7d74219ab2dadd91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:dd:83:c0:87:88:8c:eb:53:ce:57:3c:53:
                    1b:0b:2d:25:31:fb:14:96:8a:96:fa:5e:54:7d:d2:
                    c4:8f:6e:65:21:5c:56:1c:71:cc:5e:07:c6:29:01:
                    8d:8a:d6:08:9c:57:0e:42:f7:40:c7:e2:5f:26:1f:
                    3b:21:54:a2:d7:80:b1:5a:ed:78:2e:78:10:98:9f:
                    23:4d:ab:f9:cf:0b:0c:95:a0:21:74:dc:19:73:31:
                    4b:dd:16:7a:42:14:7c:4c:72:c3:e9:c1:2d:8a:88:
                    a3:db:af:68:0f:f5:9d:00:90:54:35:f4:f4:63:38:
                    56:a2:d3:d5:3c:e3:79:c8:c2:4d:50:75:c4:a2:a8:
                    14:99:54:c0:fd:c9:37:ed:dd:b7:4e:49:d2:8d:5b:
                    ef:30:8c:da:3c:5f:32:fd:9c:94:76:5c:a8:90:9e:
                    52:eb:6c:c7:83:58:27:c8:19:95:b4:d6:45:8c:19:
                    ce:3e:55:8b:92:a2:b7:de:6f:cf:95:a8:87:4b:33:
                    a9:7a:6b:5c:9e:c2:1d:6e:15:1a:2c:ed:48:dd:e6:
                    5d:0f:a9:bc:09:e5:dd:a9:dd:9f:b1:ac:67:89:20:
                    80:51:88:f7:71:af:df:a8:67:99:e6:cc:a6:ad:f0:
                    b6:ff:f5:42:06:3f:39:57:05:b2:4f:c0:de:41:df:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:62:35:81:7E:EB:E5:F8:75:27:9C:F7:D7:42:19:AB:2D:AD:D9:1D
            X509v3 Authority Key Identifier:
                keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:11:e4:7d:f6:36:7d:92:20:9f:0a:be:f7:5e:0d:37:e1:
         06:62:23:ce:6f:53:4a:5a:06:5c:78:b9:aa:d0:dc:e1:7b:1e:
         34:b6:53:ac:37:98:13:18:d7:b2:4c:cf:c5:32:47:79:ce:e4:
         2e:cd:5f:33:b3:1b:1a:33:7d:18:e8:e2:85:7d:22:b5:b8:fc:
         a0:9d:ad:0e:92:51:56:3a:09:ae:27:70:83:7a:72:98:1c:9a:
         8a:ac:46:bf:10:5b:f1:34:a6:dd:7d:60:70:6d:25:ff:5e:20:
         61:c6:c9:62:ca:da:51:83:8e:bc:47:18:bc:e7:93:8c:c1:d1:
         40:19:f1:ac:ba:73:52:39:da:17:02:ca:f9:96:6a:e5:61:ae:
         b6:72:c9:e5:ca:f2:a7:70:bc:f2:18:4f:c1:24:71:1f:7e:6c:
         74:d5:f2:3d:8e:b9:01:f9:b1:f3:af:9e:e5:d8:61:43:e5:bc:
         fb:b1:d6:55:1e:8e:4a:c8:ec:bd:59:72:66:53:6a:ce:18:6f:
         62:26:68:8a:91:8c:d8:65:6c:5c:e9:b1:89:52:7f:b8:09:e3:
         8b:c4:4d:3c:de:a6:ff:d9:e6:24:fe:e4:57:44:09:75:02:df:
         79:cf:17:a3:75:c0:84:45:ea:de:ca:ec:28:19:63:01:49:68:
         2b:8c:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:05:14 2026 by rpki-client