Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          PTPGc1DTauCu/aL1zj8ZDUr4M4jI7idSj/sw9zR0jaw=
Subject key identifier:   5C:52:A3:3E:17:DD:67:4C:5F:79:B6:E9:27:61:6E:74:C2:AE:FF:CC
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       01A16722627242411A39E386F65BA1C2DE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          1AC0
Signing time:             Fri 23 Oct 2026 05:01:08 +0000
Manifest this update:     Fri 23 Oct 2026 05:01:08 +0000
Manifest next update:     Sat 24 Oct 2026 05:01:08 +0000
Files and hashes:         1: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (hash: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: XZdHZ+Ok+CkwkB9/Ly7UAjhjePm6DeOtpV8bRsl+684=)
                          3: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (hash: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M=)
                          4: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (hash: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8=)
                          5: xoTCt08cS7BgB_IaDphUNXFIRxo.roa (hash: s3xQf9aSy+8qTNIu1cEAABJrY28zwSkcrisFpnI+ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:67:22:62:72:42:41:1a:39:e3:86:f6:5b:a1:c2:de:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Oct 23 05:01:08 2026 GMT
            Not After : Oct 24 05:01:08 2026 GMT
        Subject: CN=5c52a33e17dd674c5f79b6e927616e74c2aeffcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:4f:f2:58:cf:fd:c6:51:8f:a9:b3:c9:28:
                    6a:b0:f0:f1:49:fb:7d:ce:49:ef:c3:ed:13:2b:1f:
                    f5:07:66:14:34:da:6b:7c:a0:77:80:55:3f:e2:61:
                    66:8e:f8:06:a8:e4:99:61:c2:43:8d:56:7f:f0:22:
                    81:a1:30:30:04:af:1b:a9:dd:6b:b4:a3:06:f2:e2:
                    56:2c:45:6a:20:b3:a9:91:29:ab:0a:6b:07:2c:2a:
                    51:8d:09:9a:9b:55:44:83:be:69:6e:c9:ce:66:6b:
                    b8:62:80:41:bf:2f:4b:a4:8b:d9:fc:b3:e2:26:85:
                    12:94:e3:27:83:80:95:a8:6b:54:b4:67:83:1e:49:
                    87:c6:f7:47:b2:8f:2e:5a:15:e3:6f:84:ec:73:18:
                    5b:7a:0a:42:66:2e:90:27:9d:1f:3a:57:aa:28:0b:
                    bc:5b:23:6a:c5:bb:00:5c:87:f6:62:92:02:b0:f4:
                    54:8e:ca:43:5e:34:ca:c7:b9:ad:19:6c:a6:1d:b2:
                    03:52:fb:a3:a2:e4:67:cf:ee:a3:ba:17:52:fe:fb:
                    d9:20:9b:d4:da:bc:65:8f:26:c2:74:95:73:d9:5a:
                    95:c0:96:6a:96:6e:cd:72:7b:03:67:a2:84:02:c4:
                    ca:75:f8:ec:04:92:70:bd:3d:6c:34:45:55:a6:c8:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:52:A3:3E:17:DD:67:4C:5F:79:B6:E9:27:61:6E:74:C2:AE:FF:CC
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:55:7c:94:ba:28:b9:94:39:01:02:ed:35:8d:12:c4:c5:9e:
         68:05:47:dd:0f:e1:67:aa:17:d5:99:a7:08:99:1d:2f:c4:98:
         ab:22:c6:6d:71:1e:f1:67:5a:b0:dd:15:fd:2e:01:fd:1c:22:
         bf:9b:0f:6b:39:a2:ae:cc:bf:e6:5a:6e:93:b3:d5:ed:ff:28:
         f8:ac:f1:28:1a:97:eb:ce:ef:64:3a:4d:2e:fd:cd:9b:af:ec:
         54:10:d6:18:6a:09:91:86:e5:c6:d4:6b:f0:7a:ce:b8:35:34:
         a1:02:65:99:9f:60:fc:de:5d:0c:b1:3c:c7:8a:3d:2d:02:70:
         32:ff:f3:83:24:c4:19:a0:e9:cc:54:d7:90:96:29:fa:47:66:
         31:8f:25:48:8b:3a:0f:51:9e:14:35:f2:d3:1a:3f:8d:47:1c:
         b1:1c:a0:30:c7:0e:f3:73:2f:5b:57:d5:0c:77:71:ff:2b:09:
         bf:d0:21:7b:8b:5a:ea:92:c1:e3:7c:0c:3a:e0:95:87:4b:1b:
         fe:e6:23:83:51:b2:d9:4c:98:3b:ae:4d:12:f4:4f:0b:b6:66:
         f3:f2:10:fa:77:06:fe:dc:d5:40:ed:93:b1:c5:7f:31:3a:b2:
         90:0a:55:8c:fd:52:59:77:b6:da:bb:28:e5:24:74:12:61:15:
         49:b7:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:21:43 2026 by rpki-client