Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File:                     gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier:          fb51RZ5F4WcJhrXyLFTuDJFoTjLtAOGtgLn7tbvCffs=
Subject key identifier:   09:47:31:3E:C2:D0:12:6A:2B:5E:47:D7:87:56:D0:40:0F:9B:B2:7C
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer:       /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial:       01A0B8095834D9874A1D9542B2D3F7CF755E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number:          1A67
Signing time:             Sat 19 Sep 2026 05:00:15 +0000
Manifest this update:     Sat 19 Sep 2026 05:00:15 +0000
Manifest next update:     Sun 20 Sep 2026 05:00:15 +0000
Files and hashes:         1: BdSuQVDQN0VvLBhw0-t0KDo8T2w.roa (hash: Adx+9mj7hvvMFLBS193scbpgC/haFVM6A5WGrKZ0rkc=)
                          2: RB3MCZgDbeMI6s-D2_JUTZ_rqbY.roa (hash: JrGHevSUwFCGVeEzLDEb8HtCJMbEOdcnxPcVOLqyOAc=)
                          3: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: tMgedyV4tKZ5wES2ea3/QImm8m+8EjJQ5FLaBB5px/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b8:09:58:34:d9:87:4a:1d:95:42:b2:d3:f7:cf:75:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
        Validity
            Not Before: Sep 19 05:00:15 2026 GMT
            Not After : Sep 20 05:00:15 2026 GMT
        Subject: CN=0947313ec2d0126a2b5e47d78756d0400f9bb27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b0:58:04:7c:af:2b:d2:ed:67:fd:a6:fa:a4:
                    1e:29:a6:84:c5:6d:ed:62:d2:1c:4b:f0:bf:d8:00:
                    ec:ed:d9:d6:0c:34:8d:44:5f:1c:bf:58:56:10:2c:
                    5e:96:0e:15:8d:ed:3f:b2:83:9c:12:82:ae:3f:06:
                    7c:30:a5:83:de:0a:95:a0:c1:c1:cc:9c:7d:b6:4d:
                    e6:5f:c9:6f:22:ac:7c:25:4a:46:53:b4:a9:06:bb:
                    12:64:24:04:26:cc:c0:62:22:09:9f:dc:13:86:4c:
                    04:ed:71:22:c2:61:38:79:04:7b:fd:f5:65:9c:e2:
                    0a:d5:35:79:82:11:83:6b:a6:8f:e4:31:24:91:fd:
                    8b:eb:82:0b:cc:93:a9:80:87:8e:07:42:5d:d1:03:
                    73:db:92:e2:ab:f9:c0:c0:c7:34:f3:55:bc:77:78:
                    48:be:7b:4a:3f:b5:2c:ab:e8:f4:27:fe:61:22:15:
                    1a:82:12:7a:2e:2a:87:65:7a:46:57:6d:eb:8c:c7:
                    81:35:2c:7e:1d:aa:9c:56:5e:0a:38:d1:94:5c:4e:
                    6b:02:2c:64:0b:f9:75:f4:0d:5d:61:d8:f0:aa:95:
                    8d:8e:3b:cf:23:93:7e:14:ab:8b:13:c6:8d:b5:81:
                    1c:19:49:0c:2f:24:54:9c:6c:76:47:ad:98:91:35:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:47:31:3E:C2:D0:12:6A:2B:5E:47:D7:87:56:D0:40:0F:9B:B2:7C
            X509v3 Authority Key Identifier:
                keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:87:3e:99:d6:06:9c:14:1b:a3:33:b9:77:f1:e2:21:28:
         e1:77:53:a3:e3:d1:fb:36:a9:31:6c:db:a1:d8:70:4b:96:fd:
         b8:1d:7b:b1:72:09:9a:b2:73:ac:fd:a8:be:7e:a3:c9:2f:da:
         6a:58:94:96:ac:66:00:fb:7f:5b:31:cb:aa:6b:f5:c4:06:fd:
         c1:12:9f:6e:40:38:9c:b2:6d:3f:8f:b2:42:2e:ec:31:af:01:
         7a:5f:53:32:d9:80:7d:4e:92:e5:c7:ba:d0:4d:2b:20:3b:e6:
         1f:6c:60:16:1f:09:7d:ca:e1:3d:f8:90:40:90:1e:a7:0c:3d:
         9f:d4:74:6d:aa:69:ad:f8:b8:da:52:d4:a4:77:8e:73:57:b4:
         91:20:d7:f6:bb:25:ce:ad:0b:d9:cb:44:5b:1a:cf:3f:2b:cb:
         21:a8:c9:1c:c7:f2:13:7a:32:f8:10:16:47:5a:a9:71:bf:4e:
         ad:86:a1:6e:48:b3:c7:ae:f6:01:32:1a:05:65:82:c8:e4:c8:
         30:0b:fe:78:46:ea:03:40:9b:fe:e3:58:99:b0:30:58:24:d2:
         78:cc:9f:18:e1:ab:e6:89:b3:71:fe:1e:16:51:3d:51:e9:0d:
         87:c4:2c:16:39:6a:b1:cc:6a:4c:05:25:21:ce:d7:25:56:a6:
         1b:a8:18:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:03:34 2026 by rpki-client