Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          q0B53l/mESwwm2kRrBHEOe3aBWTzWZpNYY4DClHkdnI=
Subject key identifier:   3F:70:88:43:AD:B7:5E:12:66:93:87:D6:AF:A2:D1:46:DB:20:18:74
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       01A119E28613C92BFA87C76128E90D723A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          1A96
Signing time:             Thu 08 Oct 2026 05:00:38 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:38 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:38 +0000
Files and hashes:         1: ATLOmeA5cf4AwJ9U-Q-N1ldTcPE.roa (hash: hnP5uN1NwwvHi/WK/M6S1b6bdfJWGxirQCx3zSYRXtM=)
                          2: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: 8+5Msowa2nnw5zQhpqNH3LunNiyNwmuoIILYmiidTKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:86:13:c9:2b:fa:87:c7:61:28:e9:0d:72:3a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: Oct  8 05:00:38 2026 GMT
            Not After : Oct  9 05:00:38 2026 GMT
        Subject: CN=3f708843adb75e12669387d6afa2d146db201874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:e7:1f:b7:5b:9a:d4:1d:b3:0a:05:18:9b:
                    4a:75:96:a2:40:82:67:b7:82:19:8c:15:76:48:ef:
                    31:5d:65:92:8b:22:e5:4d:66:fd:fe:f4:91:d0:fd:
                    d3:00:ad:89:09:d8:16:d5:38:40:53:5d:4c:f0:14:
                    6d:c9:c5:17:04:99:df:bd:4e:65:9b:e5:d0:07:26:
                    5f:bb:03:d4:e7:c4:29:93:13:52:3d:49:85:0c:ca:
                    54:a4:03:1d:a1:2d:c6:07:af:6c:a8:3f:04:f3:fd:
                    3e:2c:bf:66:c7:b0:6e:68:9a:df:4c:e2:40:99:43:
                    a3:8f:22:9e:dd:ad:02:db:fd:6d:7e:2f:c8:5c:43:
                    dc:fb:9b:94:6f:5f:d4:95:7c:f9:9f:f5:2e:3a:0f:
                    dc:ff:bc:78:59:b7:e2:e6:0a:34:5f:a4:f5:87:06:
                    7c:9c:21:23:d7:51:dc:6a:68:ef:56:94:11:7e:91:
                    8f:5e:a0:e4:fb:29:a9:3f:25:e5:27:36:94:4e:c7:
                    48:e6:f1:5f:c8:60:95:84:11:83:cd:4b:7d:fa:0b:
                    df:d8:88:19:18:5d:7a:4b:89:7d:7b:f4:93:27:fd:
                    85:13:d1:53:2d:c9:97:40:cf:0d:8a:1c:cc:a0:10:
                    69:e0:bd:28:cf:5c:7a:d6:bc:d4:89:0e:8d:7d:ad:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:88:43:AD:B7:5E:12:66:93:87:D6:AF:A2:D1:46:DB:20:18:74
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2f:22:30:b9:48:ad:42:8e:51:cc:93:35:e0:3e:e4:41:b6:
         e1:74:b3:6f:04:e0:03:47:17:8a:c1:ce:81:af:f6:e0:3e:c8:
         b4:41:30:cd:3a:30:7e:be:c5:f1:12:51:b3:5f:4c:11:d4:74:
         1e:7a:13:d0:b2:30:1f:63:04:40:4b:08:24:3f:b9:02:e5:3e:
         04:2a:39:f3:b5:bc:f8:ec:68:82:15:55:5a:5a:69:8e:05:8b:
         69:e5:b7:56:c6:8e:b8:4f:d8:09:b5:3f:78:6c:25:1d:86:55:
         f4:00:8b:e9:f4:87:2a:4a:06:42:7b:59:a3:0e:a1:2c:10:60:
         43:13:ef:fd:79:4e:a2:9a:1a:8a:47:b0:5b:74:7b:62:ee:e0:
         5c:1a:27:8e:f1:7b:30:7a:25:54:83:9c:36:24:b8:f1:01:34:
         27:d5:99:5a:56:2a:32:b7:bd:c3:ad:63:f9:a4:37:bd:16:eb:
         8c:8e:dd:b8:e7:06:da:3d:74:9b:ec:44:9c:fb:8c:df:03:97:
         04:3c:9d:13:ce:02:5d:71:28:5a:7b:08:1c:90:17:ca:9d:4d:
         37:c6:aa:23:6d:19:fb:f5:bd:5a:95:bb:9b:ba:3d:bd:88:f3:
         96:f4:a1:05:7a:6a:38:da:37:ff:1d:ab:15:d4:e9:88:22:cb:
         85:63:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:59:30 2026 by rpki-client