Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File:                     GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier:          AevySAXSwSHEBZSkpDms27Qxb0bsYcuBgLBZPad799c=
Subject key identifier:   4D:41:0F:31:F7:5F:DD:9F:C4:11:A3:59:C2:AE:66:9B:15:08:E9:54
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer:       /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial:       01A1686BA20B1B5068A9A6CC82FE6C6F3FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number:          036E
Signing time:             Fri 23 Oct 2026 11:00:46 +0000
Manifest this update:     Fri 23 Oct 2026 11:00:46 +0000
Manifest next update:     Sat 24 Oct 2026 11:00:46 +0000
Files and hashes:         1: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
                          2: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: K7u1r+xpVyVj6eDBjD6qaprvz+VWCkYMCUg3BeRXev0=)
                          3: REiaLPFJMgnbb32-B6MU-uTjIlI.roa (hash: nKuK7TPAmuzDf184++qSMR2f3U6nDVTJDG8nEA5Zshs=)
                          4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
                          5: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
                          6: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
                          7: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:68:6b:a2:0b:1b:50:68:a9:a6:cc:82:fe:6c:6f:3f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
        Validity
            Not Before: Oct 23 11:00:46 2026 GMT
            Not After : Oct 24 11:00:46 2026 GMT
        Subject: CN=4d410f31f75fdd9fc411a359c2ae669b1508e954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:39:0e:84:a3:ef:df:65:b1:cf:f9:7e:93:
                    87:27:8d:cf:45:75:d7:fc:fc:4e:a9:8c:fe:9e:4e:
                    0e:2f:af:aa:85:81:34:4e:6c:72:54:b2:5e:a5:e3:
                    d9:c6:38:80:4a:d8:77:98:13:ed:a5:1c:0b:fc:f1:
                    6e:7e:41:52:a8:9c:ab:dc:2f:8f:78:8f:ff:cf:c9:
                    99:67:3d:8c:ac:13:76:8a:46:81:0a:94:27:18:91:
                    61:82:88:bb:34:6a:f3:d8:8f:b0:9e:39:98:b6:45:
                    a8:27:cf:9a:49:fb:6d:e6:6d:a4:95:9b:fc:33:81:
                    63:cd:88:18:e8:43:c3:0f:b7:64:81:86:2f:70:08:
                    b3:ee:9d:d5:b7:57:3d:c2:28:4d:b8:16:ea:66:0e:
                    96:3e:45:84:27:43:74:69:b3:8b:79:34:2f:fb:1f:
                    d6:24:1e:09:a9:6e:54:1a:4f:85:33:28:c0:79:a0:
                    2d:61:b2:97:63:65:b9:19:c7:f6:01:fa:5a:14:5d:
                    64:50:25:a3:83:0f:51:c1:1a:d1:7d:ab:83:59:1b:
                    d2:a4:88:f5:a7:25:5f:00:87:ee:a5:67:94:c0:ce:
                    fd:01:21:08:d4:65:1f:40:a5:34:8d:07:eb:f8:5d:
                    22:51:70:59:c5:46:10:18:f5:46:88:0a:7a:cd:de:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:41:0F:31:F7:5F:DD:9F:C4:11:A3:59:C2:AE:66:9B:15:08:E9:54
            X509v3 Authority Key Identifier:
                keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:17:70:8a:30:77:cf:5d:cd:64:b4:7c:69:c9:73:ab:52:aa:
         65:91:00:05:5f:e9:85:d5:7c:a0:29:b8:bc:48:1f:f5:0d:cf:
         30:ee:bc:36:2b:8f:6b:a0:36:8b:ab:ff:b3:78:32:70:17:a9:
         cc:e1:65:04:8f:fe:a5:40:32:23:22:07:7f:b9:05:fa:2b:54:
         ee:50:cb:8b:fe:67:87:73:bb:7e:01:d7:dc:6e:f7:6b:8b:fa:
         03:01:0d:fc:b9:92:da:a3:87:49:5d:db:05:fc:b8:27:c7:f2:
         de:99:21:08:90:d0:7f:01:4f:f5:2a:8d:ff:19:f6:ac:42:d8:
         ca:97:79:36:24:51:b7:52:11:de:7f:1c:72:08:a8:89:39:06:
         77:e3:3e:f4:49:08:79:98:b2:fb:2c:7e:a8:58:5a:d8:38:73:
         a7:aa:4e:17:fe:85:1c:56:44:b1:1a:ac:df:e5:3a:77:70:1b:
         a7:74:e9:fb:ab:b1:49:f4:1f:87:de:bf:af:f1:8c:01:5f:f1:
         08:bd:83:28:ae:27:d5:d5:26:83:ae:f6:9a:84:81:bf:3e:56:
         c6:2c:99:d2:59:6f:3b:47:fd:9b:7e:c5:94:1d:b9:18:3b:81:
         45:aa:d8:dd:29:14:b7:e7:ee:c0:ac:fa:a9:ed:00:10:14:2d:
         e9:59:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 21:07:23 2026 by rpki-client