Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          1I0h+fLWRpILJtrIlw1fQTwIMRjcbosgx0uT5Yhrryo=
Subject key identifier:   50:20:4E:2A:09:1D:A2:EC:5A:B5:AF:C8:0E:AC:73:1B:46:86:43:6F
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       01A140B9BBDE89FFBA77E5F4756A36E71D78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          0986
Signing time:             Thu 15 Oct 2026 18:01:16 +0000
Manifest this update:     Thu 15 Oct 2026 18:01:16 +0000
Manifest next update:     Fri 16 Oct 2026 18:01:16 +0000
Files and hashes:         1: FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa (hash: Zs2NR7v6cxcECJIbaIPTJM9/Q7GTHlESDly+5o8OUyM=)
                          2: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: TZ1ifGQp6Ah0pbRy8RS5FyqCRFKvEvV7+yX2rnh8tyM=)
                          3: H6M_InTSfVSn-OrNGGPHtf16a84.roa (hash: 67LBTnOipV4/GHI9IH+2paCeB2Zya21UUa/eX3d6cWc=)
                          4: aCTYERjrsgQgd2eNcJ-xT6iLuVA.roa (hash: FSNpstLHIA+MgvTMObqgBgedN4krH4ykjVcUB8HPSAs=)
                          5: n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa (hash: tTwofU2ePVTBmlzrQLu6MXi58L90+r8cW89IO3vj7uk=)
                          6: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=)
                          7: vGG_tLkKXFgbXJfTRyLCvmDQxbE.roa (hash: WShGMkUZgE0y2ZoQYvE7mjCYcDN54oRSnCg5kaDhPTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:b9:bb:de:89:ff:ba:77:e5:f4:75:6a:36:e7:1d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: Oct 15 18:01:16 2026 GMT
            Not After : Oct 16 18:01:16 2026 GMT
        Subject: CN=50204e2a091da2ec5ab5afc80eac731b4686436f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:47:35:cb:62:3f:b5:a9:de:d5:8c:e7:9d:
                    ca:62:79:0e:1e:fc:dc:af:20:b5:77:b1:f3:58:61:
                    25:0e:e6:7a:19:45:f9:b6:7f:f7:41:5c:2e:9d:27:
                    67:58:f6:20:af:5f:2d:ad:0a:d7:3a:0f:64:8b:0b:
                    e6:1b:24:ac:68:48:b8:a3:46:77:a9:d3:11:c2:60:
                    c2:27:cb:be:12:27:63:24:d2:5f:40:bd:df:d6:05:
                    37:ad:5d:4b:f3:74:89:0e:b8:7f:47:a5:bb:80:2f:
                    aa:fd:c6:08:5a:05:59:ef:e6:ad:7b:4a:32:b6:6b:
                    d0:14:59:7a:2e:36:9a:5e:66:0d:a3:6d:2f:d9:ee:
                    16:f8:78:ef:09:d1:cb:17:36:20:08:35:03:4b:c4:
                    97:2f:a9:7f:aa:93:88:09:a0:5a:09:09:96:2c:ba:
                    03:80:d1:02:86:e9:63:7a:0a:1e:31:97:71:cc:ff:
                    37:32:da:00:2b:72:72:43:0c:a5:62:8e:21:35:c4:
                    1b:43:ff:2c:5c:d6:6d:c9:0a:0a:45:b0:8e:c7:fd:
                    6f:b3:d5:f2:5f:83:e6:64:58:5e:37:ef:dc:5c:83:
                    8a:1d:67:61:95:a9:7d:c8:84:d5:80:6e:36:77:63:
                    3a:5a:ed:c0:9b:d9:ad:15:90:71:8c:5d:36:31:a3:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:20:4E:2A:09:1D:A2:EC:5A:B5:AF:C8:0E:AC:73:1B:46:86:43:6F
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:48:64:7a:33:7d:11:1b:19:8c:99:7e:f8:53:16:a6:d0:1f:
         d6:0a:d4:70:ad:73:c5:1e:5e:3e:fc:a9:b8:99:28:2e:3e:61:
         68:7f:e0:13:24:e6:3b:aa:19:58:14:13:08:3a:67:11:53:4e:
         8e:58:d2:a7:e3:ba:43:3e:5c:c3:1d:57:a7:e6:bf:4f:da:91:
         45:7f:77:df:fb:32:08:cc:e4:e4:ab:03:95:2a:66:eb:a3:e1:
         15:44:e2:92:5c:57:26:6e:7e:f4:72:15:82:43:68:c9:b4:3c:
         ca:41:70:1a:fc:21:35:38:0b:ee:ef:3a:38:ba:79:31:73:99:
         50:4d:16:d3:ca:7a:2e:15:81:ba:13:ca:d7:b7:57:ff:c8:be:
         b0:7e:6d:01:f6:72:f8:13:8e:e3:7b:e1:f5:e3:e6:06:d3:4b:
         e1:5b:d5:6d:34:87:9c:71:7a:ed:74:66:28:96:5c:1d:05:e0:
         bf:11:87:13:cb:7b:2f:7b:04:f2:e1:df:dc:fc:c8:3d:15:4b:
         69:ef:1b:83:c4:ec:80:0b:ff:31:df:f9:11:43:1a:bf:d7:cd:
         38:0b:2b:b4:11:f7:b6:c1:63:5b:26:88:49:97:7c:21:1e:43:
         43:c6:8f:45:e2:f4:29:f0:6a:28:3d:05:6a:dd:10:c4:3e:d8:
         41:c1:27:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAubveif+6d+X0dWo25x14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2
MGVjNDIwHhcNMjYxMDE1MTgwMTE2WhcNMjYxMDE2MTgwMTE2WjAzMTEwLwYDVQQD
Eyg1MDIwNGUyYTA5MWRhMmVjNWFiNWFmYzgwZWFjNzMxYjQ2ODY0MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivdHNctiP7Wp3tWM553KYnkOHvzc
ryC1d7HzWGElDuZ6GUX5tn/3QVwunSdnWPYgr18trQrXOg9kiwvmGySsaEi4o0Z3
qdMRwmDCJ8u+EidjJNJfQL3f1gU3rV1L83SJDrh/R6W7gC+q/cYIWgVZ7+ate0oy
tmvQFFl6LjaaXmYNo20v2e4W+HjvCdHLFzYgCDUDS8SXL6l/qpOICaBaCQmWLLoD
gNEChuljegoeMZdxzP83MtoAK3JyQwylYo4hNcQbQ/8sXNZtyQoKRbCOx/1vs9Xy
X4PmZFheN+/cXIOKHWdhlal9yITVgG42d2M6Wu3Am9mtFZBxjF02MaPtmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAgTioJHaLsWrWvyA6scxtGhkNvMB8GA1UdIwQY
MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt
MTQ0ZDc0NzNlYTU5LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5
LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkhkejN9
ERsZjJl++FMWptAf1grUcK1zxR5ePvypuJkoLj5haH/gEyTmO6oZWBQTCDpnEVNO
jljSp+O6Qz5cwx1Xp+a/T9qRRX933/syCMzk5KsDlSpm66PhFUTiklxXJm5+9HIV
gkNoybQ8ykFwGvwhNTgL7u86OLp5MXOZUE0W08p6LhWBuhPK17dX/8i+sH5tAfZy
+BOO43vh9ePmBtNL4VvVbTSHnHF67XRmKJZcHQXgvxGHE8t7L3sE8uHf3PzIPRVL
ae8bg8TsgAv/Md/5EUMav9fNOAsrtBH3tsFjWyaISZd8IR5DQ8aPReL0KfBqKD0F
at0QxD7YQcEnzw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:19:59 2026 by rpki-client