Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File:                     gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier:          486kAQyBf1ulSBREabEG9KE7hSic5H4R1bM0WTbI0TA=
Subject key identifier:   8C:23:78:37:62:4A:6E:1F:8E:B2:09:24:34:17:2B:0D:9B:49:82:AA
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer:       /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial:       01A0DACD85D11D31F8A4C2CEEC918FE6FDFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number:          1A73
Signing time:             Fri 25 Sep 2026 23:01:37 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:37 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:37 +0000
Files and hashes:         1: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (hash: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=)
                          2: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (hash: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc=)
                          3: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (hash: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek=)
                          4: Z81lv8qaADBtEGYsx0-brJvvQeg.roa (hash: r6SobeHV+YoGbEJkji/z1sNc1KoSoCEgvZU8Lt5eYac=)
                          5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: OUg1hG3SpOjBs6MD6kmcka61C/nkSYrlyPG9jsgMLyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:85:d1:1d:31:f8:a4:c2:ce:ec:91:8f:e6:fd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
        Validity
            Not Before: Sep 25 23:01:37 2026 GMT
            Not After : Sep 26 23:01:37 2026 GMT
        Subject: CN=8c237837624a6e1f8eb2092434172b0d9b4982aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:ba:6d:61:0c:b0:90:7f:d2:c7:c8:35:91:
                    f6:62:e2:86:f0:d5:f2:51:fe:01:fc:05:0c:ca:93:
                    9f:7e:8b:00:e7:b2:c2:f3:b2:46:d6:99:e2:d9:3b:
                    b3:01:6c:1d:26:e4:95:03:29:fb:6c:24:f4:93:72:
                    d9:43:ef:4f:f7:ef:de:60:d6:b0:2a:83:24:a3:30:
                    f4:e0:57:33:71:b4:1c:29:33:2d:d8:36:2a:eb:1c:
                    88:3c:3d:d2:4d:b3:47:c1:f7:b7:bb:07:54:bf:98:
                    c1:59:bb:e3:bb:7f:7e:1e:fa:3f:18:2d:f7:29:fa:
                    10:53:02:08:26:60:d7:a8:6b:6a:06:bb:b7:2b:40:
                    1f:83:61:ed:8e:88:5c:52:64:34:e1:7d:34:55:1b:
                    66:20:b5:5e:2c:cd:f0:2e:6d:d1:83:2f:15:e6:2e:
                    96:53:45:00:75:ed:e5:93:18:fe:76:d3:bf:70:cb:
                    c0:5a:ab:3b:42:a7:30:4f:81:f3:96:a7:cc:2a:6d:
                    96:9b:10:2e:a8:af:66:88:84:c3:2e:0c:3b:ec:b2:
                    c3:28:74:c3:9f:71:2a:74:41:52:c2:23:f6:96:b6:
                    f8:d1:cd:bb:04:27:3a:f8:2f:11:61:2b:bf:35:6d:
                    df:eb:ff:93:b7:5a:f0:27:bf:1d:0a:0d:04:93:0f:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:23:78:37:62:4A:6E:1F:8E:B2:09:24:34:17:2B:0D:9B:49:82:AA
            X509v3 Authority Key Identifier:
                keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:08:01:04:72:56:22:e9:d2:13:e6:b9:55:86:25:dc:52:90:
         00:7a:40:8a:25:d2:56:ae:f6:95:c1:a1:1f:ae:f5:c5:25:90:
         8b:9d:52:ab:2f:4d:d6:c6:2e:81:d0:e6:f4:9c:bf:b6:ca:20:
         89:e3:d0:a6:0a:f7:42:24:d5:42:fe:2f:10:c6:d7:fa:45:36:
         2a:0d:a9:db:a1:2a:f2:20:4a:ef:6a:c6:e9:1e:0a:b2:9e:51:
         1b:55:1e:f6:77:e4:44:3d:a7:d6:4f:09:5b:d4:28:82:94:4d:
         f8:43:42:6c:b0:f9:36:f8:5f:fa:8a:89:09:e9:d5:9d:98:8a:
         51:e3:8d:f7:48:b7:18:f6:b8:6b:96:a8:40:ca:e4:42:22:6f:
         1a:3d:14:6d:a6:26:e6:9f:7a:11:a1:a6:8c:dd:b1:81:bb:6f:
         e9:ac:18:e4:4b:39:68:39:11:aa:3e:93:18:f9:e4:39:48:99:
         4a:30:26:0b:a7:db:5f:60:91:23:10:5b:c0:c5:f7:f5:66:6f:
         0a:3c:63:66:e9:0c:17:fd:e1:57:8e:e4:ed:b7:8b:08:42:ac:
         84:65:2a:c3:12:8d:13:e4:c9:63:2c:1f:a4:3c:40:1e:6e:b8:
         37:e9:99:a1:81:02:74:93:37:6b:22:9a:ce:d7:7e:7f:7c:e1:
         ce:27:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:51:55 2026 by rpki-client