Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          Xfi0E6V6hZ6uNYEQOGY43udAwRnuVfBUAp4VEzVIjG8=
Subject key identifier:   DC:09:94:33:EA:7A:D4:E8:FC:20:1B:0D:61:89:E1:5C:A2:3F:15:0A
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       01A0CE248EC5DE3A380578F0A1F4079DF8AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 12:01:37 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:37 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:37 +0000
Files and hashes:         1: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: OtM97sUQWoxo6C2OZJqjqxvhTpKNrYANY0B+1DcedUQ=)
                          2: sl_qn_gMelOUS3XMJODn5T8W54w.roa (hash: MlmmeycjTjJos3jc0JF/rEVajpy499lBCd4bHXbugOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:8e:c5:de:3a:38:05:78:f0:a1:f4:07:9d:f8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Sep 23 12:01:37 2026 GMT
            Not After : Sep 24 12:01:37 2026 GMT
        Subject: CN=dc099433ea7ad4e8fc201b0d6189e15ca23f150a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:b4:d5:13:a0:7c:ff:99:06:2d:7e:18:6e:
                    91:54:81:66:64:f3:24:55:9a:5b:4d:50:f8:df:a3:
                    94:61:14:f6:9f:7f:84:fe:64:58:33:02:8c:3c:35:
                    23:b2:0b:1c:a7:dc:74:03:0a:ba:29:b1:cd:62:06:
                    a6:5b:b7:e5:33:43:71:40:92:98:9d:0e:68:0f:74:
                    26:71:6c:76:bb:59:c5:eb:86:e4:3a:f4:ee:e4:c9:
                    0d:6d:d1:43:93:88:ee:b9:45:93:8d:3d:50:24:c6:
                    3c:6f:ff:8e:df:e0:5a:d3:c0:ef:02:ea:27:3c:02:
                    ce:99:90:05:91:19:77:47:64:a2:b4:5b:7d:5c:b1:
                    8f:33:99:25:0f:30:bc:a2:d2:16:c8:4b:c9:7e:04:
                    a5:90:ed:ea:07:7b:23:d1:49:29:bd:39:a9:c7:50:
                    d6:04:7c:39:20:32:26:a2:dc:d9:f1:e4:cf:a9:3a:
                    cf:bb:ca:6c:06:b0:64:22:67:1d:88:5a:09:f7:0f:
                    1f:07:b5:23:f1:eb:ec:2b:5a:04:ed:5e:04:87:82:
                    f3:cd:bb:30:a5:f6:e8:4b:bb:ed:0e:fa:fa:78:ed:
                    a1:f3:7d:84:ba:77:5b:af:e1:f6:35:03:b2:f3:76:
                    01:9f:c8:55:aa:e1:20:79:8c:16:dc:65:2e:5c:e9:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:94:33:EA:7A:D4:E8:FC:20:1B:0D:61:89:E1:5C:A2:3F:15:0A
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:6c:bd:a8:08:b1:e5:23:c0:6e:49:1a:1e:a5:6f:70:59:aa:
         47:65:83:9a:35:56:8d:61:f9:0a:9f:76:e9:8c:00:13:24:9c:
         48:97:2d:88:e3:48:64:fd:94:88:d3:7e:8d:65:59:a1:85:27:
         95:f5:91:19:ce:3a:e5:a4:25:62:84:70:3f:31:e6:80:8e:0d:
         15:9c:3c:03:e1:6a:3b:1f:4f:1f:c9:ee:9f:fe:0c:02:6f:67:
         45:94:02:26:af:04:d9:7d:ba:68:3b:30:0c:f1:ff:52:82:49:
         c7:21:59:69:d2:e7:35:3b:7a:f0:8e:2a:98:7c:88:97:a5:b2:
         44:25:d6:32:37:46:3c:fa:e5:19:e7:1a:77:ad:f7:7b:b0:6d:
         68:c1:4d:70:f6:84:fe:ae:97:23:f6:d8:a9:a8:8f:1e:88:f3:
         5b:b4:ea:31:dc:60:e8:b1:ce:6f:3f:5d:de:3d:67:59:3b:74:
         c2:97:7f:d3:52:ff:05:72:b5:d6:bd:1c:96:96:28:8e:d5:6c:
         0c:41:ee:ac:a8:fc:c5:c9:a0:1a:45:de:df:0b:d0:4b:1b:63:
         8f:6b:b3:a7:8f:70:71:23:5f:b9:09:51:ce:cb:c3:89:85:a5:
         4e:36:47:a6:81:e8:79:37:cf:8b:f1:20:37:ba:7e:db:be:32:
         63:d8:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:50:12 2026 by rpki-client