Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File:                     GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier:          oRh0uqPWB44yr6L2dnZ6rBNLnQg+k1G5sZ6cgy2tFZk=
Subject key identifier:   B6:8B:E4:C7:3D:A4:28:FB:50:ED:37:09:65:24:EE:E8:3B:0F:1C:10
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer:       /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial:       01A105129073FB732BE76D31E6F993AE307A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number:          061B
Signing time:             Sun 04 Oct 2026 04:01:04 +0000
Manifest this update:     Sun 04 Oct 2026 04:01:04 +0000
Manifest next update:     Mon 05 Oct 2026 04:01:04 +0000
Files and hashes:         1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: 5u8xZUxtvwe0jSZM/jXzRVsYJPyLDBEYsHgDU/RB5k0=)
                          2: aKJTM1Uf5WiFwk0xaQDn_EEx6LY.roa (hash: Bk0oWK0Lkt5p+4sdJT9WxyXxSp/0EFpvdzicJ3h6H0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:12:90:73:fb:73:2b:e7:6d:31:e6:f9:93:ae:30:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
        Validity
            Not Before: Oct  4 04:01:04 2026 GMT
            Not After : Oct  5 04:01:04 2026 GMT
        Subject: CN=b68be4c73da428fb50ed37096524eee83b0f1c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:f4:57:b7:47:63:04:01:8a:c8:66:2e:e1:
                    b5:09:d9:c0:73:46:53:b9:cd:10:78:78:9e:1a:fd:
                    c4:40:05:32:57:19:1a:a4:67:73:03:10:06:de:62:
                    94:3a:6e:2a:af:b6:4e:2d:57:59:05:0c:00:96:18:
                    dd:dc:29:14:ce:dd:27:86:48:ff:d6:ff:92:0d:cb:
                    84:bd:52:b6:f1:fb:dd:36:0b:fd:bf:a5:4a:ee:86:
                    51:b2:66:6e:41:96:74:0e:d3:07:52:69:63:eb:bf:
                    fb:77:fc:2e:0e:a5:8f:78:7f:79:68:dd:f0:9e:0b:
                    cd:51:c6:05:bf:00:a4:19:4c:a1:7d:cc:27:31:88:
                    6f:b2:7f:3e:50:a8:4a:55:86:98:85:bd:72:64:02:
                    f5:30:89:1c:2d:83:df:52:58:6d:6a:6d:9c:a8:53:
                    f5:1c:d9:1e:ed:da:68:58:02:da:ac:3c:ff:24:85:
                    f5:58:1e:e8:2a:c1:bb:75:39:48:25:60:c7:ac:0c:
                    05:1a:72:f4:0b:21:ca:ad:d9:3f:f7:25:f8:2a:4f:
                    0d:9b:20:8d:58:69:0c:65:0b:77:47:62:7b:96:4d:
                    cd:82:3e:34:35:67:da:0a:a8:ff:68:2e:7f:d2:31:
                    7e:0f:9d:0a:d7:15:f7:13:74:1e:3e:d3:41:83:bd:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8B:E4:C7:3D:A4:28:FB:50:ED:37:09:65:24:EE:E8:3B:0F:1C:10
            X509v3 Authority Key Identifier:
                keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6b:20:87:96:bf:4d:10:50:9d:64:ed:f3:dc:99:49:4b:24:
         ac:3a:7c:18:e4:38:b7:80:d3:e9:c5:57:8c:3d:63:b7:ab:15:
         4c:4d:ee:d9:87:a8:df:a8:71:dc:60:77:35:33:8d:8e:c1:e6:
         0c:2e:73:d9:33:d4:b1:1e:ce:4f:d0:1e:bb:db:79:e9:81:40:
         d3:04:d3:4d:65:87:b9:19:cd:23:18:d5:4d:9a:a6:c2:9b:0b:
         51:ea:73:72:36:3b:b2:2b:62:1b:45:2b:9e:eb:cf:33:25:e2:
         4b:11:fc:b1:d4:fe:ea:a4:a6:8a:d9:57:c6:88:cc:02:39:21:
         62:8e:59:86:fb:ac:b2:44:9e:12:84:9a:df:d0:c4:0b:b7:c1:
         47:bc:be:05:ab:cc:56:09:ae:17:6a:c7:84:16:10:f3:09:0d:
         05:9a:48:56:1f:e7:90:bd:74:9e:1d:8f:51:1f:30:00:36:5a:
         c2:ea:80:21:6b:ee:c6:4d:e8:1f:36:69:9a:c3:8c:40:2c:c7:
         17:6b:c3:61:c4:20:33:9a:b9:8b:c5:9d:96:e1:7f:99:36:46:
         cf:d1:aa:3f:4f:0e:16:89:5f:ef:1b:11:ae:75:a8:b2:13:ff:
         c1:dc:4d:16:5a:e1:cf:f7:cf:83:72:4c:d5:e2:cd:64:6c:58:
         7f:a1:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:01:26 2026 by rpki-client