Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          Co3Lq/8xK6oi6wGfBtg3Ub20vNxSKX2ZRA13SLNpQ8U=
Subject key identifier:   99:AD:D0:73:07:B9:E8:D6:93:13:0C:56:9A:33:E4:AE:8A:2C:0D:8B
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       01A0DA96A4A587D436FF1D2B64E1F86B934F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          1A72
Signing time:             Fri 25 Sep 2026 22:01:40 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:40 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:40 +0000
Files and hashes:         1: BCswXhh13-96UzaS6jsy6o1xQtA.roa (hash: ZcV3c026LJ5PD6nm+askgP2WeXj6YnsPaEau8hz76oA=)
                          2: Bl5slAIXRPgWtIinsLCmL3-jbzk.roa (hash: i6BHS+hInLwE4GPTdlCdthLjEksUt9oFXu6hrkt0YCc=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: 1ey8DUlG/zmUnGnkmdRqVowMQcl2ps8IYKFZ+9PhSS4=)
                          4: MULF19ROPV0W_fTYRqeyOCt3Yeg.roa (hash: JLSm0NR2yp/7sLvwbHrccBHG0dmWFI9G+KuJqUy4oRE=)
                          5: osuY-cnY6vhLD6H1gcoPAxb709k.roa (hash: uqRcFkq6jjVYOzdkGQsiVwhb9Q+ozJsUHkALBpXOot0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:a4:a5:87:d4:36:ff:1d:2b:64:e1:f8:6b:93:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Sep 25 22:01:40 2026 GMT
            Not After : Sep 26 22:01:40 2026 GMT
        Subject: CN=99add07307b9e8d693130c569a33e4ae8a2c0d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:e2:3d:d2:aa:0a:cb:62:99:a2:3c:71:6b:
                    91:ed:17:c9:2c:22:94:18:9d:8f:ce:46:8c:dc:51:
                    12:fb:4f:cf:28:e9:4e:8c:75:95:d6:71:3d:a3:dd:
                    62:3c:c6:38:07:1a:54:0d:39:46:9c:99:08:e8:4b:
                    1d:8e:c9:6f:51:d4:d4:1f:2c:fa:7b:61:15:a1:51:
                    e4:a1:43:5f:85:2f:6f:5e:0e:66:0e:d7:b5:02:f2:
                    de:d9:38:84:15:38:46:4a:0c:27:af:d4:75:27:0c:
                    37:41:3c:fb:82:97:c7:44:81:38:cd:7f:cc:7f:69:
                    1f:46:ba:d0:28:79:08:6a:9d:4e:26:84:a5:95:0c:
                    79:1b:58:1c:d8:01:9d:58:f1:66:a9:00:92:d9:31:
                    42:f4:a3:ce:8c:3a:dd:7e:31:b8:97:05:05:f1:60:
                    d7:a7:a7:a8:15:14:4c:bb:ab:4c:5d:06:c6:43:66:
                    a9:6c:2b:00:48:c3:bb:ce:b1:0e:3c:56:10:be:f0:
                    39:15:07:1f:27:54:c1:0e:29:bb:c3:73:10:ce:74:
                    07:f6:f1:3a:bf:22:c3:b3:7f:0d:4b:90:6d:01:ed:
                    98:d9:e8:53:d6:c9:58:ae:b0:02:3c:8e:da:80:92:
                    47:2c:18:6a:b4:75:86:58:ba:df:14:5f:9d:d2:59:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:D0:73:07:B9:E8:D6:93:13:0C:56:9A:33:E4:AE:8A:2C:0D:8B
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:1f:1c:ac:aa:91:94:95:52:80:10:15:74:60:f8:3d:00:34:
         3c:12:b7:78:16:bd:cd:10:e8:73:69:55:05:56:37:91:bd:3f:
         09:21:d5:4e:0d:7a:c2:5c:4d:4c:f0:c5:cb:eb:cf:f0:e4:66:
         b0:9b:56:e8:89:17:20:7d:ac:92:a8:8d:b0:98:51:a9:69:8e:
         d4:38:04:94:58:e0:8d:c1:69:2b:47:a9:f5:30:9f:c2:db:c5:
         8c:18:31:e8:44:ef:9a:b8:45:f6:36:03:8a:d7:86:63:be:28:
         5e:e2:dd:97:af:f2:38:52:2c:da:b5:05:67:d6:3d:8d:7a:8b:
         d7:ad:c7:8c:05:f8:0e:76:e6:e0:c3:23:f2:35:c7:9e:51:ef:
         94:05:0d:c6:c3:63:d6:a9:f4:63:74:65:d1:44:11:16:cb:27:
         bb:f7:e0:12:be:9a:21:78:59:61:de:dd:1f:1a:2f:b0:7f:e7:
         b4:61:21:7e:1a:c6:88:37:29:fb:cf:1a:2e:1c:2a:22:35:59:
         9b:f2:d9:49:3b:6b:a4:dc:ec:3b:3e:25:2e:89:bd:b2:08:e5:
         c8:bb:6d:0e:08:01:ef:62:a9:39:c3:1b:70:86:9c:b9:e6:66:
         0b:0b:d5:28:44:d2:0e:16:2c:95:76:be:69:0d:5c:08:bd:a5:
         d3:66:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:58:11 2026 by rpki-client