Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File:                     gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier:          VAz4UpbWOQuRi69tgy5iKon5+LKEIu9qfikHu5eb4Rs=
Subject key identifier:   31:D5:FF:82:F6:FF:D9:A8:F3:8B:FE:60:AA:19:01:AD:07:DA:4F:56
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer:       /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial:       01A0CFA44AA33CA9DA7ACAF6AB7865489BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number:          0610
Signing time:             Wed 23 Sep 2026 19:00:45 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:45 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:45 +0000
Files and hashes:         1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: +rOd07/RrbI+9sf3bk7hxH6VQbSeNrlhPOlDbfD0fF8=)
                          2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:4a:a3:3c:a9:da:7a:ca:f6:ab:78:65:48:9b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
        Validity
            Not Before: Sep 23 19:00:45 2026 GMT
            Not After : Sep 24 19:00:45 2026 GMT
        Subject: CN=31d5ff82f6ffd9a8f38bfe60aa1901ad07da4f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:91:bb:dc:c2:b0:9a:30:d7:34:dd:14:49:
                    6d:e3:80:c3:b4:cf:3b:37:d0:d0:af:d8:96:ce:9e:
                    ba:80:28:29:fe:ab:60:7c:43:5f:c7:5e:81:79:02:
                    56:b8:cd:12:54:a0:f0:72:54:ae:93:4d:6e:a6:f5:
                    2e:18:43:df:f3:d2:94:66:87:96:63:13:77:ba:76:
                    7a:91:88:f8:d8:c4:30:2e:63:85:93:39:d7:94:89:
                    94:79:5b:a7:96:0d:9f:04:ad:4b:96:82:04:c0:7b:
                    ae:d7:81:fa:b3:dc:6d:a4:0a:80:c5:37:02:ff:ad:
                    a3:09:8d:ed:dd:f5:2c:59:df:54:7c:9f:60:85:48:
                    f5:79:bd:ef:b7:91:38:a5:05:0f:16:bf:45:78:b9:
                    4b:7d:9a:b1:60:68:ef:bc:e5:1c:42:44:3a:19:91:
                    3c:dd:51:ed:46:b0:39:06:71:d5:04:e0:98:ad:b0:
                    13:77:d1:48:25:88:17:fc:27:37:81:cb:94:5c:e4:
                    41:f1:d4:e7:7c:59:f2:80:cb:fd:87:b4:7e:cc:ea:
                    fc:db:9f:33:47:77:5a:ec:a8:46:cb:d3:bf:2b:00:
                    2d:5c:f1:99:9d:f6:74:d1:b7:d4:8c:5a:6a:f3:1e:
                    11:e1:ac:89:04:34:37:54:ee:97:4d:62:d3:2b:7f:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:FF:82:F6:FF:D9:A8:F3:8B:FE:60:AA:19:01:AD:07:DA:4F:56
            X509v3 Authority Key Identifier:
                keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:57:44:b7:ca:a4:86:c6:2a:42:ac:0a:dc:6e:d3:40:6f:f0:
         7f:52:f0:56:b4:4d:ac:24:78:55:08:73:24:d1:44:59:05:18:
         f6:7d:e4:46:c3:4b:ce:d9:0a:d5:01:bf:e5:dc:39:2d:6e:a2:
         8a:c7:01:e7:b7:50:fd:65:c2:4e:1a:75:62:79:9c:ee:64:e7:
         87:d9:88:a0:41:93:f7:cd:2d:36:5b:56:38:bd:13:d7:79:09:
         54:d2:6b:41:bb:e8:68:a4:8c:d7:20:b0:78:ad:86:70:7e:04:
         24:de:00:f6:8f:e9:7e:01:2c:e1:ff:4c:14:d5:b6:a5:d9:fe:
         fb:20:c1:ae:30:99:b6:5e:62:92:47:4e:a9:e0:e7:1b:61:fb:
         e4:ed:df:04:a4:2e:36:14:87:8a:70:c0:e2:ee:c8:30:94:61:
         c3:28:c4:2c:3e:81:63:7f:28:8a:7b:ea:6b:e6:0f:bd:a4:5a:
         d6:53:40:45:10:a2:ae:71:55:59:af:d3:48:dc:fd:0b:78:3c:
         b7:3e:cb:49:e1:e1:1d:bb:82:b2:f6:ac:7e:d5:95:85:15:0d:
         fc:54:cf:ae:7c:0a:6f:44:fa:76:29:aa:34:86:eb:20:59:44:
         32:37:78:99:12:5c:91:ae:7b:3e:3c:1f:1a:7e:99:12:5c:e8:
         58:37:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:20:06 2026 by rpki-client