Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File:                     gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier:          70/XBJcTtNSPMsXq+6FgfFD7AYfUXrjyuUDQzbp4LzY=
Subject key identifier:   48:35:16:93:2C:8B:59:68:0F:75:45:68:98:8C:3C:C9:54:AB:17:18
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer:       /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial:       01A1DE02984B3D01A1AF8ACB1494A7559944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number:          069C
Signing time:             Sun 15 Nov 2026 07:01:14 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:14 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:14 +0000
Files and hashes:         1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: qqUJXhBmP8woxS9ftW/aNFDGkucjpp/B263Ytc5phTg=)
                          2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:98:4b:3d:01:a1:af:8a:cb:14:94:a7:55:99:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
        Validity
            Not Before: Nov 15 07:01:14 2026 GMT
            Not After : Nov 16 07:01:14 2026 GMT
        Subject: CN=483516932c8b59680f754568988c3cc954ab1718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1c:c8:0b:9e:f3:06:8e:25:aa:87:56:d3:40:
                    99:ae:b3:44:4f:22:b1:e4:71:e1:8f:3a:ef:1d:e0:
                    ae:2d:b8:33:54:f8:9c:9d:1a:9d:70:04:6e:ad:61:
                    2c:05:f7:6e:43:32:f8:40:63:9a:b8:83:4e:1e:4d:
                    f4:92:3a:74:ee:f5:a0:7c:a9:e6:c9:e9:83:40:0e:
                    2f:e6:3a:d0:00:06:66:8c:d0:90:36:79:3f:5c:12:
                    b2:e3:f8:c3:72:73:25:f2:ce:e1:71:f0:2e:12:d7:
                    45:f4:72:2b:68:90:d2:f9:0f:81:f3:6e:2f:6f:d7:
                    7e:a7:08:0e:c2:d3:15:8b:1a:8f:9e:30:9e:4a:9b:
                    90:1e:48:e2:3b:0b:65:84:c8:39:24:f9:a0:b6:e7:
                    0f:dc:7b:8e:ce:37:da:28:5f:65:39:ea:0c:f7:1f:
                    1b:ad:e1:b0:90:62:75:2a:20:f7:74:7c:73:87:cb:
                    4c:54:57:11:a2:0f:33:de:15:28:6f:fc:88:44:e6:
                    ba:67:7b:c4:c7:32:f2:a1:19:dc:b9:eb:f5:ba:2f:
                    b0:17:c3:8c:76:1c:f8:53:94:1e:7e:9d:44:8d:2d:
                    4a:fc:c4:2a:3b:a5:34:fe:5b:5a:b1:c9:1a:e2:43:
                    e2:c8:cb:10:c6:56:c0:00:cf:0a:c9:ba:b8:5d:fd:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:35:16:93:2C:8B:59:68:0F:75:45:68:98:8C:3C:C9:54:AB:17:18
            X509v3 Authority Key Identifier:
                keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:da:67:1d:ff:55:ce:0e:f7:8b:d5:29:97:35:88:c3:a4:88:
         fe:c0:40:9d:2f:9a:7f:51:a0:d0:41:d5:3a:fb:b6:4b:ab:6f:
         9e:88:3d:21:9f:8c:35:ef:ca:32:f4:68:7e:7a:d2:c2:a7:a7:
         75:16:26:ae:04:c7:2f:55:2e:11:64:21:25:5d:3c:ee:ae:be:
         01:be:18:f9:84:ac:61:cb:b4:e7:aa:2a:e3:83:a6:4b:c8:1a:
         dd:33:40:d2:0c:2e:d3:fb:d8:1e:58:a6:3e:ef:d1:33:dc:12:
         b8:90:ed:cf:23:b8:c1:9f:8f:58:17:13:2d:50:28:3f:d4:20:
         45:06:72:84:61:11:f7:51:52:76:b5:04:fe:58:b0:11:b0:7a:
         df:8b:90:46:46:69:0d:51:ea:d6:74:4e:66:fc:08:31:f5:10:
         33:03:5f:1e:f5:f9:99:d0:59:8a:04:92:fc:48:4f:78:22:d7:
         58:ce:97:c0:21:3a:83:e7:d1:36:57:26:1a:e7:56:7a:0e:ca:
         21:92:66:f6:7c:86:7a:24:f6:7b:c2:aa:35:e9:af:6c:b6:9b:
         f4:b9:af:cd:3e:d8:82:a5:82:f8:50:19:24:f1:47:d9:3d:9c:
         c5:e7:c2:d8:70:f1:cb:e6:44:20:fe:2d:bd:ab:ea:e1:b8:cc:
         46:64:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:01:31 2026 by rpki-client