Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          Np3gK1lACISqQu4HypBXBlLnssqRzaxFdAutrUHbZpY=
Subject key identifier:   90:A6:DF:31:32:33:D6:E7:3D:87:A1:46:CF:C3:1F:C1:C0:E2:B8:F7
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       01A101A42B164EEA4DC1ED1B244F4E539B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          0BE6
Signing time:             Sat 03 Oct 2026 12:01:38 +0000
Manifest this update:     Sat 03 Oct 2026 12:01:38 +0000
Manifest next update:     Sun 04 Oct 2026 12:01:38 +0000
Files and hashes:         1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: Ch6M7SPq+16kkD43t+hMKOod7yeR8oUgNRbIjS67JHk=)
                          2: xNrjnvBJh_wuI9K3bZSO-wuWUTU.roa (hash: xawGQx0fM3PQVbGbqNxkiscfylaEsDI9X0uVsXFPexA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:a4:2b:16:4e:ea:4d:c1:ed:1b:24:4f:4e:53:9b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Oct  3 12:01:38 2026 GMT
            Not After : Oct  4 12:01:38 2026 GMT
        Subject: CN=90a6df313233d6e73d87a146cfc31fc1c0e2b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:86:36:c8:c6:fb:d1:6c:bc:12:5d:0f:83:
                    cc:c3:a0:a3:81:7d:13:6b:a4:f9:2f:df:67:14:8d:
                    f8:f2:d4:ae:32:5d:fc:d5:22:11:59:af:c8:c1:ad:
                    34:b5:e2:ef:29:56:79:01:89:62:65:1e:b5:7d:82:
                    b1:6a:7c:b2:b9:76:ab:57:45:75:58:45:e4:92:1e:
                    7b:0d:ec:bf:2f:96:ec:67:1a:a6:ec:76:f2:54:31:
                    e9:ce:25:0d:68:6b:62:50:f3:37:db:ea:f2:6c:5b:
                    a6:f1:4f:fc:51:d0:2a:a1:de:5e:c1:66:8d:fb:b0:
                    e8:e7:5b:ed:4f:a8:a2:96:54:aa:9a:f0:4a:b6:03:
                    32:76:c9:3f:1a:a7:d2:d6:63:f2:08:4b:34:24:7a:
                    e3:c6:33:55:4e:6b:e6:5f:56:b5:b9:9c:90:64:fb:
                    60:70:e6:20:75:f3:ad:6e:a0:05:6a:8b:15:3e:a9:
                    a2:41:13:44:89:9a:d2:28:8d:7e:ce:64:f7:da:19:
                    28:fd:af:04:e8:25:93:79:76:11:10:7e:b4:eb:fa:
                    03:50:32:92:b6:c5:58:53:f8:c4:7e:1a:87:09:a8:
                    3f:be:7c:f1:e7:c5:1c:61:69:09:d3:23:a7:23:db:
                    1f:3a:61:d8:09:54:41:17:69:38:52:05:7d:df:9a:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A6:DF:31:32:33:D6:E7:3D:87:A1:46:CF:C3:1F:C1:C0:E2:B8:F7
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d4:ec:21:f3:1c:56:9c:fd:b1:43:9c:c2:0a:b1:08:12:f6:
         91:a4:53:7e:67:1f:ad:e0:29:55:8b:d9:c2:26:2b:f2:39:29:
         80:fb:d4:2a:90:85:81:5b:df:9f:7a:70:6c:19:0d:78:d2:0c:
         f5:8d:87:a1:4f:0a:53:33:b3:a9:17:e4:c8:a7:84:66:ef:10:
         d8:4c:10:3c:89:18:d1:23:70:fe:0b:bb:87:15:2f:d0:23:06:
         87:aa:e6:4b:ae:91:4d:96:7f:45:a9:65:bf:70:06:71:01:53:
         15:1b:f4:67:85:e1:30:e4:5f:75:6b:2f:ba:fd:9b:57:2f:0f:
         b1:e8:cf:43:ac:55:52:ac:ae:2b:e6:86:78:6c:ab:83:54:fa:
         7c:9a:c6:59:3e:2d:0d:8a:e7:bd:cd:b5:11:2d:0d:e9:1e:cc:
         f9:d2:97:69:38:29:17:89:95:64:e1:42:cb:9d:80:c1:d8:d5:
         a0:af:f4:61:9b:f6:6c:9c:fb:b0:8f:2d:09:31:2e:44:7c:92:
         34:fd:9c:96:00:9b:c1:89:a0:d1:78:e2:cd:53:e5:1b:7f:54:
         35:c5:f0:d8:0b:38:61:59:88:7e:bf:6e:e8:09:6a:5c:96:51:
         03:00:ce:57:a9:11:b5:d1:04:8d:fb:8f:50:50:71:d2:51:ea:
         7f:35:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:46:23 2026 by rpki-client