Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          CiLcq1kaGZz5OW7HrXG4+dCNMxgN5rSagLJnnzGJsVM=
Subject key identifier:   FF:38:90:20:AF:4A:B1:C1:1E:33:D1:AF:EF:0E:57:E7:73:6B:8B:BF
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       01A0DA96D0A90BBB6C1AF89A5360BEE8D7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          1B04
Signing time:             Fri 25 Sep 2026 22:01:51 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:51 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:51 +0000
Files and hashes:         1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
                          2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: 9Fb+W10E/2I0R+D6IOGW9102qy5ih1zybHZqshQ6nU0=)
                          3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:d0:a9:0b:bb:6c:1a:f8:9a:53:60:be:e8:d7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Sep 25 22:01:51 2026 GMT
            Not After : Sep 26 22:01:51 2026 GMT
        Subject: CN=ff389020af4ab1c11e33d1afef0e57e7736b8bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:7b:e0:f0:af:3c:37:a1:e0:e8:37:e9:60:
                    cc:22:9f:f5:26:77:22:e7:05:58:cb:72:05:ea:52:
                    59:01:fe:80:f7:de:45:58:31:47:09:74:e0:52:6c:
                    3a:35:08:06:75:ce:04:4b:3a:15:51:06:f3:4d:35:
                    a4:c0:7e:5d:b3:e9:79:c7:ca:99:83:17:32:1b:8f:
                    13:e3:0e:fc:13:0a:79:bc:93:2f:7e:ca:f6:b5:c6:
                    12:bf:8f:e6:4f:e4:2d:b3:af:18:ee:ee:06:b6:3b:
                    b8:62:c9:d1:9c:b7:97:9c:b7:fd:15:20:e9:66:a5:
                    b5:96:d0:38:6e:1a:db:6f:33:6a:80:f5:40:18:68:
                    db:9a:3f:3f:be:86:fc:fb:12:bd:da:24:3b:a8:e7:
                    39:35:cb:78:29:b1:80:da:b1:e2:d5:ec:7d:92:69:
                    fd:96:63:b1:f9:8f:a7:06:c6:b8:1d:3a:bf:4c:6d:
                    60:f8:57:57:c5:76:0a:72:bc:c6:df:92:11:47:c2:
                    cb:7d:a6:1c:72:eb:d8:dd:9e:de:a3:21:88:1e:58:
                    58:68:ea:09:e4:dc:29:a3:a0:22:91:fc:fd:49:cf:
                    ae:3c:07:81:5a:41:57:3d:c6:30:96:81:32:f5:89:
                    f2:47:fb:cd:7c:1c:12:f8:10:0b:7d:18:bc:96:23:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:38:90:20:AF:4A:B1:C1:1E:33:D1:AF:EF:0E:57:E7:73:6B:8B:BF
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a6:f2:56:97:2d:ce:09:6d:1f:d5:32:ab:1d:f8:7e:f9:a2:
         a7:d0:9d:aa:aa:1f:f3:a3:46:ae:05:cd:d6:45:c1:10:18:aa:
         09:1b:b0:30:30:22:f0:45:ba:ab:e7:80:2b:cb:4d:35:fc:74:
         b7:1a:ce:10:ba:bd:e1:aa:e5:d3:fb:67:24:a4:77:2b:c6:0e:
         b0:0b:b4:d7:8f:df:2e:d3:4a:2f:48:ae:ac:89:af:13:5a:1c:
         ce:7a:f2:31:30:7d:cd:e8:c1:bd:f4:16:8b:7f:53:a9:4e:0e:
         06:14:c6:7f:7d:53:44:c0:b8:f2:0e:53:f8:59:4c:f2:e0:49:
         98:ef:63:6f:b9:80:fc:d8:ae:a0:e2:c4:87:de:14:f4:81:2c:
         38:7e:d9:3b:7d:7b:9d:c6:d2:6d:bf:9d:b6:49:09:8e:c6:b2:
         41:fd:fb:da:3f:b4:37:93:a6:29:88:ee:d5:b4:3a:5d:1c:88:
         86:7e:96:63:38:56:44:80:26:7a:de:c4:98:6a:d2:6f:95:15:
         44:76:08:e4:18:e4:a0:33:2f:9c:93:d6:f2:69:dd:49:12:43:
         0f:44:cd:e7:43:e0:33:54:ce:55:e6:85:a4:78:6f:90:b8:ba:
         3e:ea:7b:1e:28:a2:eb:a8:b9:78:e1:f9:e5:ac:4f:e0:f9:6e:
         aa:61:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:50:02 2026 by rpki-client