Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
File:                     GBxTLx_zEilN0RxRGxd80zyDBFY.mft (raw, json)
Hash identifier:          +lgRGjcFX7chptWVwdI0FNAq7XGVpBV/eHOlX1+BiIY=
Subject key identifier:   97:17:F2:85:FD:B3:9C:E4:D1:BC:F3:56:88:6C:0D:78:9E:56:18:DA
Authority key identifier: 18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56
Certificate issuer:       /CN=181c532f1ff312294dd11c511b177cd33c830456
Certificate serial:       01A0D8A8C99510576CD118505D70E65B5C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
Manifest number:          77
Signing time:             Fri 25 Sep 2026 13:02:15 +0000
Manifest this update:     Fri 25 Sep 2026 13:02:15 +0000
Manifest next update:     Sat 26 Sep 2026 13:02:15 +0000
Files and hashes:         1: GBxTLx_zEilN0RxRGxd80zyDBFY.crl (hash: FmhZAfDj2HymbmPcSGFRnf4G9abYDxbzgF4v/AriLF8=)
                          2: SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa (hash: noEFjTcJ4li+Z5lYJLyOd4NFqf9iNEJOmVPDK4Ua36c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:c9:95:10:57:6c:d1:18:50:5d:70:e6:5b:5c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181c532f1ff312294dd11c511b177cd33c830456
        Validity
            Not Before: Sep 25 13:02:15 2026 GMT
            Not After : Sep 26 13:02:15 2026 GMT
        Subject: CN=9717f285fdb39ce4d1bcf356886c0d789e5618da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:9b:10:28:39:84:cb:1f:65:a6:6a:e3:24:
                    71:c2:b9:11:b6:d4:02:8a:35:73:79:f1:0e:e2:79:
                    7e:6f:84:10:dd:0e:94:b0:b9:3b:ed:49:03:68:b7:
                    e6:2b:fb:08:72:5b:95:05:56:7f:98:f5:c7:ac:f5:
                    66:f5:7f:ab:5c:7e:fe:ce:05:27:a8:5b:76:fe:bd:
                    d4:f5:3d:48:79:3a:f2:36:95:fa:47:6b:2b:e0:e0:
                    da:5d:2f:70:93:95:ae:10:d4:69:a1:cc:8a:e6:c6:
                    7b:0d:09:aa:c7:4d:2c:cd:15:15:94:33:68:73:3a:
                    cd:0b:cc:f9:af:a4:2a:d8:c7:05:b2:77:96:22:53:
                    ee:c4:81:c9:2d:19:0e:75:13:2a:73:2a:3e:17:28:
                    4c:d0:07:90:38:4d:55:cf:5e:23:29:99:33:90:7b:
                    1b:4e:4a:9c:6b:04:52:db:b0:49:d2:08:52:a4:db:
                    14:dd:0b:e6:47:61:01:19:cf:61:b9:a4:84:28:f4:
                    d1:11:25:e3:da:d2:cf:7b:e9:0f:0e:ed:2f:ff:f6:
                    f8:2b:5f:17:cf:21:0b:32:89:45:7b:f2:47:7b:b7:
                    06:17:5f:d4:57:22:07:d7:1b:98:df:83:23:41:ce:
                    a3:df:35:27:67:2a:2b:dd:d9:c2:bc:ec:cf:1e:dc:
                    c4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:17:F2:85:FD:B3:9C:E4:D1:BC:F3:56:88:6C:0D:78:9E:56:18:DA
            X509v3 Authority Key Identifier:
                keyid:18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ad:a3:bb:8e:4c:e4:67:b9:92:2b:69:7d:e6:fe:80:3c:38:
         80:a2:5f:f9:70:f6:84:e9:2e:2d:6e:dd:2e:1e:bd:cd:7d:42:
         8e:39:ac:cf:b2:ac:82:eb:28:ac:e7:3f:bc:cf:b0:48:a7:f7:
         d1:63:55:44:21:6b:b8:ce:7f:89:41:ae:b2:a0:a4:84:43:1a:
         b9:39:30:d6:a9:e0:66:20:62:50:ed:19:a2:9a:eb:c4:16:2f:
         15:17:d9:ba:cc:92:65:94:dc:a4:05:33:e7:59:1d:be:36:bd:
         4c:7d:ef:98:1f:8c:c5:fc:5a:be:b6:c6:7f:ae:16:85:54:98:
         ce:4a:29:8d:7b:ed:b6:13:1e:e1:99:38:b2:25:a2:3a:cc:c0:
         be:6e:dc:00:76:d6:2a:68:7e:f6:b3:16:58:c4:36:5b:af:1f:
         fd:65:b2:42:60:19:c4:05:d2:86:82:d8:92:6e:15:25:20:7f:
         e8:fa:4b:2c:65:1e:bf:4f:36:00:d4:a1:21:f6:9f:7f:b3:d1:
         33:7f:7f:e0:9c:ba:8d:7a:a5:3f:84:07:66:bc:d3:24:03:f0:
         67:64:c6:b2:cb:73:a1:ec:2a:6a:27:bf:75:32:65:ef:39:34:
         d6:18:3b:c9:61:fe:f7:3a:18:81:ce:fd:61:64:c8:48:2c:c1:
         b1:ba:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:18:55 2026 by rpki-client