Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File:                     gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier:          8NiSlbjXqaDmiRPnAX4FoF55sjv7rF9hFJ3ft4S86Vc=
Subject key identifier:   A2:58:85:A9:24:C2:38:49:AA:A6:12:46:E4:38:8E:FE:5F:B6:D1:24
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer:       /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial:       01A0DC171EAB053C5F906C7282DE4065462C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number:          11A2
Signing time:             Sat 26 Sep 2026 05:01:37 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:37 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:37 +0000
Files and hashes:         1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
                          2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: GV8z+iSxnp1lK+Jc+dor5xVtYfbLVgLM+XuSX0OqLTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:1e:ab:05:3c:5f:90:6c:72:82:de:40:65:46:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
        Validity
            Not Before: Sep 26 05:01:37 2026 GMT
            Not After : Sep 27 05:01:37 2026 GMT
        Subject: CN=a25885a924c23849aaa61246e4388efe5fb6d124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:a1:7e:3b:dd:fb:b0:a8:6d:f7:1b:e0:1a:
                    1b:9d:1a:31:24:85:7c:b9:e3:8b:48:6c:c6:f6:a0:
                    c5:e6:4f:88:6d:e7:13:47:66:7f:c0:62:04:39:22:
                    98:58:b6:56:d7:59:59:76:60:b9:34:c3:fd:34:f6:
                    18:49:b6:3d:2a:7b:eb:ec:84:3b:80:63:a2:7f:65:
                    1a:5b:66:12:b9:4c:46:16:17:c8:3b:ca:ae:a7:5d:
                    8d:1f:9e:fd:ab:bf:5d:8a:79:0f:0f:cb:93:da:58:
                    95:67:65:32:98:ed:60:d6:41:1e:34:7e:30:11:a3:
                    9c:f3:f6:d7:69:74:3b:cb:5f:6f:e4:59:e5:82:22:
                    4c:a1:16:90:c1:fd:d0:a2:8f:43:23:95:fa:16:08:
                    1b:31:e4:40:f5:d7:05:2a:6d:ce:8f:d5:62:d8:e2:
                    74:77:4b:1c:43:d2:70:fa:29:16:75:78:0f:9d:35:
                    a0:87:1d:0e:1f:c0:d8:4f:15:05:b3:71:bf:5a:ad:
                    cf:b2:21:a4:1a:0d:fb:5a:cc:1b:80:ef:df:a9:26:
                    91:f7:03:8c:69:d2:e3:75:e7:ca:a5:16:6d:ad:b6:
                    e1:ac:36:9f:ad:a8:08:1c:2f:02:54:84:6b:cc:0d:
                    6c:4b:cf:fb:73:ac:ba:e4:e3:95:b6:fd:0d:b0:50:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:85:A9:24:C2:38:49:AA:A6:12:46:E4:38:8E:FE:5F:B6:D1:24
            X509v3 Authority Key Identifier:
                keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:8e:51:a7:67:f5:26:0b:05:f6:37:d3:6c:25:25:87:01:
         7e:ec:0d:de:16:c9:1c:f6:58:dd:7c:e8:f8:43:fc:fe:d0:cc:
         eb:63:5d:b8:69:dc:75:30:1d:04:2f:3e:f1:43:b8:4a:53:66:
         26:e3:b2:c4:c6:c4:47:36:47:e7:01:24:d2:31:e3:f1:cc:1c:
         cc:05:2c:49:70:6b:f5:23:e6:8e:aa:5f:bd:d0:05:9b:19:a1:
         60:17:61:1f:2b:59:4d:dc:31:8e:4f:ad:6c:a1:9d:e6:ab:27:
         a6:af:d3:1a:9a:51:f6:25:45:7b:66:1a:fe:f6:c0:b9:bd:84:
         03:67:be:21:c6:8a:d0:54:33:b4:5e:ea:d6:aa:b5:cd:b3:eb:
         ac:76:f5:a9:16:63:98:db:3b:6d:7c:ac:37:84:73:e3:26:9d:
         27:dd:33:63:bc:86:22:4a:89:dd:fc:5a:63:42:b8:c8:25:92:
         a3:57:d0:6e:5b:10:68:d1:0f:d3:f5:c0:42:4d:a7:92:37:ea:
         f5:07:42:35:f4:13:d8:74:48:b0:2f:23:7e:2b:d6:b0:c8:68:
         db:0b:5a:f3:4e:fd:42:93:59:5a:55:bc:48:53:c4:67:44:e5:
         90:65:a7:48:01:0e:18:d1:12:31:a9:64:7f:35:8e:42:c5:a1:
         5d:6d:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:55:51 2026 by rpki-client