Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File:                     G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier:          Uh29NOxUYPglFDhArpmIZiXDisZHtkAVVRNLYAqtxZg=
Subject key identifier:   F0:B5:68:9C:6E:C2:16:48:5F:6B:64:88:AD:1C:86:86:CC:07:C6:E1
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer:       /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial:       01A10248ED723BC35933EBCD20F5B759411C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number:          195F
Signing time:             Sat 03 Oct 2026 15:01:36 +0000
Manifest this update:     Sat 03 Oct 2026 15:01:36 +0000
Manifest next update:     Sun 04 Oct 2026 15:01:36 +0000
Files and hashes:         1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: Kp50aOMUsC/suTsvLahDQcjgWj9r+yW3sLoMBwTsmlU=)
                          2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
                          3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:48:ed:72:3b:c3:59:33:eb:cd:20:f5:b7:59:41:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
        Validity
            Not Before: Oct  3 15:01:36 2026 GMT
            Not After : Oct  4 15:01:36 2026 GMT
        Subject: CN=f0b5689c6ec216485f6b6488ad1c8686cc07c6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:05:6a:ba:63:65:8d:15:2b:1e:90:89:b2:
                    99:a8:6f:98:cb:d2:4f:86:fa:d2:c7:9e:83:89:37:
                    5c:f1:ad:4a:a2:8e:bd:c9:a9:f9:1c:c8:4d:c1:80:
                    a4:fe:97:5b:0f:90:b9:1c:10:9a:39:52:85:2a:3f:
                    fd:2c:d9:ff:ab:c7:29:b8:fc:20:64:c3:a9:5c:87:
                    70:0d:b7:9c:df:78:91:18:5d:b9:2a:8f:a7:3c:de:
                    4d:e9:cf:d1:78:1f:db:0c:ae:9a:d3:47:0b:ea:56:
                    53:ba:5d:57:ad:21:1a:92:02:b8:c3:b8:08:9d:6e:
                    54:18:07:2f:5e:9a:06:87:6c:f8:a8:1b:75:1c:2c:
                    ff:ae:0f:f0:75:3c:47:a2:e0:6c:13:d7:a5:ec:22:
                    36:3f:c7:1b:43:c9:44:ee:66:6e:b9:b5:d7:72:25:
                    1b:2c:12:ec:2a:19:95:c0:e9:29:b3:e6:c3:e2:a4:
                    b3:e6:88:cf:fa:25:33:bc:bd:57:14:5f:5f:ea:01:
                    43:51:24:95:44:ba:4c:0b:f2:b7:9c:41:ee:ea:8a:
                    32:13:7a:66:44:54:58:b4:a0:60:67:7e:e6:75:86:
                    19:be:6f:07:be:bf:1a:ec:4b:af:91:bf:a9:c1:7c:
                    7f:6f:09:15:7d:d8:b3:68:a6:eb:2d:41:06:93:97:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B5:68:9C:6E:C2:16:48:5F:6B:64:88:AD:1C:86:86:CC:07:C6:E1
            X509v3 Authority Key Identifier:
                keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f4:87:86:09:3d:72:23:7d:35:ec:ac:a8:59:df:39:35:4e:
         53:c9:2a:02:0b:2f:8c:60:1c:8a:7f:02:cb:ba:de:10:c9:5a:
         d3:e2:1a:8b:93:77:ba:04:88:17:eb:e6:ce:cf:53:d7:88:c9:
         04:43:f1:2c:5b:41:f6:88:57:6e:27:77:a6:d4:1c:78:86:6b:
         7b:98:ed:78:96:c8:45:44:48:97:52:47:4b:31:16:37:27:37:
         a8:c4:5b:a7:30:f1:85:02:f1:17:49:9d:57:2f:3e:8e:fc:06:
         69:e7:1e:fb:82:20:0a:c7:15:64:62:5c:0f:ad:1a:a6:7b:1a:
         23:45:76:54:e5:ae:61:23:0f:31:cc:d0:1d:1c:31:b3:e0:43:
         44:2e:4d:6c:1e:1a:b5:66:e5:7e:dd:1e:79:52:4e:c9:51:14:
         b7:5f:0d:71:a5:83:e6:2f:2c:1d:c6:ea:e5:dc:7f:b0:95:89:
         b2:7c:5f:59:c5:a0:89:c4:a6:e3:d3:cd:85:22:e6:95:cc:65:
         50:24:71:c4:f4:ef:e9:58:ab:33:84:6b:ce:5a:9f:d6:43:79:
         97:18:86:0d:ab:0a:3b:e8:02:e5:6b:eb:48:ea:f6:0c:d2:f6:
         9c:19:06:7e:e5:ee:db:15:9b:0b:e1:47:9e:67:c2:97:af:8c:
         b1:71:1f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSO1yO8NZM+vNIPW3WUEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJhMDEzNjU1YjliYjBjYWEyODVkNzVjMTQyYzFlZTMw
Zjg4NTQwHhcNMjYxMDAzMTUwMTM2WhcNMjYxMDA0MTUwMTM2WjAzMTEwLwYDVQQD
EyhmMGI1Njg5YzZlYzIxNjQ4NWY2YjY0ODhhZDFjODY4NmNjMDdjNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O0FarpjZY0VKx6QibKZqG+Yy9JP
hvrSx56DiTdc8a1Koo69yan5HMhNwYCk/pdbD5C5HBCaOVKFKj/9LNn/q8cpuPwg
ZMOpXIdwDbec33iRGF25Ko+nPN5N6c/ReB/bDK6a00cL6lZTul1XrSEakgK4w7gI
nW5UGAcvXpoGh2z4qBt1HCz/rg/wdTxHouBsE9el7CI2P8cbQ8lE7mZuubXXciUb
LBLsKhmVwOkps+bD4qSz5ojP+iUzvL1XFF9f6gFDUSSVRLpMC/K3nEHu6ooyE3pm
RFRYtKBgZ37mdYYZvm8Hvr8a7Euvkb+pwXx/bwkVfdizaKbrLUEGk5fpzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC1aJxuwhZIX2tkiK0chobMB8bhMB8GA1UdIwQY
MBaAFBvboBNlW5uwyqKF11wULB7jD4hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUt
ZDRlZGYxNmUwOTc4LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUtZDRlZGYxNmUwOTc4
LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPSHhgk9
ciN9NeysqFnfOTVOU8kqAgsvjGAcin8Cy7reEMla0+Iai5N3ugSIF+vmzs9T14jJ
BEPxLFtB9ohXbid3ptQceIZre5jteJbIRURIl1JHSzEWNyc3qMRbpzDxhQLxF0md
Vy8+jvwGaece+4IgCscVZGJcD60apnsaI0V2VOWuYSMPMczQHRwxs+BDRC5NbB4a
tWblft0eeVJOyVEUt18NcaWD5i8sHcbq5dx/sJWJsnxfWcWgicSm49PNhSLmlcxl
UCRxxPTv6VirM4Rrzlqf1kN5lxiGDasKO+gC5WvrSOr2DNL2nBkGfuXu2xWbC+FH
nmfCl6+MsXEfWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:36:07 2026 by rpki-client