Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File:                     G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier:          xCXMy8Sn7Qu0sXDq/r0uhXRMVh+XjALlFOy48njjCVE=
Subject key identifier:   73:7A:81:0E:5D:14:F6:34:C5:7F:09:9D:EE:87:31:D1:10:C9:A3:F9
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer:       /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial:       01A0EB8A95B59F208D9D004988E5912EA8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number:          16FE
Signing time:             Tue 29 Sep 2026 05:02:03 +0000
Manifest this update:     Tue 29 Sep 2026 05:02:03 +0000
Manifest next update:     Wed 30 Sep 2026 05:02:03 +0000
Files and hashes:         1: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (hash: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=)
                          2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: NURe0IFpq/sELZBsSpoE0MKwncfSbX2nkklIyPHSQtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:8a:95:b5:9f:20:8d:9d:00:49:88:e5:91:2e:a8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
        Validity
            Not Before: Sep 29 05:02:03 2026 GMT
            Not After : Sep 30 05:02:03 2026 GMT
        Subject: CN=737a810e5d14f634c57f099dee8731d110c9a3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:17:3b:29:99:1e:95:de:23:6c:d2:26:7d:
                    e7:d5:1f:86:b0:2f:43:72:a8:cf:75:a8:6c:56:55:
                    fe:90:23:43:43:00:e2:b9:a1:70:e9:e7:1b:94:d1:
                    ce:62:6b:15:e6:a0:db:cb:a5:e5:98:d2:fe:7c:50:
                    7a:e4:2b:5b:23:a8:7a:57:1f:d0:3b:b0:ca:25:fa:
                    a7:a3:a1:2a:81:b4:5b:da:f3:7f:c5:9f:78:f7:a3:
                    a3:5d:05:53:bb:4c:53:1d:c9:6c:66:92:f1:d6:ba:
                    22:2a:a9:a5:65:d9:ad:c0:44:6b:c3:95:41:f8:9d:
                    ce:12:6d:74:48:1a:9b:2e:dd:1f:82:5f:31:79:39:
                    c4:73:75:99:f1:68:2f:ca:ca:a2:b3:18:30:a3:0d:
                    47:10:21:68:04:b1:e7:ac:22:2d:e9:e0:84:ed:64:
                    32:40:81:bc:9f:31:c8:ff:16:75:90:38:2d:73:d1:
                    9c:cb:f4:bd:65:4b:e6:2d:18:43:8c:c9:03:db:0b:
                    15:f2:cf:aa:d3:4e:c4:94:10:4e:4d:1b:37:c3:52:
                    87:d4:78:10:cd:95:82:4e:f1:93:4f:3b:e7:aa:e0:
                    72:51:5c:57:2e:18:78:b0:26:ea:f2:35:c6:23:c3:
                    ec:91:35:e5:03:e9:10:af:49:7e:12:21:c3:ac:44:
                    b4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7A:81:0E:5D:14:F6:34:C5:7F:09:9D:EE:87:31:D1:10:C9:A3:F9
            X509v3 Authority Key Identifier:
                keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f3:cb:a7:8a:13:20:64:80:7c:11:88:d8:61:ff:44:e2:02:
         4e:fd:0f:b6:95:62:54:26:e1:b2:35:d9:35:f3:ba:31:d6:42:
         07:ee:fd:fa:31:5d:de:9e:53:73:08:d9:33:d8:4e:e3:27:c6:
         d0:d2:5a:d5:34:9c:e8:1a:9b:d7:3a:a0:76:90:cb:30:1c:c4:
         a9:0d:78:2a:df:66:42:c1:ec:c0:33:74:aa:42:d5:89:dd:ca:
         fe:ba:b1:fb:80:d5:5f:6b:e7:c5:9c:fd:38:9b:5b:e2:8c:1f:
         d2:8a:43:d7:09:82:45:5e:ed:97:8b:2f:47:4a:33:1a:67:ed:
         ee:45:a3:76:bf:e3:c6:f5:6e:c0:79:df:d4:8d:ff:7d:b1:c9:
         51:84:40:f0:9d:9f:f6:f3:38:fc:6f:ce:c4:68:a6:a5:34:db:
         97:5b:7c:87:e0:97:3b:06:b2:ad:61:3c:82:01:4e:51:cf:0e:
         eb:32:4e:82:66:32:e2:78:37:11:2a:8c:c6:45:11:8e:c8:a3:
         d6:e1:d8:ed:94:69:1e:71:cd:1c:4d:81:0e:54:f1:dc:69:70:
         6d:e6:cb:ee:54:5e:a6:f1:77:24:fc:9c:94:0c:c7:ae:e5:cb:
         49:cf:45:9b:46:54:db:25:ce:bf:8a:c4:b9:b8:6f:ef:90:1f:
         4d:24:d8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:43:52 2026 by rpki-client