Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
File:                     g5gORnj87fIiN5FtOxFASJ5QStg.mft (raw, json)
Hash identifier:          2D0xL+Ok5EZFUg6CM5xirXaTZfgYoC9b0Wtc5FRypv8=
Subject key identifier:   04:19:F6:D1:BA:02:B8:36:1E:D3:D0:83:23:94:C5:9C:DA:84:AA:66
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Certificate issuer:       /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial:       01A0E1741BF197B5AE186DE8D4BC3597B9F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
Manifest number:          EE
Signing time:             Sun 27 Sep 2026 06:01:17 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:17 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:17 +0000
Files and hashes:         1: KES46lk8wU4dhFv89NhcKEmi-vM.roa (hash: sSJndlld1sP0Se7NuGKbaMt7Q9VWzKyrrn6CaglRzow=)
                          2: dxkbbmxX8WMKJH5WhnQ57-p4X90.roa (hash: i6/kNCYkfe+S16lTl6/WYXB9fGMN9TWf4ZsR+HsilEU=)
                          3: g5gORnj87fIiN5FtOxFASJ5QStg.crl (hash: +8p9CJBndYPPKUv7Pb5XK/goydTVQXkVIytWo14y/dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:1b:f1:97:b5:ae:18:6d:e8:d4:bc:35:97:b9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
        Validity
            Not Before: Sep 27 06:01:17 2026 GMT
            Not After : Sep 28 06:01:17 2026 GMT
        Subject: CN=0419f6d1ba02b8361ed3d0832394c59cda84aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:31:06:32:25:6e:01:78:af:e7:ec:14:d7:
                    8a:2c:de:ce:36:d8:17:3b:51:8c:c4:5b:37:b0:a1:
                    72:5c:9d:fc:a5:63:02:7d:c4:f7:98:ca:a7:bd:60:
                    17:45:d7:ef:d5:80:a5:7a:e7:90:5f:7b:e7:63:84:
                    6e:51:49:1d:3b:31:cc:40:cf:3c:81:c7:69:18:bb:
                    4f:7a:8c:88:5c:08:f7:c9:a1:e8:4f:64:71:0b:09:
                    34:24:53:e8:94:c2:92:52:f3:c9:84:d3:2c:be:dd:
                    c5:f4:63:c4:01:29:ec:e5:27:cd:9b:4a:c8:0f:bd:
                    97:98:7d:fb:3b:8c:42:c6:17:ce:cc:60:85:94:8c:
                    28:78:a3:94:32:95:a4:ca:8a:d2:a6:07:ca:a9:bf:
                    cf:54:1a:76:93:38:15:d2:67:18:76:29:2b:d8:31:
                    1b:c9:55:3b:b5:27:9d:c2:61:0d:7b:35:82:90:c0:
                    19:ce:c5:f1:a0:88:fb:77:31:d9:37:89:8b:6b:55:
                    93:42:97:72:c7:d1:d6:d1:a1:96:9b:1b:fb:cd:14:
                    d5:21:e9:b8:eb:05:d3:da:bf:f5:f1:d7:98:92:c0:
                    bc:21:03:79:10:03:a7:9a:22:13:64:f8:ef:7c:37:
                    5f:42:43:b4:00:ea:d4:50:70:f6:07:c6:de:06:dd:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:F6:D1:BA:02:B8:36:1E:D3:D0:83:23:94:C5:9C:DA:84:AA:66
            X509v3 Authority Key Identifier:
                keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bc:17:fe:0b:f6:eb:9b:84:bf:b0:93:41:83:a2:47:9d:ae:
         9a:c8:fc:37:90:be:ab:7e:aa:3b:c6:63:01:20:ee:cb:1d:21:
         1a:48:5a:01:59:80:3e:10:e8:b7:fe:05:9d:df:2f:80:00:58:
         71:c5:1f:be:94:f1:ef:c4:39:8e:5c:cc:10:f8:5d:92:b5:a2:
         df:ea:0b:33:94:bc:11:c9:b2:59:a6:fd:76:98:be:ef:ca:7f:
         18:74:69:d1:ed:b5:ad:ed:28:65:70:c7:36:e3:04:a6:2d:28:
         f4:e9:ca:9f:9c:28:5e:50:10:4a:ce:6c:c3:6e:9b:6d:6b:ba:
         81:50:41:10:67:ed:54:dc:c7:9c:b6:4a:c1:60:fd:bf:59:a8:
         18:8b:d9:1c:d2:a8:cd:b6:81:78:a7:8b:be:bb:ad:0d:99:b3:
         ec:85:21:3b:0e:a1:3b:79:cd:c5:54:50:68:c9:18:d6:16:25:
         22:6d:ac:9c:f7:a7:9e:60:e7:08:d4:0f:f7:d3:92:a8:14:86:
         65:95:b5:0a:5c:0f:61:dc:b2:8d:87:74:ee:48:97:07:0e:6c:
         ca:67:72:08:47:ae:a1:ff:ca:03:21:4f:e4:46:b2:76:7a:0a:
         b7:2a:ec:c6:23:e6:b0:bc:09:28:69:9f:ff:49:4e:70:61:8d:
         6b:3f:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:46:07 2026 by rpki-client