Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File:                     1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier:          bG+k1FtO0+MU0ee7wRFEb9MPKcT2wLlU4eIcAk3RiZg=
Subject key identifier:   08:73:EA:B0:13:91:E4:82:E4:35:04:FB:27:DA:9C:67:5F:DB:26:A2
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer:       /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial:       01A10737D3D2D1648AD1963ACCA3449262C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number:          033E
Signing time:             Sun 04 Oct 2026 14:01:01 +0000
Manifest this update:     Sun 04 Oct 2026 14:01:01 +0000
Manifest next update:     Mon 05 Oct 2026 14:01:01 +0000
Files and hashes:         1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: Jg2Cqx+zoc6EFzmjAYQ+3ZvfKZBrJgyhwmEvkhJJnlg=)
                          2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:37:d3:d2:d1:64:8a:d1:96:3a:cc:a3:44:92:62:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
        Validity
            Not Before: Oct  4 14:01:01 2026 GMT
            Not After : Oct  5 14:01:01 2026 GMT
        Subject: CN=0873eab01391e482e43504fb27da9c675fdb26a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:68:c9:47:87:b5:d2:6d:e6:91:9b:da:5b:
                    08:ae:a5:37:87:74:54:82:c9:f3:97:c7:69:8b:2a:
                    26:f6:4a:46:91:46:d2:42:13:f8:41:97:93:40:e4:
                    bf:d9:63:89:ce:5a:ce:65:10:90:a8:7f:85:89:90:
                    7c:a7:4f:12:21:c0:f1:08:c1:cd:52:83:67:b8:f5:
                    10:83:a5:46:2b:ce:14:be:4b:fd:da:08:63:58:54:
                    19:96:8a:64:da:af:ce:e1:51:aa:c6:7f:4b:da:3b:
                    e4:18:fb:b1:3e:ef:ed:fc:11:18:6e:47:a2:ae:d8:
                    80:21:79:22:46:60:20:6f:8a:0a:d5:21:8e:f8:65:
                    a3:fa:30:f4:0f:ac:86:bd:6b:70:fd:13:cf:7e:bb:
                    20:18:4c:04:16:dd:8a:3f:d4:de:b3:56:00:05:41:
                    b9:c8:fa:a7:0c:ab:00:64:86:d0:15:4c:5e:d8:c2:
                    96:15:5a:16:35:20:11:9a:ea:75:15:23:50:d4:63:
                    06:56:8e:d4:a8:a9:c2:31:10:74:02:32:2a:b6:6d:
                    3d:2b:99:91:bc:ed:cf:6d:51:21:aa:b8:4f:97:f9:
                    cb:ae:50:e8:92:fb:9f:31:c3:c6:d6:ea:57:41:9d:
                    df:e7:34:6f:9c:86:45:81:37:ab:b5:f6:12:7a:8d:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:73:EA:B0:13:91:E4:82:E4:35:04:FB:27:DA:9C:67:5F:DB:26:A2
            X509v3 Authority Key Identifier:
                keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:f5:3a:ca:10:76:6c:b8:92:6c:c2:37:0d:a2:56:cc:4a:
         33:16:bd:8d:e8:7a:fe:12:5e:9e:09:59:bb:71:3a:95:29:ce:
         c5:5c:1e:4c:29:0f:90:00:b8:c8:e7:1b:54:b0:3d:ab:64:79:
         89:a0:d0:f5:fe:ee:4e:8f:26:02:ee:76:b4:62:6a:66:c9:88:
         bd:22:e0:88:b9:d7:3a:e6:0d:a1:2d:53:13:95:14:2e:bf:d9:
         91:d1:9b:37:1a:bb:9d:d7:e2:04:4a:c9:eb:26:f9:e6:1c:58:
         87:a2:5d:b6:c4:6c:db:b4:f7:a8:cb:b8:73:07:71:9f:74:68:
         83:11:1a:ac:4a:b4:2f:e1:1d:b1:31:e0:7a:95:b1:26:e2:78:
         b1:a1:cd:0a:b2:97:ea:5d:1e:63:c8:63:c2:80:40:2e:d3:d7:
         3b:ea:82:cf:ef:6e:ac:7e:ea:33:a6:9a:86:af:ba:7d:e0:57:
         e9:5b:f7:2e:71:21:1d:8b:02:03:85:d2:8b:40:09:88:ee:e6:
         4c:98:bb:4d:d1:46:61:37:fb:d3:56:22:0d:7f:00:09:6c:5a:
         24:62:40:5a:38:b7:cc:fa:83:02:43:fc:87:0e:0f:76:95:aa:
         a8:51:95:56:a0:f3:4a:00:0f:19:bd:c5:ee:54:c6:19:4f:c0:
         5e:8c:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:41:08 2026 by rpki-client