Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
File:                     GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json)
Hash identifier:          dpdg3A8O+64YqBviE4KOprjnBWQul4IngPCFmfvmDlI=
Subject key identifier:   E5:5A:37:D8:16:87:F7:33:57:A9:2C:FB:53:FA:20:50:81:BE:45:D6
Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
Certificate issuer:       /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Certificate serial:       01A102B66BEF75268F59D7D865E99DDE2023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
Manifest number:          0333
Signing time:             Sat 03 Oct 2026 17:01:11 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:11 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:11 +0000
Files and hashes:         1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: vDroeh7sREWD8XpkH+X7ew/JneEAzBKdZqLpsA5hMmA=)
                          2: q-3PkcuXvbxG2AJOGo6sUKyZOAU.roa (hash: a1DkrhlznASzhUP99TVl/s5bY4rDfTZ4JGlmLv4QaHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:6b:ef:75:26:8f:59:d7:d8:65:e9:9d:de:20:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
        Validity
            Not Before: Oct  3 17:01:11 2026 GMT
            Not After : Oct  4 17:01:11 2026 GMT
        Subject: CN=e55a37d81687f73357a92cfb53fa205081be45d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:23:e6:fe:61:0a:77:93:cb:2e:c8:3b:43:
                    a4:7d:82:e5:2d:c3:07:7d:46:a3:55:1d:9d:cd:d9:
                    40:c2:28:93:06:44:fd:e6:62:ff:82:c1:65:98:4c:
                    f4:c7:fa:0d:e2:bb:07:3e:75:b8:0c:22:f5:ff:12:
                    50:c1:57:ab:e2:21:ec:c4:d7:5e:7f:dc:34:5b:59:
                    0b:93:fe:9c:65:88:05:01:21:64:5d:f4:65:0c:71:
                    84:87:94:53:7e:1c:fd:60:db:57:e1:2e:f1:c2:f9:
                    0d:5a:87:e5:fb:e5:1d:6f:fe:28:d7:9c:2a:59:cc:
                    17:e7:1e:b7:33:9c:a3:fb:67:45:d2:c4:c8:0b:ce:
                    66:79:c5:c3:cc:a5:3a:07:36:db:22:19:26:61:84:
                    8d:ca:8e:06:85:9a:91:84:b0:32:cf:2f:44:06:80:
                    45:1a:63:ce:d1:f2:91:8d:db:5e:08:20:68:56:e8:
                    4f:46:26:04:92:f3:71:14:1f:05:8c:02:1d:5e:3c:
                    9b:90:d9:54:f8:d4:b4:63:31:4e:aa:7d:a7:22:3c:
                    90:ef:95:a8:39:83:f0:0b:c2:43:d4:90:b4:9c:c8:
                    68:ef:cc:54:28:eb:b0:71:13:66:39:0b:52:c3:b3:
                    71:cd:d7:aa:04:ec:ff:d4:bc:a2:7d:1e:22:ee:fb:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5A:37:D8:16:87:F7:33:57:A9:2C:FB:53:FA:20:50:81:BE:45:D6
            X509v3 Authority Key Identifier:
                keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:d0:42:82:69:a2:e2:96:6e:95:87:7e:a2:8d:89:01:b2:
         8f:f6:c3:62:09:7d:df:bc:d3:8c:ac:25:f4:cd:d1:c7:6a:92:
         fa:22:2b:62:92:46:d0:ba:04:77:2e:80:24:1d:e3:da:9c:3f:
         01:3d:b3:51:69:15:b8:b3:f7:94:aa:47:e0:41:fd:be:df:5b:
         6f:29:da:cf:e2:26:d1:4d:fc:64:f2:62:39:3e:22:f8:58:4f:
         5d:f1:88:f7:04:69:75:65:27:64:15:3d:3f:14:28:a2:78:aa:
         18:b2:75:37:08:60:ac:a0:61:38:8e:2d:54:a2:1c:09:20:7e:
         ae:dc:3c:ce:14:01:ae:7a:bd:ee:96:a7:e2:c1:d0:e5:09:f6:
         2b:0f:96:35:8b:80:9c:fb:03:4d:0e:87:32:f9:69:88:a1:0e:
         7b:d4:b6:fb:a3:ca:c4:a2:f4:57:4b:35:cf:12:7c:69:03:be:
         11:db:a5:d0:7a:3a:ec:1e:e4:79:f7:54:97:1d:72:7b:65:46:
         a0:f4:ce:a1:bf:a8:55:6e:ee:18:38:e6:c0:b0:ac:99:cc:03:
         56:7b:82:cc:c1:97:64:5a:5f:e0:66:ab:bc:07:e2:f8:d2:db:
         cb:19:67:dd:96:50:df:d4:d1:fc:e3:2f:57:6d:86:ed:e6:5e:
         12:66:40:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECtmvvdSaPWdfYZemd3iAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZjhhM2FmMGQ4YzBkNTFkZTJkZGQyNjVhZDU0ZGFiOTdi
ZGU2Y2UwHhcNMjYxMDAzMTcwMTExWhcNMjYxMDA0MTcwMTExWjAzMTEwLwYDVQQD
EyhlNTVhMzdkODE2ODdmNzMzNTdhOTJjZmI1M2ZhMjA1MDgxYmU0NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jgj5v5hCneTyy7IO0OkfYLlLcMH
fUajVR2dzdlAwiiTBkT95mL/gsFlmEz0x/oN4rsHPnW4DCL1/xJQwVer4iHsxNde
f9w0W1kLk/6cZYgFASFkXfRlDHGEh5RTfhz9YNtX4S7xwvkNWofl++Udb/4o15wq
WcwX5x63M5yj+2dF0sTIC85mecXDzKU6BzbbIhkmYYSNyo4GhZqRhLAyzy9EBoBF
GmPO0fKRjdteCCBoVuhPRiYEkvNxFB8FjAIdXjybkNlU+NS0YzFOqn2nIjyQ75Wo
OYPwC8JD1JC0nMho78xUKOuwcRNmOQtSw7NxzdeqBOz/1LyifR4i7vsYlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVaN9gWh/czV6ks+1P6IFCBvkXWMB8GA1UdIwQY
MBaAFBj4o68NjA1R3i3dJlrVTauXvebOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgt
NDc2MzdlYjFlYzQ5LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgtNDc2MzdlYjFlYzQ5
LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdX3QQoJp
ouKWbpWHfqKNiQGyj/bDYgl937zTjKwl9M3Rx2qS+iIrYpJG0LoEdy6AJB3j2pw/
AT2zUWkVuLP3lKpH4EH9vt9bbynaz+Im0U38ZPJiOT4i+FhPXfGI9wRpdWUnZBU9
PxQooniqGLJ1NwhgrKBhOI4tVKIcCSB+rtw8zhQBrnq97pan4sHQ5Qn2Kw+WNYuA
nPsDTQ6HMvlpiKEOe9S2+6PKxKL0V0s1zxJ8aQO+Edul0Ho67B7kefdUlx1ye2VG
oPTOob+oVW7uGDjmwLCsmcwDVnuCzMGXZFpf4GarvAfi+NLbyxln3ZZQ39TR/OMv
V22G7eZeEmZArA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:51:12 2026 by rpki-client