Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          PJeR4EaF6JHrs3nxtlutF4tdlaaTyTwzCRou4vqcWE4=
Subject key identifier:   4A:9D:51:0F:74:F3:71:E0:93:F9:90:71:AA:69:41:20:F1:11:9A:ED
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       01A0DA9641349A6DB217CA4B30489EEAD4B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          1A76
Signing time:             Fri 25 Sep 2026 22:01:15 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:15 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:15 +0000
Files and hashes:         1: NZ202JDARGMozqemjOm18XWqeB4.roa (hash: EMsYlcYoxjdRaOpIk5ySMPKn2gsFMeYDx9Ik13Whe1E=)
                          2: VizEqnthMjQ52TLR8h7x9BYDAIM.roa (hash: 41b89AhKzVApaqcIg1s1Z2VRJk8VnvLCBhm/gL3LlSM=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: 5DLA5ao8Nr3JbAv/aP8eiP4yh6G/GLQA+WkW7RMr6YM=)
                          4: jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa (hash: CUYbXow71FwfWTHYT6HzHF7ERdH4KcdRAJs9h9PrlE4=)
                          5: loP1-9Yxdj4AbH_rrSqa5GcHgiQ.roa (hash: M03ifXkLsZpfGj/FUbAJuSvBmjEYd8yCYHsKRiZZ6dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:41:34:9a:6d:b2:17:ca:4b:30:48:9e:ea:d4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Sep 25 22:01:15 2026 GMT
            Not After : Sep 26 22:01:15 2026 GMT
        Subject: CN=4a9d510f74f371e093f99071aa694120f1119aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:6e:13:e2:e8:e8:5f:35:51:da:b9:63:10:
                    45:55:d9:f4:a7:71:cb:70:0e:12:4e:fe:d9:b7:f3:
                    32:01:7f:89:c3:00:19:8e:ab:ab:79:df:28:c3:eb:
                    4b:df:eb:a9:3a:f5:b1:57:dc:43:f3:22:bf:49:42:
                    23:07:76:71:48:dc:55:51:ed:09:ab:07:d8:60:36:
                    75:63:71:9b:86:32:d3:1c:64:f5:b9:fd:d9:a0:44:
                    ce:5d:39:06:8d:4d:84:ba:3c:46:63:a2:d7:00:f4:
                    5f:03:b7:10:93:c8:ec:48:0c:05:f8:5d:e2:61:18:
                    2d:c1:73:10:8e:bd:73:7b:9b:cb:20:18:17:aa:4c:
                    ce:16:06:46:6d:d8:2a:77:7e:77:da:a7:36:71:a1:
                    d3:ca:d5:e5:e3:f9:95:87:5d:5e:b6:b9:ac:8a:31:
                    11:34:6c:2c:27:1a:3b:aa:23:5d:3b:45:4c:61:b2:
                    aa:ad:ac:cc:74:74:73:28:34:81:f7:5f:02:34:da:
                    bc:a2:27:a4:c4:47:51:ce:4d:0c:fe:8d:9f:2e:c4:
                    17:62:d1:1a:50:d8:e9:ab:09:18:36:52:2c:84:b9:
                    21:89:60:03:f8:6a:54:13:41:1b:05:b3:b0:b7:f4:
                    16:86:af:45:13:86:52:ba:74:31:6d:f3:47:84:15:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9D:51:0F:74:F3:71:E0:93:F9:90:71:AA:69:41:20:F1:11:9A:ED
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:f8:ee:34:8e:c5:0b:b1:53:a3:e5:21:de:20:4d:d7:72:
         06:08:31:c7:f4:4f:aa:d2:f1:82:3c:42:19:fa:da:93:96:7d:
         cb:7b:05:42:17:f8:e4:21:7c:aa:c2:63:34:88:8f:2d:0e:50:
         fa:5d:45:a7:b4:91:32:27:51:69:a2:c0:de:a5:1d:f2:09:84:
         93:37:bc:58:f9:3e:cb:2c:c9:f7:3a:38:47:d1:94:6e:d1:26:
         e0:dc:56:24:32:43:ac:dc:bd:32:ac:3d:07:f2:b1:33:48:8f:
         4b:50:a2:c0:8b:17:19:e3:2f:48:65:a3:b7:bf:2a:1f:d3:ca:
         4c:7e:28:5e:db:2e:0a:54:27:00:28:d6:ea:b0:d0:aa:ce:10:
         6f:84:b0:b0:61:a6:2c:54:45:8e:9f:74:de:41:be:b4:e4:93:
         01:d9:7f:b8:6a:2b:e5:ec:f2:5e:35:59:58:cf:60:8a:ab:3f:
         76:59:b8:b9:ff:1f:7d:9a:c9:0f:d4:cf:5e:f7:0a:0a:ce:2e:
         23:8a:f5:b1:66:64:6e:92:96:13:b7:22:5e:01:15:14:6b:ee:
         8e:61:e2:eb:fe:15:09:2e:28:ad:ff:2b:35:02:03:1e:ee:9c:
         30:eb:5f:0d:1f:de:db:52:a2:0c:44:3d:d6:3d:d7:71:68:cd:
         e6:3e:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:32:21 2026 by rpki-client