Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
File:                     gRVc2PIuywFPiq1xDAcMfofLCi8.mft (raw, json)
Hash identifier:          GBfAcSxKqV/Nhmxww13vNAquunAjuBxpjlRoJOVt2lI=
Subject key identifier:   8C:BB:AD:9D:9C:FE:43:2F:AA:A6:42:A3:D9:FB:7A:39:FF:95:82:0E
Authority key identifier: 81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
Certificate issuer:       /CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Certificate serial:       01A0FD8FFA76BCB36B73264957DCEAE5262C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
Manifest number:          01D8
Signing time:             Fri 02 Oct 2026 17:01:06 +0000
Manifest this update:     Fri 02 Oct 2026 17:01:06 +0000
Manifest next update:     Sat 03 Oct 2026 17:01:06 +0000
Files and hashes:         1: gRVc2PIuywFPiq1xDAcMfofLCi8.crl (hash: Fk3BHb+Cx2BOLzU5N+sKp88bJ0JWghFdFnJey1D24kE=)
                          2: uDc2pV6zqfjwI-4br5JK6tiGG5E.roa (hash: bNNvOAco8leAwP4SgeSGZ8jpQ0jHOezRglGnSiHe4TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:8f:fa:76:bc:b3:6b:73:26:49:57:dc:ea:e5:26:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
        Validity
            Not Before: Oct  2 17:01:06 2026 GMT
            Not After : Oct  3 17:01:06 2026 GMT
        Subject: CN=8cbbad9d9cfe432faaa642a3d9fb7a39ff95820e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:ae:9a:d9:28:20:b0:94:bf:e2:d2:89:22:
                    17:08:30:e9:41:5e:6d:dd:eb:8d:1c:25:99:fb:21:
                    68:7f:b2:cd:df:5a:20:18:46:60:25:0f:c3:79:3a:
                    df:ed:91:2d:02:29:c5:57:03:36:d3:f6:41:fd:a8:
                    49:0e:38:8a:c8:cc:65:6c:fd:44:8f:98:b6:91:34:
                    37:d7:cf:ab:3f:de:77:f4:33:03:55:24:8b:41:e1:
                    13:e2:8f:61:4e:5d:9f:08:25:27:47:23:d1:44:32:
                    0c:3f:86:b8:79:27:c4:8c:7a:3d:59:f7:77:96:bc:
                    6d:43:ea:93:25:5b:1c:54:22:3b:a0:16:47:57:a3:
                    65:6c:15:c4:d5:ef:4c:cd:af:25:04:50:a7:3a:f1:
                    9d:0d:f1:f6:39:54:3c:d0:06:24:03:50:3f:90:31:
                    b8:8f:a6:58:38:ef:f5:60:7b:51:35:37:ea:d6:ed:
                    cd:1e:86:9b:2d:d8:7c:28:39:2f:69:78:1b:42:90:
                    ff:6e:4f:90:eb:cc:2a:cc:80:b1:ec:90:60:db:8f:
                    77:59:d7:ef:69:70:e8:6e:4c:48:6f:c1:fa:da:56:
                    e7:16:f4:88:04:d6:a7:af:95:4d:7e:41:3e:1f:0a:
                    f4:9e:b4:34:8d:74:4f:ba:7f:71:90:47:6f:bb:01:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BB:AD:9D:9C:FE:43:2F:AA:A6:42:A3:D9:FB:7A:39:FF:95:82:0E
            X509v3 Authority Key Identifier:
                keyid:81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:a1:02:4f:c1:bb:a7:a9:a3:53:63:95:b9:a5:4d:cc:22:
         2c:eb:b7:19:57:cf:62:ef:4f:67:b6:58:96:01:90:38:cf:73:
         db:eb:3c:cf:b1:0c:40:1f:42:d4:90:17:a2:b9:76:32:ff:71:
         b5:fd:4a:5c:ab:92:9e:0f:c2:f1:b8:3e:fe:f8:05:4d:07:39:
         0e:30:f1:43:d2:c5:87:01:0f:b6:80:9c:11:47:9d:11:ea:0c:
         29:ed:30:c7:6a:2a:14:b5:67:ba:6b:3d:72:39:9b:3f:e8:02:
         ec:c5:b6:ed:3d:3f:fc:6d:7d:cc:68:22:e4:dc:ca:7d:22:85:
         1b:09:9f:4d:a1:7b:fb:da:8d:8f:96:fc:d0:4a:5a:00:45:e4:
         23:55:0c:8e:66:f0:5b:29:14:53:4c:0a:b5:7b:45:d0:87:49:
         a7:2b:d5:dd:c7:74:28:4e:6b:c7:1a:98:b1:a9:f9:83:92:5b:
         fb:0f:ef:88:43:e2:94:83:ef:e9:af:6e:2b:49:2a:ca:af:61:
         65:27:86:e4:a3:b0:a1:8d:e2:26:79:e3:ec:87:5a:9a:92:db:
         ba:40:02:76:ef:09:b8:d2:a2:5e:e3:f5:5f:d5:fe:8d:67:58:
         b1:95:18:db:04:bf:96:20:31:51:14:b4:d3:ad:17:1d:da:8b:
         6c:e2:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 22:44:45 2026 by rpki-client