Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
File:                     gRVc2PIuywFPiq1xDAcMfofLCi8.mft (raw, json)
Hash identifier:          sEowHnnXPoF1uPwAnNgbafsiSYsenbRdk2V6of9kYiE=
Subject key identifier:   45:7C:E8:2E:69:56:5B:9F:2B:C1:2A:77:58:8F:95:35:38:B3:2A:28
Authority key identifier: 81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
Certificate issuer:       /CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Certificate serial:       01A0F9B3D91EA4B4599C101E200623E6486D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
Manifest number:          01D6
Signing time:             Thu 01 Oct 2026 23:01:48 +0000
Manifest this update:     Thu 01 Oct 2026 23:01:48 +0000
Manifest next update:     Fri 02 Oct 2026 23:01:48 +0000
Files and hashes:         1: gRVc2PIuywFPiq1xDAcMfofLCi8.crl (hash: ekgZU30vi+0R3ihmJ4y0ax1wE+KzHyKy7P+NhMOJdkI=)
                          2: uDc2pV6zqfjwI-4br5JK6tiGG5E.roa (hash: bNNvOAco8leAwP4SgeSGZ8jpQ0jHOezRglGnSiHe4TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:b3:d9:1e:a4:b4:59:9c:10:1e:20:06:23:e6:48:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
        Validity
            Not Before: Oct  1 23:01:48 2026 GMT
            Not After : Oct  2 23:01:48 2026 GMT
        Subject: CN=457ce82e69565b9f2bc12a77588f953538b32a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:af:a0:f3:39:d9:7b:b1:e2:59:19:15:8a:
                    1a:4f:2a:3e:7f:91:6c:a6:89:4d:d5:97:85:52:e5:
                    2f:89:42:7a:3d:81:2c:c6:9a:8e:27:8c:18:dd:b9:
                    f1:b7:44:24:20:fd:da:d1:17:14:f7:6e:90:d0:01:
                    51:8c:b0:a2:06:2e:75:09:38:2c:e5:93:a2:f0:86:
                    1a:1f:45:c8:5a:bd:e1:0a:fc:0d:11:63:e2:d2:dc:
                    05:90:8b:92:76:30:ed:5a:45:6b:53:60:00:d7:89:
                    d7:a3:63:81:9c:d5:71:59:0b:da:46:41:9f:81:26:
                    48:ea:67:79:e5:ea:d9:cf:3c:d1:8a:d6:90:1e:ba:
                    b8:98:1a:1e:70:a5:6f:24:e9:e0:11:3e:96:1a:53:
                    21:ad:4f:0b:43:0f:35:61:9b:65:b5:b3:86:fa:7a:
                    83:51:da:04:be:1f:b8:67:8c:99:1d:ff:9d:ae:d3:
                    72:4c:35:df:7c:0d:2f:a8:15:e1:07:e7:75:2a:1a:
                    0b:3e:8e:43:b4:fa:74:fc:05:95:f3:13:4c:ec:ba:
                    b5:58:30:d9:21:da:f8:1e:45:94:07:ca:0c:62:2d:
                    7d:43:0f:7b:23:5a:8d:24:ba:fc:d5:8c:39:d2:63:
                    36:a1:94:76:82:aa:fb:33:09:46:c3:85:aa:8d:17:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7C:E8:2E:69:56:5B:9F:2B:C1:2A:77:58:8F:95:35:38:B3:2A:28
            X509v3 Authority Key Identifier:
                keyid:81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4c:27:8c:5d:51:66:bb:9e:22:c1:1a:44:1c:84:14:ad:52:
         ae:21:a2:c5:aa:02:2f:0d:9a:48:c5:5c:f0:e8:71:57:7d:dd:
         0a:1d:a3:e6:48:68:ad:96:c5:88:c3:31:d6:10:96:9e:26:64:
         f1:de:b8:83:c4:6b:34:1c:65:f3:ec:d2:fc:a4:ac:d9:64:a9:
         91:52:07:27:2a:9e:20:22:b7:c9:07:a7:02:e5:e0:5e:33:1e:
         24:74:c0:48:33:ec:3c:c6:08:be:81:d8:3b:2f:18:71:8c:d9:
         16:c1:eb:c8:9d:06:45:84:f1:65:20:0f:ee:b6:15:12:69:2d:
         3a:98:4a:2a:e6:29:de:18:17:58:5f:02:93:ec:32:07:de:0f:
         98:51:45:9a:8a:1d:e4:46:00:8f:3f:95:f7:4b:dd:09:e2:78:
         eb:8f:dd:2c:93:8c:38:30:5b:96:91:a0:db:4b:8b:93:17:70:
         2f:3a:da:fd:27:d2:c0:c8:77:36:2b:c3:4d:4d:02:a0:ee:cb:
         57:11:8e:de:54:85:e4:eb:7a:c6:f2:d6:05:22:80:f8:c0:c3:
         0a:9d:51:22:96:ae:d1:1b:ab:23:9d:3e:4b:b8:09:9b:39:03:
         ca:e1:fc:a3:24:84:9d:c9:f0:b6:ed:6b:88:6d:4c:fb:a0:d9:
         88:c9:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:27:24 2026 by rpki-client