Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File:                     gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier:          hODe2+5pHn2aIsUih0NHETj8ektO+2QNIvxpvguSYls=
Subject key identifier:   4F:5C:06:9F:0A:64:AC:10:3D:E0:B5:C3:73:98:F6:49:56:F6:AE:F0
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer:       /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial:       01A107DD08E75F55DFA78F72D0F1ED5C40D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number:          09A3
Signing time:             Sun 04 Oct 2026 17:01:28 +0000
Manifest this update:     Sun 04 Oct 2026 17:01:28 +0000
Manifest next update:     Mon 05 Oct 2026 17:01:28 +0000
Files and hashes:         1: UPGU48EbY7HXBYGBfLVC0Z-8guo.roa (hash: /XKT2LEWYYhVvudBLh/Zx1Wt+pq2IeZT/TtkyZZNDco=)
                          2: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: 7dOiEcX5UW38Wftq5vwiYmCGqvvHhfT+0pyqH5jbkLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:dd:08:e7:5f:55:df:a7:8f:72:d0:f1:ed:5c:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
        Validity
            Not Before: Oct  4 17:01:28 2026 GMT
            Not After : Oct  5 17:01:28 2026 GMT
        Subject: CN=4f5c069f0a64ac103de0b5c37398f64956f6aef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:94:d5:43:a0:9d:67:6c:8d:44:9d:f9:0f:
                    42:93:b4:59:a6:3c:32:1b:28:d7:09:62:ce:6e:92:
                    8c:ce:8a:8c:0f:bf:d8:a3:9b:e0:af:9a:8f:98:ad:
                    10:e8:47:d8:80:01:eb:d7:26:8a:c8:70:dd:c9:83:
                    c1:1d:e8:22:6a:fb:4e:cd:db:b4:b8:b9:eb:7c:42:
                    c1:97:a4:72:de:41:63:ae:0d:a3:3c:06:0c:08:de:
                    94:38:8d:15:0d:2f:13:d4:55:22:ff:9d:87:e9:98:
                    bf:df:67:b9:74:53:9f:44:1e:ef:d6:6d:f1:13:2f:
                    b8:b5:f7:9c:3c:26:94:c2:fd:3e:87:20:e0:e0:ab:
                    41:e5:f1:c8:3f:f2:ed:0e:3c:f5:63:07:d1:8f:14:
                    9d:68:25:f6:36:51:b5:a2:e2:06:7f:67:34:04:c7:
                    40:f9:af:5c:da:7a:86:f4:f5:6e:71:8d:72:09:9d:
                    e2:88:44:49:b5:f0:18:25:71:7e:e0:39:c9:91:78:
                    9c:9f:44:1a:4c:d4:52:22:a1:f2:fa:ef:f1:b2:f2:
                    fe:81:b0:d6:d5:6f:23:94:0e:4d:1b:00:38:d7:a1:
                    6a:a2:06:63:d8:a1:f0:bd:4a:b3:be:80:17:35:4a:
                    60:ae:b1:e5:30:dd:30:8c:1a:75:c9:37:64:11:db:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5C:06:9F:0A:64:AC:10:3D:E0:B5:C3:73:98:F6:49:56:F6:AE:F0
            X509v3 Authority Key Identifier:
                keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9f:cc:83:8a:df:6d:63:1a:f8:7f:7d:66:a6:af:b4:23:bb:
         1f:63:1d:84:cf:10:9d:cf:3b:5a:24:f4:74:8c:6a:c6:fe:14:
         dd:69:a8:3d:19:6e:70:2f:08:22:19:4d:b9:30:f8:00:48:3c:
         c3:57:83:0e:c4:4f:86:cb:f8:47:87:91:bf:42:55:b6:fb:83:
         22:fb:ad:28:52:c1:8a:5f:c6:b8:51:76:31:c6:6c:a4:82:40:
         60:94:30:cd:e3:20:01:48:46:5b:5c:94:a8:1f:ec:36:41:b5:
         a3:be:71:97:a8:54:44:1c:1d:77:b3:e4:73:4d:27:ab:bf:be:
         4d:58:7e:46:84:21:74:e0:e9:94:1d:f3:71:5f:45:c1:dd:24:
         3a:4e:05:96:88:9c:34:fc:45:24:ec:71:a8:71:84:0c:51:77:
         3c:18:e3:01:6e:98:d8:a0:98:81:21:e7:25:fd:d5:c5:33:8c:
         8b:13:09:5b:23:6d:d8:ad:60:dd:e0:13:5b:c9:01:ee:c9:4b:
         25:cb:2c:db:3d:e6:3e:5a:43:be:14:7b:fb:e7:84:b8:a1:b9:
         27:e6:d6:38:43:0c:65:99:2a:03:1d:44:54:0b:ee:0e:51:8d:
         5f:2d:c9:25:33:da:b4:83:d3:30:4d:aa:4a:62:8a:16:59:93:
         e9:93:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:45:32 2026 by rpki-client