Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
File:                     GuwRjCU363UtdoXMGf0-xDD1Bfw.mft (raw, json)
Hash identifier:          E1fq8ajNxhqqbq9+hhJdjAcqwisSdSsbVR/MtEbzDWw=
Subject key identifier:   0A:F8:80:60:40:42:13:10:13:97:62:81:D0:ED:BC:EC:01:C3:F9:D2
Authority key identifier: 1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
Certificate issuer:       /CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
Certificate serial:       01A0FDFE4C30E8B91F1525E4E5A21B90DB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
Manifest number:          0222
Signing time:             Fri 02 Oct 2026 19:01:36 +0000
Manifest this update:     Fri 02 Oct 2026 19:01:36 +0000
Manifest next update:     Sat 03 Oct 2026 19:01:36 +0000
Files and hashes:         1: GuwRjCU363UtdoXMGf0-xDD1Bfw.crl (hash: qu6lk95t5+MLbo5DFrMeQ63gLZnEtBX8rdimTmuGmO0=)
                          2: fyrwpSpHOQ51MD8HtpifeJqSkG4.roa (hash: o8gKMzDK7KI5j5Qki30gQMXdbKnHqlaCMrDbLfOew8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:fe:4c:30:e8:b9:1f:15:25:e4:e5:a2:1b:90:db:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
        Validity
            Not Before: Oct  2 19:01:36 2026 GMT
            Not After : Oct  3 19:01:36 2026 GMT
        Subject: CN=0af880604042131013976281d0edbcec01c3f9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:30:87:73:2a:f2:c3:2b:77:90:37:cb:49:
                    c2:ca:1f:05:7b:dd:52:49:b1:68:88:77:d9:ae:98:
                    8b:ce:c9:37:04:cb:af:1a:fe:2b:8b:4b:c0:b9:ea:
                    db:ec:e9:ed:dc:6d:2d:04:66:51:73:a5:7c:04:23:
                    4c:bd:c1:e0:2b:5d:a5:9a:b7:73:a8:73:8a:ee:32:
                    c5:d0:75:99:90:7a:10:0e:87:4e:0a:1c:9d:5c:7e:
                    c0:a6:df:25:21:94:00:58:d2:06:6a:f5:2e:4f:14:
                    c1:4b:37:10:66:a5:67:d1:eb:28:d4:e0:35:e5:49:
                    17:8d:25:16:10:29:24:51:1e:24:92:2d:c7:59:aa:
                    1e:47:94:15:dc:0d:97:2b:fd:57:e8:5a:96:d4:0a:
                    a1:64:f0:d0:63:05:43:6c:50:f0:51:61:42:d3:3b:
                    8e:93:e7:95:21:4a:c9:ac:86:4c:36:79:b0:1a:7f:
                    ca:e6:aa:e9:20:9d:28:79:50:2c:aa:07:ce:a2:cc:
                    dc:ff:7a:bf:c2:13:71:d7:ac:14:9d:0c:b2:0e:ea:
                    30:a2:05:66:0d:57:12:fd:70:7d:f0:b1:54:88:4a:
                    59:46:d2:99:0b:c8:a5:ca:df:87:a5:3e:05:ec:0f:
                    c8:cc:3f:05:f1:e8:35:a0:f0:81:27:18:95:be:07:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F8:80:60:40:42:13:10:13:97:62:81:D0:ED:BC:EC:01:C3:F9:D2
            X509v3 Authority Key Identifier:
                keyid:1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:fd:a6:30:b2:c8:12:94:d8:52:48:25:d3:46:af:07:ad:
         26:91:14:55:14:52:bb:97:a7:31:f8:5a:7f:fb:79:5b:59:4e:
         f8:20:bf:10:6e:62:23:0d:f8:ed:3b:0a:fa:bc:78:8b:dc:91:
         fe:6d:f1:27:6b:ce:79:d6:4b:11:99:25:31:4f:be:fc:89:e7:
         33:09:d8:f7:4a:ee:19:35:43:a7:16:c4:96:b6:da:a4:18:45:
         c1:c8:58:fc:af:6d:c5:0c:b2:70:c3:54:25:52:74:a3:e6:7d:
         63:e9:f8:3f:1a:81:c8:2b:46:7f:ea:6b:2f:ef:11:96:1e:ed:
         dc:4f:cd:0a:ff:18:48:4d:1c:54:2d:2f:5f:dc:9b:9f:9c:12:
         ed:78:e7:49:ac:5b:ff:77:6b:00:c4:07:e6:c2:48:da:28:03:
         0c:1b:3b:f5:8b:66:ae:43:4d:0e:f0:7d:2d:43:b5:46:f5:03:
         68:fe:9c:ea:b3:1e:49:42:98:e0:e1:78:bd:51:58:a0:ed:9e:
         15:56:10:2e:f1:51:86:7f:08:86:62:0c:bf:79:ff:c7:db:bf:
         8a:45:7d:6c:4b:c0:a9:68:c9:94:aa:6b:28:c7:1e:d1:6d:b2:
         2f:17:42:96:8c:fe:e0:45:4c:8a:6f:6c:36:f6:83:d4:91:f2:
         91:5d:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:19:46 2026 by rpki-client