Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File:                     gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier:          ljAMBRiQcrSCchpbJ1epFsBjKCJm7vU+L75RxN48KwY=
Subject key identifier:   FA:41:53:F9:DD:6C:75:C4:C9:94:27:34:D4:6D:09:90:F0:AC:1A:2B
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       01A10DA73C6267D5FF2F6646F874FFC08AF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number:          1A8C
Signing time:             Mon 05 Oct 2026 20:00:25 +0000
Manifest this update:     Mon 05 Oct 2026 20:00:25 +0000
Manifest next update:     Tue 06 Oct 2026 20:00:25 +0000
Files and hashes:         1: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: kC6CS3RgE/IsE4Uaie87j5+NTJdIQR+5TlTM4GYsCUs=)
                          2: pA1ePqI7SD5ojrPp_XCatoiq2zo.roa (hash: CAWXsP1JZ/KW0NUUE6ss0n5HsqgH1Gk+g+22Bws1Rqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:a7:3c:62:67:d5:ff:2f:66:46:f8:74:ff:c0:8a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Oct  5 20:00:25 2026 GMT
            Not After : Oct  6 20:00:25 2026 GMT
        Subject: CN=fa4153f9dd6c75c4c9942734d46d0990f0ac1a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:73:63:c5:6c:1a:c0:09:66:a3:ea:fc:82:
                    48:0a:ae:3c:3c:eb:a9:d8:84:ae:4d:8b:a1:42:99:
                    6e:32:13:94:51:b8:2f:a1:cc:ce:3b:ed:17:70:79:
                    63:36:66:68:44:b8:d1:16:54:5b:2f:a9:10:68:8c:
                    39:7d:fb:ac:d1:4d:0e:42:3b:c1:f2:0e:c4:14:7b:
                    8f:a7:18:ad:45:bf:c7:1f:b0:96:f5:72:d6:c6:2c:
                    a0:1f:8d:5e:ea:51:2e:3d:92:9e:af:20:f7:97:eb:
                    d4:39:d0:a2:3b:65:e2:db:51:72:27:06:16:e5:68:
                    34:7d:15:4a:aa:8f:00:c3:2d:17:ac:ec:c5:b5:e9:
                    fb:07:e1:37:2a:24:d5:05:67:b2:58:76:b2:6f:61:
                    3e:f8:6e:2f:cb:d8:61:3a:1d:b2:4b:58:1a:98:61:
                    e8:15:80:09:c9:16:3f:da:31:62:68:9c:62:6d:25:
                    8e:cc:b0:0e:d4:7a:2a:bd:28:28:dc:31:bc:d5:43:
                    ec:56:3a:2d:a6:24:0d:28:84:a8:4c:2e:ce:29:ed:
                    b0:b1:c0:25:78:f9:b5:fd:7e:8a:5f:ed:30:d9:3d:
                    4b:73:87:ef:dd:a7:d4:29:f5:f7:81:9c:82:ec:ee:
                    48:31:1e:60:8c:1b:7c:27:05:2f:8b:68:b5:f5:1e:
                    4d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:41:53:F9:DD:6C:75:C4:C9:94:27:34:D4:6D:09:90:F0:AC:1A:2B
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4d:77:e6:b9:81:02:fe:ed:03:93:23:52:46:49:01:4d:80:
         bb:ea:89:7f:eb:d9:98:ef:7e:cf:b9:d6:9f:12:b3:95:d5:4d:
         8f:67:bf:2f:e5:02:d5:91:3f:19:66:bc:ef:f9:e8:60:c9:f6:
         3e:1f:26:93:b6:38:9a:5e:f3:8c:1d:25:5f:ff:cc:9e:cd:0d:
         07:04:d2:72:af:60:1d:9d:93:c2:f8:ae:78:95:6f:83:7e:aa:
         bf:23:89:7d:42:27:b5:94:1e:42:df:25:5e:39:e6:5f:0e:0d:
         92:8a:ae:9a:d8:56:02:90:33:a1:f5:5c:1b:74:01:12:79:87:
         32:e9:08:73:30:36:d1:83:8e:5a:a8:13:90:7f:80:66:77:62:
         7e:d6:a4:ea:db:48:ec:f1:39:6e:75:e9:80:58:02:07:03:9f:
         61:2c:be:00:21:74:80:b4:39:6c:83:8d:13:bb:99:39:70:8c:
         1f:a7:2a:cf:ec:65:4b:3d:95:65:12:5f:7a:9b:81:82:3e:32:
         c4:aa:5b:7d:a7:7f:4d:40:b1:5d:be:33:3d:c2:8f:e6:48:1c:
         10:49:7f:84:12:4e:42:a1:3d:78:d9:2e:04:40:25:1d:2c:ea:
         be:d3:27:dd:da:db:39:67:ef:1b:a3:30:f2:ce:b2:8c:fc:1e:
         44:b8:20:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaENpzxiZ9X/L2ZG+HT/wIr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzFhZWQ3NGFhZDA2YjFiODVjNWJhNjc3OWMxNjFmNGE1
MmIzYzQwHhcNMjYxMDA1MjAwMDI1WhcNMjYxMDA2MjAwMDI1WjAzMTEwLwYDVQQD
EyhmYTQxNTNmOWRkNmM3NWM0Yzk5NDI3MzRkNDZkMDk5MGYwYWMxYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqRzY8VsGsAJZqPq/IJICq48POup
2ISuTYuhQpluMhOUUbgvoczOO+0XcHljNmZoRLjRFlRbL6kQaIw5ffus0U0OQjvB
8g7EFHuPpxitRb/HH7CW9XLWxiygH41e6lEuPZKeryD3l+vUOdCiO2Xi21FyJwYW
5Wg0fRVKqo8Awy0XrOzFten7B+E3KiTVBWeyWHayb2E++G4vy9hhOh2yS1gamGHo
FYAJyRY/2jFiaJxibSWOzLAO1HoqvSgo3DG81UPsVjotpiQNKISoTC7OKe2wscAl
ePm1/X6KX+0w2T1Lc4fv3afUKfX3gZyC7O5IMR5gjBt8JwUvi2i19R5NGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpBU/ndbHXEyZQnNNRtCZDwrBorMB8GA1UdIwQY
MBaAFIHBrtdKrQaxuFxbpnecFh9KUrPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wOTE1Y2YtYzZkOC00MTAwLTkwYjMt
OWQ1M2FjMmY4ZTdmLzEvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wOTE1Y2YtYzZkOC00MTAwLTkwYjMtOWQ1M2FjMmY4ZTdm
LzEvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0135rmB
Av7tA5MjUkZJAU2Au+qJf+vZmO9+z7nWnxKzldVNj2e/L+UC1ZE/GWa87/noYMn2
Ph8mk7Y4ml7zjB0lX//Mns0NBwTScq9gHZ2TwviueJVvg36qvyOJfUIntZQeQt8l
XjnmXw4NkoqumthWApAzofVcG3QBEnmHMukIczA20YOOWqgTkH+AZndiftak6ttI
7PE5bnXpgFgCBwOfYSy+ACF0gLQ5bIONE7uZOXCMH6cqz+xlSz2VZRJfepuBgj4y
xKpbfad/TUCxXb4zPcKP5kgcEEl/hBJOQqE9eNkuBEAlHSzqvtMn3drbOWfvG6Mw
8s6yjPweRLggHg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 05:09:40 2026 by rpki-client