Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.mft
File:                     GMvSaPW0_CLbvs7prlSJuUHePBQ.mft (raw, json)
Hash identifier:          xva0yF440cohoU3yOU5HYO+XZHW0Ng0M3IgMKLVrfSE=
Subject key identifier:   A5:C7:4B:6F:13:4A:96:E7:41:58:1A:4C:F8:9F:7D:E6:50:5F:DE:37
Authority key identifier: 18:CB:D2:68:F5:B4:FC:22:DB:BE:CE:E9:AE:54:89:B9:41:DE:3C:14
Certificate issuer:       /CN=18cbd268f5b4fc22dbbecee9ae5489b941de3c14
Certificate serial:       01A136359BCFA14773B4C903360D00357876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMvSaPW0_CLbvs7prlSJuUHePBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.mft
Manifest number:          0263
Signing time:             Tue 13 Oct 2026 17:00:45 +0000
Manifest this update:     Tue 13 Oct 2026 17:00:45 +0000
Manifest next update:     Wed 14 Oct 2026 17:00:45 +0000
Files and hashes:         1: 2fuI5Yy1cnIVJxuM6LrXWuKqBTg.roa (hash: 0qvI3oLAIxzbhsWr2MHA6stfkpIaY0pi5dvdM8xacqk=)
                          2: GMvSaPW0_CLbvs7prlSJuUHePBQ.crl (hash: tm+JsPTI2UIXuF/NS/okZ3lIlyLQIj0MnhjdnaEf0ZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMvSaPW0_CLbvs7prlSJuUHePBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:35:9b:cf:a1:47:73:b4:c9:03:36:0d:00:35:78:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18cbd268f5b4fc22dbbecee9ae5489b941de3c14
        Validity
            Not Before: Oct 13 17:00:45 2026 GMT
            Not After : Oct 14 17:00:45 2026 GMT
        Subject: CN=a5c74b6f134a96e741581a4cf89f7de6505fde37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:1a:7d:2e:c3:55:51:d3:31:2d:76:ed:4f:
                    e6:37:75:fc:3c:c3:8f:d6:f9:b3:7d:d2:cf:97:1c:
                    71:92:17:f3:a3:1b:08:a6:c8:28:e4:22:ff:de:48:
                    f6:53:ff:ed:19:96:56:90:04:91:fb:87:d5:10:8e:
                    a2:85:90:63:c4:af:b1:ff:42:37:36:99:77:8d:d1:
                    97:25:3d:c6:55:9e:37:3f:c8:73:ed:36:43:e1:34:
                    87:0b:4d:0f:47:a6:bf:36:04:6e:30:1f:03:e2:26:
                    f2:9f:7f:7a:a8:61:31:58:74:6f:6d:90:34:c9:2c:
                    29:19:38:8d:97:7d:51:4c:e8:1e:8d:d4:11:2d:b5:
                    43:08:cc:c5:aa:b1:64:9a:d2:00:7c:68:27:e1:24:
                    58:db:82:be:af:51:aa:49:a3:e7:00:5b:b7:f4:35:
                    c6:54:68:51:e2:04:d0:46:7c:68:73:8b:21:39:56:
                    eb:08:1b:6b:66:df:71:63:4a:99:c7:29:f8:38:90:
                    be:65:20:56:90:96:10:e7:03:42:0f:f4:fa:78:b0:
                    87:cd:42:71:0d:4f:d1:e9:59:8d:b5:11:3e:7c:a1:
                    2d:af:35:91:7e:2f:c0:5d:b3:39:c0:31:06:06:13:
                    35:a3:56:44:fe:20:b3:26:c4:c8:93:bc:43:e1:a7:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:4B:6F:13:4A:96:E7:41:58:1A:4C:F8:9F:7D:E6:50:5F:DE:37
            X509v3 Authority Key Identifier:
                keyid:18:CB:D2:68:F5:B4:FC:22:DB:BE:CE:E9:AE:54:89:B9:41:DE:3C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMvSaPW0_CLbvs7prlSJuUHePBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a1:47:f0:76:72:f8:a5:c0:1a:a7:7b:27:57:0f:d2:31:59:
         86:79:a0:5e:18:fc:77:eb:fe:65:e9:07:30:45:3b:d5:b4:3e:
         b5:83:75:29:2e:b7:12:d1:80:81:50:99:71:5c:fa:3a:67:33:
         57:29:5e:ed:26:35:34:f8:36:18:45:90:2f:cf:4d:06:ab:e2:
         87:e9:24:db:28:85:13:59:5f:98:98:81:cf:a3:bf:b6:f6:51:
         d0:bf:64:3f:19:b2:cd:25:6c:1f:3a:3c:41:7b:bb:6f:8a:fc:
         e1:39:0f:be:ea:10:4f:b0:73:3d:29:af:bb:69:8e:b3:04:9e:
         55:5b:e8:0a:9a:78:ce:8a:3a:d2:cf:29:68:85:2a:2e:32:0c:
         a4:50:62:33:f2:06:9d:1c:2e:f4:fa:55:ed:cf:72:a0:92:47:
         5a:e3:34:fc:85:ce:1f:a9:97:7c:9f:99:b4:75:79:dd:5d:69:
         b6:7d:84:cb:4a:a4:83:20:3c:eb:d9:36:1c:f0:15:cd:87:02:
         31:c7:fe:64:47:93:99:a6:8e:64:47:3e:1b:20:77:d8:be:d2:
         b8:d4:8d:d8:23:ab:73:bc:2c:1c:a8:9f:cd:9f:0d:b4:81:6d:
         b6:c6:3e:6e:66:5a:e9:01:86:5a:9e:cb:ca:ba:1d:ea:a5:80:
         8a:77:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:04:22 2026 by rpki-client