Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
File:                     gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json)
Hash identifier:          IaoPDIQn5vwWQ/xKdc25MuGAU5vNGkb/wi/0TDsE2Bc=
Subject key identifier:   1F:8D:78:45:4F:55:A4:C3:99:AF:DC:D3:7B:74:D3:CB:F0:97:FE:DF
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Certificate issuer:       /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial:       01A1231CEFF814FA564054899961802C2E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
Manifest number:          199B
Signing time:             Sat 10 Oct 2026 00:01:01 +0000
Manifest this update:     Sat 10 Oct 2026 00:01:01 +0000
Manifest next update:     Sun 11 Oct 2026 00:01:01 +0000
Files and hashes:         1: 1-vE35X7cA95yo4co5xI4LRsygqE.roa (hash: GArZfb9HlabGHSj6lQqBP09tmUxt9yZTyafscM2AVng=)
                          2: 8F-O76TUkmlsiOgCnmM_6nJTd4g.roa (hash: Jg+vMGJ/IvxZ8SnVP3JTyVdc1ply2v1uAg9EFIKmJK4=)
                          3: Fh-Fpr_uHjcMFD06n24XprpSG1M.roa (hash: FmZcmk95+iBFV9lKN3BmY/9kElMyaU+AZ6vmkOB1orM=)
                          4: H_-983GgKYxhkkt3nnpQcnHg30Y.roa (hash: Vd3cVl32ciW8wDwlKvX6dteoTksKbjaVlUmvnCCj7EU=)
                          5: HnkouqdWv4SIiw0Y6wY8Ui47meM.roa (hash: ahZvoApKlh5l0oa6Zn6fDd3kDM/ctYdpf3+HGB0yzh8=)
                          6: KQlwkPmpk1DLGUyeI2rVK9lNE7E.roa (hash: bwKf8d6A05QgLcfG48aYiSBWbkKSxoVtSdwZtCZpE+U=)
                          7: Oqt--JM-bQkAEwluYF_VbCJNXBk.roa (hash: qgtHHT2LrCzQJdNXo2JdjcQzzNmHNGHV0c6PUoEL78k=)
                          8: bCNLowmF60GtTgq9MrPewL3-uQM.roa (hash: 6XTgGY9inLGGmIYKO2xERVTl3h4QMDusQwowddy15I8=)
                          9: ejTvaV2blN9QenSFLNnrpBZq49g.roa (hash: Y7jff0ticwpNpSgfsyRoCcnLBtZbRBWqW7cbBoyiVCM=)
                          10: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: IcVtHUeoFwM7hj5MDevTp/RhCRSZrrWJGDZDEI+XFxE=)
                          11: nq6pDF5PCk2N9cPjSjfM50wXO9w.roa (hash: G1Ywhcu+WSXWGvbw/G0u1TXbTpmgtQzLkStG8DNuRus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:1c:ef:f8:14:fa:56:40:54:89:99:61:80:2c:2e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
        Validity
            Not Before: Oct 10 00:01:01 2026 GMT
            Not After : Oct 11 00:01:01 2026 GMT
        Subject: CN=1f8d78454f55a4c399afdcd37b74d3cbf097fedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:6f:21:4f:32:3d:b5:b5:69:2c:fc:58:4b:
                    90:2e:8b:88:bb:93:d1:cf:17:cb:c4:f6:f9:12:f7:
                    b0:96:74:e2:3f:70:c3:1f:6f:a2:e7:41:2b:e1:d3:
                    7f:e6:69:85:77:d5:3b:fc:52:d8:00:a6:55:38:9d:
                    03:3f:6a:e4:a0:63:e2:2a:6e:6c:ff:7d:0a:ef:57:
                    b0:b6:4e:e5:3a:93:c9:cc:60:c8:49:bb:dc:6e:db:
                    b6:34:0b:a9:1a:b7:0b:dc:4f:5f:6e:72:4e:15:c7:
                    7b:f0:7a:c3:8d:80:bf:40:20:d0:78:21:60:e6:12:
                    11:cb:60:7d:ad:bb:f7:9c:c0:a2:81:ad:bb:c2:1b:
                    4f:59:43:53:d7:30:8b:4f:7a:16:04:85:98:b8:71:
                    fd:6f:58:78:b6:3a:55:f5:72:ed:14:87:08:34:68:
                    7b:81:8a:db:ee:5b:a6:c5:09:3b:e5:13:22:ce:f2:
                    56:4c:9b:b5:11:a7:95:57:ab:a9:5c:39:65:2e:ab:
                    13:e4:d3:97:b8:6d:f0:77:f4:49:fe:31:8c:56:23:
                    ce:a1:30:ef:de:a0:b9:be:b8:b0:ba:5c:8f:e9:0f:
                    f1:e1:34:f3:42:92:ed:ca:48:f2:32:ee:95:d2:9c:
                    73:f2:c6:03:6f:cd:a3:af:82:ff:b2:c3:ad:d6:f5:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8D:78:45:4F:55:A4:C3:99:AF:DC:D3:7B:74:D3:CB:F0:97:FE:DF
            X509v3 Authority Key Identifier:
                keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:55:2d:37:d2:10:f7:f9:ea:df:08:56:50:de:c2:eb:7d:38:
         32:07:d7:a9:21:04:8d:1e:60:d3:3a:41:07:47:fb:a7:ef:87:
         a0:29:08:27:61:25:ff:3f:d0:3d:84:84:83:a0:e0:06:2b:2e:
         11:2a:b6:73:71:17:1b:20:6d:f5:07:c6:c1:21:d8:f1:d7:13:
         57:30:85:e6:d0:1c:0f:c4:1b:2a:a2:30:31:84:3f:78:14:52:
         e7:89:b4:4c:0a:0d:1b:b1:b4:af:bc:c6:eb:58:1f:a1:85:0b:
         ea:71:29:9a:17:9a:34:25:eb:2a:e5:23:f1:fc:0c:5a:ae:52:
         4a:19:6b:2b:ac:f5:7f:fb:11:a7:45:43:8f:a8:01:14:61:46:
         a4:68:48:54:6f:65:64:34:05:39:f2:f1:66:51:da:48:0e:8f:
         74:d0:52:be:07:b4:59:1a:dc:86:30:12:db:6b:a8:56:52:c8:
         77:6c:e3:90:82:14:88:34:47:cd:78:03:63:00:83:19:fd:51:
         fa:18:70:0c:ec:f0:37:a8:ad:e8:94:8d:81:ab:f3:f8:86:20:
         b8:ee:9c:ff:e9:df:e4:5c:06:1a:f0:f1:22:48:38:ff:1f:aa:
         78:6c:44:6b:eb:a9:41:7e:57:33:c3:a5:da:e9:67:c5:23:83:
         d9:99:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:44:19 2026 by rpki-client