Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File:                     gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier:          ejy9WwZ7eweNvuv2uCzgqJ3YMYGjc8tPT41Iyjml9uo=
Subject key identifier:   61:B3:0C:80:C5:09:66:D2:D5:C6:CD:C9:EA:C5:57:4C:FB:BA:E3:59
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer:       /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial:       01A106257A53FEA3EF32F1F39ED712714B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number:          1A88
Signing time:             Sun 04 Oct 2026 09:01:21 +0000
Manifest this update:     Sun 04 Oct 2026 09:01:21 +0000
Manifest next update:     Mon 05 Oct 2026 09:01:21 +0000
Files and hashes:         1: bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa (hash: KNO75JkgNbMb91A1hmTO0xTL3a65pxvLADRxVDguCYw=)
                          2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: mlB6bMEYoCUuOF4oDflQIKuqPZuXV/2EMsTo1vSkTYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 09:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:25:7a:53:fe:a3:ef:32:f1:f3:9e:d7:12:71:4b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
        Validity
            Not Before: Oct  4 09:01:21 2026 GMT
            Not After : Oct  5 09:01:21 2026 GMT
        Subject: CN=61b30c80c50966d2d5c6cdc9eac5574cfbbae359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:d1:dd:8e:6d:d9:02:5e:bd:c5:5a:44:68:
                    55:72:a5:60:79:41:4b:3a:fc:97:ba:03:a7:07:b5:
                    0c:e5:0e:40:05:e8:79:59:d2:27:b2:57:15:c5:61:
                    fb:94:78:67:7c:46:17:11:da:90:6a:cf:d8:ee:3b:
                    1a:68:34:d1:67:43:41:d3:83:ee:74:be:4f:92:ef:
                    d3:ca:82:6f:f6:06:26:ca:c6:a4:b3:c9:4e:91:0e:
                    14:42:5b:1d:51:48:ae:a6:86:12:fc:af:38:e3:6d:
                    36:34:f1:5f:d3:18:8a:3e:f2:a1:ca:77:32:31:3c:
                    15:4f:19:0e:2d:a8:1c:d0:b2:fe:e9:52:5c:1a:74:
                    e8:fa:a4:4a:0c:f2:14:4e:7c:e9:56:9e:2c:f1:23:
                    1f:e5:36:d2:26:fe:9e:2e:7c:1d:00:84:72:76:37:
                    61:28:ca:61:eb:cc:79:cc:1e:1d:70:9f:b8:60:99:
                    78:8c:7a:72:6a:d5:c0:c6:24:74:51:49:77:05:a4:
                    59:54:d1:e7:65:8c:59:c2:67:88:6e:02:ce:2b:5d:
                    0b:c6:23:7c:6d:5f:a9:d1:ae:95:ea:f2:e0:07:56:
                    8d:a8:af:8c:b5:4c:69:a5:f1:6d:84:1c:30:7c:d5:
                    6b:4e:29:a5:f4:92:e6:de:e7:8a:f6:f9:06:b9:53:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B3:0C:80:C5:09:66:D2:D5:C6:CD:C9:EA:C5:57:4C:FB:BA:E3:59
            X509v3 Authority Key Identifier:
                keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:fb:ae:3f:94:ff:84:c9:a7:be:4b:5d:44:d2:33:fa:24:
         b1:7e:ec:47:ec:59:e3:26:10:54:d2:7f:48:6c:15:61:a4:fa:
         a7:ef:1f:aa:cd:6a:7e:ae:aa:14:04:19:f3:7f:c5:d5:46:fe:
         f6:6f:f5:0a:25:a5:a1:03:36:59:8f:56:0e:9e:c5:d8:84:a9:
         1e:70:f8:31:6c:7b:c4:8a:d2:5b:01:82:73:29:d0:cb:44:74:
         64:15:c1:4b:ec:0f:a1:83:9a:bb:fc:c9:67:d7:53:d8:5c:e6:
         f7:00:00:01:57:25:c8:2d:27:e3:af:18:29:74:bd:a2:9d:79:
         91:39:fc:07:fd:b3:ef:de:c9:60:27:ec:74:56:6b:81:39:00:
         26:de:06:3d:90:88:07:bf:23:15:e6:c5:01:e3:40:fa:01:be:
         4d:72:4e:7c:2a:00:59:62:f0:01:5c:ef:8c:fe:e0:6e:a1:38:
         4d:e9:7a:c1:f0:41:45:22:75:1c:33:e5:2a:db:21:2b:1e:55:
         6d:98:bb:db:bb:07:59:83:20:e9:b3:c3:11:f4:c4:3b:77:e1:
         a6:85:af:29:4d:e7:9f:f1:be:a4:3a:f1:9b:c0:67:07:3f:e2:
         ac:17:61:ab:f4:79:ce:a4:9e:1d:31:4a:f9:1d:04:b0:83:35:
         1e:ca:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:02:33 2026 by rpki-client