Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          HhvqTZpOXhTLxE2/uK2MozUwgEZOK43R2dipf40UWuc=
Subject key identifier:   0C:6F:87:79:AA:E0:8F:24:21:AA:4E:45:7C:B5:04:9F:00:BA:EA:42
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       01A0CE9228DDF3773CDB59923ED697884425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          1A83
Signing time:             Wed 23 Sep 2026 14:01:20 +0000
Manifest this update:     Wed 23 Sep 2026 14:01:20 +0000
Manifest next update:     Thu 24 Sep 2026 14:01:20 +0000
Files and hashes:         1: 1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa (hash: d7tHq0/WDiMxn6UKxVk4uWzuZHMqABk4mVDBFTvFdTs=)
                          2: 1ZrxuRCZshhY9s-tRrinaL6p2M4.roa (hash: vYDVELPxbFafSrHLHY1BdtRwJHAAFaUieh3mkUsVbik=)
                          3: 1pNj_76j6mMS3u4BpN5gcHIvm34.roa (hash: xSQfQP+EsZm2U+T+O/IykU1NqD6pAYR1qJHp244VQts=)
                          4: 3DWFpw79OcRxHFUgDBKVisWT3bU.roa (hash: x3h4wbAmV51TlkfTEkHGrNxK/j4eCvpQPxXmB1qILMc=)
                          5: 3Q_yMiwTyac3O9Accnhg5KfD92Q.roa (hash: 2pKWPuyute5RJlYJfS0zr4oGa9jeGylHhVM1CLmLS3M=)
                          6: 5ysiViCYjFvC9-kctDcIkY-pILA.roa (hash: G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=)
                          7: Cno2ECt5zWG8x2rItCKPgOTCzds.roa (hash: IEJ+ozBs/+G+ZTwI22ieEKOuITC+Sg6aWJDoMBvjKzA=)
                          8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: JBYbt0BFC3vKkl2iG4dMuC9RgILus00OS+vDevZZikk=)
                          9: HcrhRtfROyUtMyYdwEAqxsg1wig.roa (hash: u1rHBHJGzvgEOJg1heYgUCIOqnoD1iQ2J3moBSCOEfQ=)
                          10: J-77ZlXsX9U2N93n4AsioUY-n30.roa (hash: 176hXqJ10VD2B6wOqNZJ0R5KmjVOqUfFRwDGeoXMTzY=)
                          11: JV9qqXJgthdEV9gSEtaAmKrXJH8.roa (hash: HbqSFDLUPF4aIt4hRE8wj3agSeKulUgEDvc2yx+tlBw=)
                          12: NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa (hash: nLprapUqPV9Ri3l6oKOQrylBfkeWz8n1WoTNn+XlF64=)
                          13: SQRKv0Z6_hmqtMPRpJ8gU8-qRNg.roa (hash: 2pACudLrBk6yGw4NBGywXzJ+cVqO1szI/T9hnvWe6SY=)
                          14: TPuALIMyKHTAJN5eUnqBGspsy3E.roa (hash: ebun0C4ydv6bPmHr73fW6etob8nrsagGkwWDv5pcdsU=)
                          15: dny3tReQLhVMkluPT2fnIL0-PDE.roa (hash: n9SThQXODaWNDc9q3fwExfhrE1fksgEVeXfy0EUzNVw=)
                          16: emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa (hash: UslOLiX4wEz1eptieEOecWhikavAl/mlrbTGzuC2lHU=)
                          17: fcHjLtqVqV3tVtoDxwjhfSzY7bs.roa (hash: ePNTITXRrYt66PQPFxhFK+34fiF8t0NZrF7ig8fGhT4=)
                          18: hJ99v2p-kjtGOUcKBEPiUv62q80.roa (hash: x0WHYTjVa1fBBNhi71QSt5FoK7FqF26Qyuiibh4AUiY=)
                          19: n-5zEzSs351qrnGuBMspmFZCEI0.roa (hash: MYJupN5IEmr6ZufnYdbMso7OMy/8DIghG/NxlYmVwKI=)
                          20: okyZecfvIRqZODTkhqFVtVBqWlo.roa (hash: JURGYJBnqyW45CKjgzH7wE+F8JuOD/bJVrdaAV1cAA4=)
                          21: xhYmgGiF89Fz7bZhNjTbr52OYzc.roa (hash: Y8zNHkd72sloXAusIAjhHWfHMe8tp3rm6YXqz7dcQSg=)
                          22: z-M332yUcZzCTQnUx92JaIFm4lM.roa (hash: z6ZEntp831JJArGs2BedeJhcNl4wp+TXxoYayfvGoKo=)
                          23: zw5fWwxMO3uQ-3JnwT5dNNL0eVM.roa (hash: pnhzFXR1P1zYlMWvKT9giOYUIJ62wyltI992iTbrpYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:92:28:dd:f3:77:3c:db:59:92:3e:d6:97:88:44:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Sep 23 14:01:20 2026 GMT
            Not After : Sep 24 14:01:20 2026 GMT
        Subject: CN=0c6f8779aae08f2421aa4e457cb5049f00baea42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:fb:ba:9f:c6:9d:a3:3e:e3:30:5f:86:e8:
                    2a:e4:96:cd:38:0c:c0:15:1a:d3:fb:bd:a2:1a:2c:
                    08:d1:c7:ca:30:07:bc:c8:4e:31:7b:b8:c4:ec:a5:
                    53:58:5a:72:7d:00:8c:a5:0b:9f:97:3f:e8:dd:4f:
                    ef:a3:9b:cf:a4:23:e0:94:74:59:f2:6c:07:f9:6b:
                    f9:da:9b:07:96:9e:fe:e0:cd:e5:ae:ef:fb:08:87:
                    a9:5c:a3:40:81:f6:36:49:a0:c2:85:65:34:f2:ff:
                    d9:95:7b:47:92:c5:10:55:7f:58:99:c8:da:c9:6e:
                    2f:40:fa:44:62:cc:de:40:82:0a:ad:43:19:e0:76:
                    4a:ce:43:93:97:3c:4e:9c:27:f8:14:d7:6f:32:d5:
                    bc:0e:af:8a:29:20:b8:4f:52:b8:55:a6:46:a3:0b:
                    53:12:7a:4b:7a:40:7d:94:3a:d7:ee:86:5b:c4:8d:
                    41:79:d8:31:f4:bd:af:0a:1e:c3:cf:47:87:d3:c0:
                    44:20:19:d9:bf:d2:0d:06:24:a1:75:f3:55:cf:af:
                    18:1a:7e:2c:84:5a:d8:30:be:e6:65:d2:07:ac:67:
                    e7:ce:c1:c8:86:f5:2a:dd:b9:45:7d:84:82:6d:18:
                    e6:36:e9:df:43:f8:4e:d7:cb:68:9e:5e:d0:0a:6d:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6F:87:79:AA:E0:8F:24:21:AA:4E:45:7C:B5:04:9F:00:BA:EA:42
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7b:98:90:47:9b:39:74:a3:f9:40:9a:12:72:81:4d:23:a5:
         8b:66:f6:72:8d:80:36:f6:c9:99:54:0a:bb:00:6b:83:e0:a0:
         e9:80:98:b8:02:1b:b2:4c:41:c1:67:3b:cf:ee:bb:c4:d6:cc:
         11:4c:49:d3:dc:c8:79:e2:1f:e9:30:75:42:bf:0c:4a:92:31:
         ac:8b:32:d2:e0:6b:38:05:3b:f8:82:a5:9f:e3:bd:b1:d8:3e:
         a4:3c:17:e9:c3:d5:28:10:bb:13:8f:3b:ec:62:58:37:99:7c:
         9e:bc:a9:93:ff:98:06:0c:d7:a5:08:13:f2:16:d2:f1:29:1c:
         5e:1d:f7:9d:30:a8:c7:e5:a3:9d:bc:d2:b6:6d:b2:80:27:a9:
         f9:51:14:cc:65:82:7f:f2:ca:3e:3c:2c:13:98:1f:02:47:a0:
         69:2b:97:e4:64:16:bb:e0:5b:25:9e:4c:54:91:30:34:28:79:
         cd:78:ff:58:11:ab:6f:0a:51:ce:7a:df:f9:ac:d6:d5:6c:b4:
         15:ba:23:fa:97:6d:e0:8a:69:74:7b:f7:33:2d:e8:aa:d5:f0:
         fa:be:6e:91:3b:02:64:dd:4b:47:b8:f5:8a:24:85:b8:d9:10:
         ea:48:fb:b6:24:97:69:78:70:87:87:ef:70:d2:de:eb:0e:3a:
         3b:d4:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:37:44 2026 by rpki-client