Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
File:                     GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft (raw, json)
Hash identifier:          3Wkr1yj+HE7htkMypwzsaB2eW3N311xrsnKGn9HcuyU=
Subject key identifier:   17:68:C5:28:EC:34:28:7B:AF:AE:2B:A4:BF:5F:0E:F0:3F:66:73:57
Authority key identifier: 1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
Certificate issuer:       /CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Certificate serial:       01A11D51FB62B0EAA22C4470EFBF5223D5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
Manifest number:          010D
Signing time:             Thu 08 Oct 2026 21:01:14 +0000
Manifest this update:     Thu 08 Oct 2026 21:01:14 +0000
Manifest next update:     Fri 09 Oct 2026 21:01:14 +0000
Files and hashes:         1: 768i5q9Q1IPj0343NKNk7lOkYAg.roa (hash: s9OQdsGX+sfyQxXWbx9LyVNNyjVCI8W1Nl9Y367w2nw=)
                          2: GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl (hash: aD7SSiAwR7LpQGyGKbDGcd8LILb1zQasQzZlt9giYUA=)
                          3: RsOEMIH24_zjcm5Tb9OM-o4S8HM.roa (hash: 6XnQ+iDSw/RX0OUv6MFChlZfoWbfa+RL33606GyYig4=)
                          4: TC1WJhIqS5YyYCF7c6UbQzyCxIA.roa (hash: IBegOftzNU2I7gMVa4Vw1YN978e8IznFPxboB3IfNzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:51:fb:62:b0:ea:a2:2c:44:70:ef:bf:52:23:d5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
        Validity
            Not Before: Oct  8 21:01:14 2026 GMT
            Not After : Oct  9 21:01:14 2026 GMT
        Subject: CN=1768c528ec34287bafae2ba4bf5f0ef03f667357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b4:72:fd:6e:3a:4d:22:df:00:91:6b:bc:04:
                    82:d3:bb:3e:e6:04:9f:ba:8e:4a:84:6a:05:de:e0:
                    02:8e:5c:b0:05:0f:03:fa:c1:5c:2a:1e:bb:76:80:
                    bd:c8:3d:75:9d:e1:af:0f:6f:11:99:ee:ab:d2:ec:
                    0d:21:18:66:f1:cf:79:be:da:51:8c:00:9b:4a:9e:
                    7d:da:7b:a5:a0:59:fa:51:42:12:db:3f:17:9c:4b:
                    5f:ee:c7:43:54:a6:a7:77:39:9f:2b:89:c4:30:a4:
                    96:c4:19:14:c3:07:58:7c:2d:ff:40:0e:ce:ed:c4:
                    56:ab:e5:32:17:c2:b3:5f:e7:0e:91:bb:54:86:07:
                    cc:6a:01:bd:92:a0:07:d3:f2:8c:0f:b4:f8:c9:58:
                    0c:ad:55:c2:d0:dc:f5:e8:ed:c2:5a:8f:a5:ec:4e:
                    a5:0c:56:0c:7c:d7:41:f0:5e:0f:23:e9:f0:6b:49:
                    7b:73:78:76:10:c7:6b:94:e8:50:9e:d8:1c:fd:a9:
                    1c:9f:0b:cb:0e:26:32:d4:dd:39:fd:45:7e:f1:9f:
                    cc:7a:29:0d:3c:0b:38:2b:79:8d:45:b7:b8:3f:1b:
                    cc:e7:61:71:02:12:11:a6:df:3e:7c:ff:0c:52:23:
                    6d:ab:6f:18:a5:d8:1b:73:39:93:03:72:8d:ac:07:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:68:C5:28:EC:34:28:7B:AF:AE:2B:A4:BF:5F:0E:F0:3F:66:73:57
            X509v3 Authority Key Identifier:
                keyid:1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:1c:02:5d:26:e0:33:f5:35:13:29:c2:92:14:c6:21:06:
         cc:4b:59:77:05:7b:de:5b:a7:f6:34:52:c4:25:6e:70:01:c0:
         55:4c:e8:db:b8:48:bc:ce:a6:52:7c:46:a2:d3:16:28:f0:be:
         de:ba:c4:f7:47:37:fc:64:34:36:ed:0e:eb:d6:f3:7f:31:9e:
         d4:a2:f3:c2:bf:cd:80:f1:74:b5:da:48:fa:1d:60:fa:e7:d1:
         45:00:c7:84:b7:11:50:ba:31:f1:1d:84:f7:23:04:b9:1e:1b:
         0d:d7:94:f3:d9:04:9f:57:72:c3:66:de:db:00:eb:ba:02:4f:
         69:36:e0:47:a3:9e:bb:a8:8b:cf:45:e1:30:7d:9b:c0:63:91:
         58:e8:15:10:38:b4:9d:e8:31:57:1a:20:0b:55:06:b4:df:07:
         aa:91:f6:f9:52:b3:f0:21:df:b3:27:7f:bc:89:64:86:52:3b:
         08:9e:2b:6d:3e:1f:79:41:20:68:4d:57:96:ec:95:ad:f8:9f:
         12:72:eb:f8:d1:4e:ee:b9:86:64:d7:3a:6b:e4:6a:0a:46:d9:
         8d:4e:b3:6f:6c:7f:c6:21:7d:a4:2d:ce:1d:5e:c2:43:57:18:
         ab:30:db:08:31:d7:d4:6e:40:25:8d:1c:91:70:b3:2d:c4:d0:
         15:1b:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:40:38 2026 by rpki-client