Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
File:                     GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft (raw, json)
Hash identifier:          ZOO9qx+kGrWcpR9Jt8Ip+EYvVEEijDIhguZvoqdPoVk=
Subject key identifier:   92:9D:89:FC:ED:16:F9:53:7E:51:BB:75:1D:B9:FA:66:C2:81:71:BF
Authority key identifier: 1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
Certificate issuer:       /CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Certificate serial:       01A1328FD2E9D6F19D789E3278394A2AB7C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
Manifest number:          0118
Signing time:             Tue 13 Oct 2026 00:00:48 +0000
Manifest this update:     Tue 13 Oct 2026 00:00:48 +0000
Manifest next update:     Wed 14 Oct 2026 00:00:48 +0000
Files and hashes:         1: 768i5q9Q1IPj0343NKNk7lOkYAg.roa (hash: s9OQdsGX+sfyQxXWbx9LyVNNyjVCI8W1Nl9Y367w2nw=)
                          2: GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl (hash: fLh06OcOWnxCUx2/p9QchxDhne0ixCbBQrkZhwmaXbk=)
                          3: RsOEMIH24_zjcm5Tb9OM-o4S8HM.roa (hash: 6XnQ+iDSw/RX0OUv6MFChlZfoWbfa+RL33606GyYig4=)
                          4: TC1WJhIqS5YyYCF7c6UbQzyCxIA.roa (hash: IBegOftzNU2I7gMVa4Vw1YN978e8IznFPxboB3IfNzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:8f:d2:e9:d6:f1:9d:78:9e:32:78:39:4a:2a:b7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
        Validity
            Not Before: Oct 13 00:00:48 2026 GMT
            Not After : Oct 14 00:00:48 2026 GMT
        Subject: CN=929d89fced16f9537e51bb751db9fa66c28171bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:a2:a8:c2:d5:a9:34:c6:49:e0:2a:34:f5:
                    ef:50:7e:f1:22:69:29:e3:a4:e3:4b:96:39:1a:99:
                    e0:49:04:37:36:6d:d9:27:ef:66:d0:d0:50:e2:e0:
                    60:65:4e:d4:d4:ae:83:6c:f2:de:15:a6:32:ad:6b:
                    b5:81:66:ea:9f:ca:a2:87:cb:5c:5f:0e:fc:e3:64:
                    21:59:99:17:d5:4b:16:da:24:28:ee:e6:c3:3d:89:
                    42:58:73:ef:55:13:66:65:cb:fc:47:2d:0a:98:a3:
                    52:24:4b:1b:69:57:5a:7b:fc:4c:89:8c:1c:0c:d1:
                    94:f4:73:4d:34:03:e5:5f:89:38:40:72:0f:54:da:
                    83:87:e8:7e:46:d1:4b:54:d0:d9:ce:c6:12:ad:24:
                    4d:8b:21:51:f3:14:76:c3:20:42:6a:e4:a0:30:c3:
                    97:20:d9:c6:a9:7e:a5:1f:79:ef:c1:45:d5:93:3e:
                    98:af:f0:c0:2a:41:28:6b:29:77:3a:ed:7d:ef:f4:
                    51:6e:e3:52:4e:68:b6:2e:a0:d3:b1:ff:81:3e:41:
                    b8:33:f5:13:5e:d5:d7:41:9d:90:d0:58:44:1e:3a:
                    bf:dd:18:f9:c0:d6:83:03:5d:46:03:e0:d9:c1:e4:
                    20:68:83:18:fe:60:e9:97:b7:32:58:17:50:3a:2e:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:89:FC:ED:16:F9:53:7E:51:BB:75:1D:B9:FA:66:C2:81:71:BF
            X509v3 Authority Key Identifier:
                keyid:1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:da:3e:22:2a:4b:80:f0:66:c7:b7:3a:4b:0e:da:0f:3f:b7:
         b9:40:23:70:9b:ef:85:65:5d:fa:29:f0:75:73:36:c9:31:79:
         ff:a2:fe:40:9a:78:97:eb:58:b3:68:60:19:d4:0b:9c:0f:10:
         80:82:13:39:93:84:44:d7:76:f9:d1:77:f6:5c:44:74:b2:a7:
         cc:1f:39:52:02:43:a9:de:9d:64:7b:a9:82:8c:e4:20:81:25:
         c9:4c:7c:50:34:76:a2:e0:42:88:83:f2:db:af:3d:76:63:48:
         70:23:e1:9e:dd:c0:e3:2d:66:bb:90:59:9f:38:ae:32:d1:ec:
         a8:24:2b:2d:cc:67:4d:2e:ba:7b:fb:f5:8e:3c:70:07:47:8d:
         00:f1:76:3e:54:e8:40:3d:3b:d4:d7:91:a0:e0:3e:3c:1f:63:
         6e:08:b6:15:b8:71:84:f9:92:1b:fb:71:e4:f5:a6:7e:ed:55:
         4c:73:5f:2b:1d:c6:32:c2:f9:01:bf:99:a2:39:0b:3b:a7:86:
         2c:d8:ed:aa:eb:89:47:be:b2:4b:8a:52:70:61:91:9f:3d:d4:
         d5:53:9b:92:7d:14:68:3d:b7:0f:0c:ac:b6:7b:9e:a0:4c:7a:
         33:07:a0:76:b9:fa:5b:b3:73:f6:ae:52:eb:b5:e6:41:a4:88:
         af:06:78:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:32:38 2026 by rpki-client