Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File:                     GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier:          qf/f9HQj8T6OA3p1pTvFFaVGXYRsyZvBxNf3/C59vBc=
Subject key identifier:   09:7B:2F:33:65:A5:AA:BE:8B:5F:6A:5A:1A:CC:6A:AA:B6:3D:58:F3
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer:       /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial:       01A0E853C8900A87F9690392A466E1495244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number:          1A0A
Signing time:             Mon 28 Sep 2026 14:03:19 +0000
Manifest this update:     Mon 28 Sep 2026 14:03:19 +0000
Manifest next update:     Tue 29 Sep 2026 14:03:19 +0000
Files and hashes:         1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: Tas124PpCm4gLldW/Mllj6B4MgDK0B3rMRhpVfWqvSU=)
                          2: MyfIZj1W2obkPAZygzM9dP9m28U.roa (hash: aXvgs0DUulnqjwtB1M6qdRCY8cRgdrm+A6xw7bBtVwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:53:c8:90:0a:87:f9:69:03:92:a4:66:e1:49:52:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
        Validity
            Not Before: Sep 28 14:03:19 2026 GMT
            Not After : Sep 29 14:03:19 2026 GMT
        Subject: CN=097b2f3365a5aabe8b5f6a5a1acc6aaab63d58f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:d9:c3:2d:ce:75:eb:7f:e1:b0:cb:63:15:
                    f1:6b:a7:cf:12:4a:cc:a6:fd:1d:95:aa:f2:c2:a4:
                    1c:40:e8:09:43:2d:5b:79:5e:f0:a1:cc:94:a2:a2:
                    1e:f2:c6:11:e8:38:3d:60:0c:da:d2:a6:9c:16:f7:
                    2b:05:8d:d1:f1:e7:20:f3:f4:18:fb:9e:8d:f4:4f:
                    4a:44:82:d6:be:8e:b3:bb:c8:32:77:07:6f:ef:87:
                    75:1f:7d:08:46:4b:40:51:a6:f6:29:89:37:7d:43:
                    de:2f:e2:55:ab:b2:51:6a:9d:2a:f7:9a:47:a5:ee:
                    ff:f6:51:02:df:a8:27:cd:7f:23:62:1f:c8:fc:a7:
                    ec:9f:e7:50:15:17:ff:3f:a4:14:0e:50:77:18:3c:
                    78:54:00:a4:b3:a8:ac:ba:06:04:7d:75:6f:a1:c0:
                    a1:d0:3b:9f:86:e4:62:14:a1:48:ed:9a:20:55:7a:
                    5f:92:47:59:29:91:69:9a:14:7e:7b:4d:ec:33:57:
                    6e:89:7b:1e:7d:0f:8a:bb:2f:40:b6:05:1f:7e:79:
                    f1:c5:d3:c0:f9:ae:dc:3e:8d:f5:8a:fd:6e:2d:74:
                    37:72:51:62:a0:e4:40:09:64:33:c9:0e:c0:ca:2c:
                    87:ed:f1:6b:37:21:3d:5a:6f:92:a7:d7:c9:3e:a0:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7B:2F:33:65:A5:AA:BE:8B:5F:6A:5A:1A:CC:6A:AA:B6:3D:58:F3
            X509v3 Authority Key Identifier:
                keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:6f:eb:c0:d5:c7:1f:1d:b2:0d:c0:5b:e6:d2:5f:55:09:
         50:ee:3f:96:8f:71:65:bb:72:b7:83:0b:aa:70:6a:c5:09:67:
         b1:0d:da:d4:be:e2:b8:77:78:49:7e:1c:ed:a9:08:fd:4d:df:
         45:8e:c0:61:8c:3a:17:e9:90:3f:5f:61:da:d6:8d:ed:ab:27:
         f2:32:0a:26:18:30:49:52:02:79:8f:70:65:35:9f:c5:15:3a:
         78:54:62:cc:45:f6:b0:d9:8d:ff:b9:ab:a9:f8:b4:2d:34:c7:
         a0:9f:ea:a9:3b:81:80:4e:46:fd:38:95:92:a2:fc:8a:b1:f5:
         ff:6b:9e:4c:0d:32:04:45:cd:b9:7e:52:4b:2b:70:1f:9e:7a:
         fa:67:c7:ad:8a:43:d4:b8:c4:68:4a:a6:74:89:ff:e5:d5:2e:
         9f:3e:08:57:0f:a5:0a:9c:8f:6e:65:4b:14:97:04:27:0a:c1:
         59:91:59:5b:92:ac:d0:55:31:90:87:48:91:af:64:39:ff:7e:
         ec:ba:22:d7:4a:79:b0:a4:dd:67:5c:4c:cd:c6:d5:dd:71:5a:
         14:69:c6:02:20:0f:c2:89:46:d3:49:6b:12:d2:ba:8e:ad:ed:
         a7:b9:a6:48:4b:8a:81:83:38:68:8e:e8:cb:18:a8:0e:6e:40:
         be:2e:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:38:33 2026 by rpki-client