Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File:                     GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier:          zmuS1idkz8K4DT+XvFMTqvJKu8jRzmWLYOqWMrYUgRg=
Subject key identifier:   E0:97:B2:C6:86:96:D6:A1:64:1F:44:C5:AE:85:77:AA:B8:19:C7:61
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer:       /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial:       01A10392908B53BDF60C188A687DE13793D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number:          1A8A
Signing time:             Sat 03 Oct 2026 21:01:39 +0000
Manifest this update:     Sat 03 Oct 2026 21:01:39 +0000
Manifest next update:     Sun 04 Oct 2026 21:01:39 +0000
Files and hashes:         1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: 4SMlVpijw9398o39qXI+23WMM3UVGNSd5Unm4Lqt30A=)
                          2: cKcEH95-xZkMRq9n8qxJQ8taC0I.roa (hash: 5CGu3gKojPJu4bccEdLgCE4zbwffs6jrhAuLccKD0VM=)
                          3: qOGZnmJn9twBLNZ-YPGtBuaarUA.roa (hash: 8dGXa2ecQGk4C5r7XMrelqu+XdDeVoRN8xB6oD32Evs=)
                          4: r7k-qYwu_gVhVP_qzP1I3k06xN8.roa (hash: Qmj2gAagugrdnVz/mHy0g80G5C8fPaZdzMVSJwy2cLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:92:90:8b:53:bd:f6:0c:18:8a:68:7d:e1:37:93:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
        Validity
            Not Before: Oct  3 21:01:39 2026 GMT
            Not After : Oct  4 21:01:39 2026 GMT
        Subject: CN=e097b2c68696d6a1641f44c5ae8577aab819c761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:20:bf:73:ce:05:35:4d:7c:b7:08:77:07:
                    1e:99:20:0d:a7:9f:50:83:3f:6b:90:9d:cf:6e:25:
                    30:5b:c0:eb:33:fd:de:81:14:3f:b7:3d:97:c6:b1:
                    00:7c:4e:6a:6d:92:20:56:45:ee:ea:b5:d7:16:32:
                    92:8c:df:63:70:d9:aa:0c:37:d7:ab:79:44:8d:ec:
                    d2:84:73:bc:42:e2:f1:e7:ed:90:0a:af:1c:53:11:
                    54:54:f9:45:9e:9a:1c:ee:bf:c5:32:0d:b7:a1:30:
                    1b:85:09:0a:ae:57:fc:0c:4b:c2:43:c5:79:8e:81:
                    1a:5a:ae:93:2f:f6:9f:ef:94:73:72:bb:ac:af:4e:
                    13:47:36:34:7f:3e:e1:1b:1f:50:ee:ff:51:52:14:
                    0d:5e:17:4b:3c:89:25:d1:e6:4e:e2:f7:01:e3:c5:
                    28:d7:79:3f:57:7e:f6:15:fa:df:1b:d5:f0:be:5c:
                    ca:57:59:fd:31:ff:fb:08:8f:91:c2:78:d9:2e:e9:
                    9b:54:22:1e:2b:2f:7a:dc:ee:f1:1f:ee:32:32:9a:
                    d0:12:6d:bc:e6:f4:11:b8:46:f3:66:07:10:8f:ec:
                    4a:70:ae:bb:8d:15:75:76:03:da:3d:01:8e:dc:71:
                    e4:69:70:f3:9c:8d:7a:cd:1d:3b:80:e1:51:aa:8a:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:B2:C6:86:96:D6:A1:64:1F:44:C5:AE:85:77:AA:B8:19:C7:61
            X509v3 Authority Key Identifier:
                keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fe:00:06:87:b0:56:25:f8:ad:28:4c:a3:12:58:9b:67:dd:
         81:16:47:16:7f:7a:c9:19:4c:38:c3:5a:12:fa:56:9b:e3:84:
         38:3a:e4:bf:21:37:3c:f2:a8:73:28:54:c2:59:79:5f:83:48:
         1e:e1:69:cf:d1:64:e4:c7:b2:c5:21:df:c3:56:f2:2c:04:28:
         47:86:5a:35:ba:98:6b:ad:34:23:8f:b7:e1:e9:13:25:69:19:
         ed:f8:1e:57:bf:45:8f:92:f0:b1:9b:83:08:5a:dd:ce:60:65:
         e9:b0:00:95:ca:d4:23:d0:43:0c:03:da:47:dc:3c:87:bb:33:
         0d:fb:cf:2b:51:5c:78:f5:92:dc:f0:99:6d:44:c5:77:8f:54:
         17:21:a7:8c:2e:08:2a:72:12:17:96:04:22:8f:c1:01:d4:c2:
         66:52:20:14:a5:ea:2d:6d:b9:09:fe:31:32:bc:8a:54:be:2f:
         49:62:31:ba:56:21:19:19:70:62:7c:53:9a:0c:a8:20:1e:21:
         20:4d:ae:6f:cd:95:63:b8:a9:d8:68:e0:ae:fe:be:00:64:60:
         57:68:63:f4:a2:af:ee:5f:a1:70:9c:90:4c:c2:20:9d:72:21:
         8e:b4:3e:25:1a:9a:e5:d2:6b:9e:7f:16:0e:16:8d:91:82:f5:
         36:fa:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:39:09 2026 by rpki-client