Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
File:                     gkLN6DVdU56YUsK1q4siTqmBWms.mft (raw, json)
Hash identifier:          CvAddWPEjInyT2Rr22u9MZ8qEQfWRKsVuUycFMD96Uk=
Subject key identifier:   F9:AD:CA:E8:2A:12:D0:A6:73:B6:2A:E8:2B:A8:0D:7F:90:AC:75:91
Authority key identifier: 82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
Certificate issuer:       /CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Certificate serial:       01A1DFB9E086CE3ABC21F69BCD97546DF7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
Manifest number:          92
Signing time:             Sun 15 Nov 2026 15:01:03 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:03 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:03 +0000
Files and hashes:         1: VG1H7KfM4gbbgBNVo0JXMLT5F84.roa (hash: WloXTObsOdhrASI5B+AAtL3e64BFo/Ki1+PoI99EzsA=)
                          2: gkLN6DVdU56YUsK1q4siTqmBWms.crl (hash: J64YBKC28oqGB3zAV5gXPxTg2BGYMwNp4J8ar/BK2eU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:b9:e0:86:ce:3a:bc:21:f6:9b:cd:97:54:6d:f7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
        Validity
            Not Before: Nov 15 15:01:03 2026 GMT
            Not After : Nov 16 15:01:03 2026 GMT
        Subject: CN=f9adcae82a12d0a673b62ae82ba80d7f90ac7591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:31:d3:34:4c:7b:59:85:6f:1e:14:16:ae:
                    60:9a:8b:c4:dc:f4:fe:18:67:b8:32:92:8b:1d:94:
                    39:ad:66:bb:0e:0b:60:d2:7c:85:ec:24:eb:83:43:
                    ec:85:61:29:4a:2f:cd:2f:61:d1:de:a1:35:14:e7:
                    b3:9b:44:13:de:26:72:b1:e4:c5:01:25:99:b9:af:
                    26:85:05:fe:e1:91:47:25:f2:f1:fd:07:05:8d:7e:
                    48:29:dd:79:fd:f1:66:61:6f:3e:59:3e:e3:a9:ed:
                    64:35:73:cd:80:bc:b1:19:5b:3e:e5:1a:45:27:5b:
                    15:ad:d0:1b:04:6c:af:95:02:ea:99:7c:74:71:6f:
                    0d:24:06:e7:db:c8:fd:79:88:8a:b9:a9:28:e3:5d:
                    b1:39:7e:7c:7f:2d:a5:26:44:f5:7c:9f:0e:94:48:
                    38:78:e0:07:f9:b8:3d:cc:16:e0:02:b8:b3:60:e4:
                    aa:22:36:de:0a:98:1a:be:21:ef:64:6d:de:f1:fb:
                    cc:b5:11:ed:9a:5b:5b:2f:42:63:47:87:ee:bd:5a:
                    fe:90:85:ee:06:db:e4:cb:9a:2a:fb:92:ef:79:08:
                    b7:4f:55:c2:59:da:c1:a6:f7:a9:40:84:b6:ba:85:
                    84:7d:de:b5:45:31:f6:62:38:2c:1a:a8:62:dd:53:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:CA:E8:2A:12:D0:A6:73:B6:2A:E8:2B:A8:0D:7F:90:AC:75:91
            X509v3 Authority Key Identifier:
                keyid:82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:17:d7:c5:02:fb:0f:d4:21:5f:f6:e7:47:e7:db:7a:86:
         85:6f:b4:83:31:d0:56:dc:b2:66:a3:8e:bd:e1:c3:8a:67:89:
         e2:35:97:13:19:12:65:f8:2b:f1:70:2a:75:49:d2:fb:02:52:
         5f:d2:90:ac:21:b3:6f:4b:45:d6:56:86:e2:0a:52:b0:01:4d:
         b6:c5:2b:19:7f:01:70:fa:37:53:cc:93:fa:af:82:cc:ad:9f:
         7c:f4:84:6a:22:35:2e:1d:66:a7:d9:a3:c1:07:74:ff:1a:bd:
         f6:be:05:bc:a5:fc:07:c3:00:ec:32:0d:25:08:51:ae:fb:86:
         5b:4e:43:ae:a6:d1:e9:e2:85:f5:24:90:d5:f6:43:51:f4:93:
         83:ef:ac:bc:86:9c:79:d3:9d:46:c0:24:53:f3:24:c1:3d:84:
         96:ef:5e:38:29:df:ba:ec:2c:9c:5e:1f:5d:27:e4:c6:d6:fa:
         88:2c:33:25:7f:1d:c0:1a:89:20:33:46:d1:c2:dd:e9:6a:5f:
         fc:8b:80:9d:07:80:1e:a2:86:6e:0d:a8:21:e5:3a:b0:f8:b7:
         41:cc:58:e6:02:4b:4d:53:6e:c7:53:82:3f:12:3d:ea:87:72:
         ec:27:a9:78:2d:61:3f:0a:a3:01:cd:43:f4:ed:92:ef:ca:e2:
         e1:af:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:33:22 2026 by rpki-client