Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
File:                     gGcKCuUZoyz9hbowc3yOPQfEvM4.mft (raw, json)
Hash identifier:          S6uGTrG4hUP5CfpV15KPaW74GQXHJ3JfYZE5eEFZlIo=
Subject key identifier:   0A:CE:5B:EE:6A:68:B3:75:67:31:97:94:56:8C:60:6C:EB:30:18:A7
Authority key identifier: 80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
Certificate issuer:       /CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Certificate serial:       01A0D012D5CEB986458019A06510D9BEA4BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:01:30 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:30 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:30 +0000
Files and hashes:         1: 4bGr-yXBWayGcjl1qM4F7v2Bc2M.roa (hash: eCKqYMCveD4+cT5IE20UBn+5fdkZH3p4iIVGa8fR06o=)
                          2: 7KMei89cF5bMU_4TaRPp6g42s1E.roa (hash: NRXPLOV3OLAB5gs1dIMy5Wr/b2KoynjrFtKRrh8XYUo=)
                          3: 8oTK3TC0D2Jp0RoOQfL5lALHOb0.roa (hash: bDWj0S7zTHlaNQd9wpyLKfimVq/tWXy8hbrpF7M3lP8=)
                          4: GYKQ0334-OMW8rJhiyMdFoDF1bA.asa (hash: YAXSLUp33H5lCmvEZdnmSsgUIL8C1t9c3ekAGHDBNDg=)
                          5: MkOrn3cx2BQqm02t_vueOKsFKPk.asa (hash: 8g1RjrvQ79n3k/tOZkjWDSSi6fzCwbwd+67DGegC7ZY=)
                          6: gGcKCuUZoyz9hbowc3yOPQfEvM4.crl (hash: ktCWxZfFH2UMOKafRmDucFnq1iAP7vAs48QdfO5KJuw=)
                          7: o-m7cT62SUN3tXUWb6144IEDJko.roa (hash: GUeFgCZSQLXdFp7pq8g4v2HhOf5ueahzNXG4APOlM3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:d5:ce:b9:86:45:80:19:a0:65:10:d9:be:a4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
        Validity
            Not Before: Sep 23 21:01:30 2026 GMT
            Not After : Sep 24 21:01:30 2026 GMT
        Subject: CN=0ace5bee6a68b37567319794568c606ceb3018a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4d:6f:c5:ff:3a:8d:0f:8a:b6:7e:97:ac:b2:
                    bb:6f:92:7b:f8:98:a3:56:31:d0:34:cb:0e:2c:65:
                    2f:7d:4d:c5:0e:ce:ef:68:20:3d:fc:69:a8:bb:dc:
                    c6:62:39:bd:b2:87:ba:30:18:37:6c:fa:15:c1:dc:
                    d9:91:50:8c:63:1e:02:d9:ea:31:20:dd:86:0e:a6:
                    34:36:96:ff:39:5b:9b:a4:f0:84:68:a4:35:18:86:
                    01:ec:10:03:d0:f4:24:0a:02:6b:24:1c:c1:83:97:
                    7f:6f:ca:3c:60:47:e4:5f:f9:5d:c0:56:f4:64:b3:
                    76:a1:01:21:da:78:21:c3:35:ba:b7:19:1a:67:0e:
                    8d:e5:eb:c4:84:a7:45:8c:28:d1:ea:6b:71:f5:52:
                    fd:c3:c1:57:59:b8:64:7d:0e:df:43:13:ad:95:fb:
                    9d:4f:6d:ba:71:dd:7f:c2:80:77:6e:ce:c7:85:3b:
                    c6:ca:52:a4:03:c7:ed:f7:b7:d2:1f:03:94:f0:23:
                    7a:bd:29:c9:8c:8a:99:5a:81:fd:2f:55:e3:7f:15:
                    69:24:82:4c:d1:e2:ea:0a:8e:b5:a9:d1:13:ec:ab:
                    71:bd:9a:cf:5a:3c:f3:3d:d7:72:1f:d4:bf:35:2f:
                    56:ea:92:f1:fc:f5:3d:de:02:b8:e3:4e:a6:f5:8a:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CE:5B:EE:6A:68:B3:75:67:31:97:94:56:8C:60:6C:EB:30:18:A7
            X509v3 Authority Key Identifier:
                keyid:80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:1f:86:4c:14:35:50:7c:21:e6:13:0d:35:46:1e:79:18:
         7c:6c:30:93:ab:5a:c3:c1:d6:d2:ef:f9:71:c0:73:09:cc:68:
         9d:08:c2:2e:8f:6c:9e:47:f7:2e:81:63:29:e3:0f:76:a4:5e:
         19:24:2b:0a:cc:b7:e8:22:ae:9b:1f:48:90:ea:3b:ad:23:99:
         91:4c:dc:81:9d:26:91:7e:8a:cc:fc:37:52:a7:f4:ed:ce:08:
         89:03:8e:3b:99:df:d5:90:02:94:13:70:4c:bd:44:e8:dc:68:
         a3:e7:a6:7a:0b:3c:aa:a3:fd:ed:dd:90:00:f6:12:41:0a:20:
         13:83:93:1b:90:9d:13:fa:4b:9c:0f:c2:14:3b:69:f7:74:65:
         77:c4:96:d6:1c:b1:f0:3a:88:fb:43:2e:4d:94:96:3d:50:cb:
         81:40:b2:c1:40:05:63:88:47:45:24:28:8c:ce:96:db:eb:1c:
         28:83:4e:80:ff:93:a3:c6:fc:fd:af:83:17:11:cb:62:0a:44:
         44:62:8b:92:ab:cd:f3:bb:40:ab:3d:c8:cd:e7:28:09:a0:40:
         e1:6c:03:c8:94:52:4d:59:87:07:53:02:a2:0b:af:e0:b9:d7:
         ec:fb:2f:a0:de:f7:3e:af:62:33:5f:24:cc:29:73:e9:43:c3:
         8d:26:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:45 2026 by rpki-client