Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File:                     Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier:          xfh/Oy7TYvU5og7lNTKqgCDR4BHHNGhrv+NHbN1kCms=
Subject key identifier:   41:9B:9A:1A:B7:C7:52:83:2D:9A:12:87:E4:F0:73:57:08:C1:54:82
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer:       /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial:       01A0CA0FB84B0513844E1E937390A94ADDA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number:          19FA
Signing time:             Tue 22 Sep 2026 17:00:22 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:22 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:22 +0000
Files and hashes:         1: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: fONI1nZhwKbFy1iE+bYUXtq5dvpply6mSyvMpLYf2Ns=)
                          2: ZohyHfqFv67z4908u3_QeIT8zVw.roa (hash: F/BjQl+7N2tQfUywKhEzc2DzriEJ3gerXgEGzUTdIDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:b8:4b:05:13:84:4e:1e:93:73:90:a9:4a:dd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
        Validity
            Not Before: Sep 22 17:00:22 2026 GMT
            Not After : Sep 23 17:00:22 2026 GMT
        Subject: CN=419b9a1ab7c752832d9a1287e4f0735708c15482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:65:26:be:44:2e:af:8c:9f:b4:e5:74:d9:
                    7f:77:b8:e4:c9:6b:d5:d4:70:82:b6:2c:f9:29:54:
                    2f:cd:ff:ea:7e:de:ab:ae:23:a3:32:fd:33:14:69:
                    77:5d:94:a4:30:74:ce:e9:e3:20:b9:8b:17:92:e4:
                    dc:f3:41:05:90:d0:22:79:2e:65:c9:55:4a:e5:31:
                    ba:cd:e0:72:d8:b7:8a:4f:46:5c:99:78:ab:b4:86:
                    3b:b9:6a:55:c9:9d:87:e4:df:79:07:a8:a6:3a:6f:
                    73:72:06:ba:a1:4b:70:fa:e7:aa:5d:b4:af:5f:d0:
                    0c:ca:b2:8d:0f:f9:54:2f:19:ed:2f:e1:77:47:b5:
                    de:a3:06:b4:6f:2f:ed:63:17:a7:3f:c8:04:83:84:
                    c1:e3:9b:14:0e:0a:02:4b:ed:01:12:ab:51:08:69:
                    da:1a:6c:32:da:76:71:80:24:84:ee:6d:e7:55:a6:
                    3b:cf:d2:81:13:d1:2f:ce:72:c6:11:0f:57:ab:46:
                    1c:a7:23:e6:ca:3e:08:8b:5c:51:45:a5:33:60:d6:
                    fe:30:cd:eb:60:e4:f3:a5:d4:29:85:f6:30:eb:85:
                    56:29:e8:ec:7e:e7:8e:3e:0a:e1:71:a6:f3:f3:15:
                    11:44:90:27:08:d4:6b:10:2f:28:d8:7d:2a:c2:7c:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9B:9A:1A:B7:C7:52:83:2D:9A:12:87:E4:F0:73:57:08:C1:54:82
            X509v3 Authority Key Identifier:
                keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:84:ea:cf:86:c7:0b:7f:04:2a:f8:be:93:ea:a7:71:b3:b5:
         30:b2:ae:b4:f8:cc:6d:21:19:ee:6f:55:23:10:97:63:15:b9:
         10:99:7c:b9:dc:0d:f2:3d:58:8e:fd:59:1e:d5:00:b3:62:18:
         24:c9:38:28:f5:1b:31:13:9b:af:ef:2e:d8:32:7e:ca:20:33:
         91:dc:df:d5:a0:94:31:37:4e:ee:2b:6a:76:62:ad:3a:8b:85:
         cb:f0:01:dc:22:d1:10:ea:b4:f2:bf:b0:3c:b5:f4:11:5a:32:
         ff:b0:ec:00:69:f3:b4:0f:64:18:92:0f:fd:d4:7f:4d:5b:c5:
         43:2e:04:e1:d9:25:5c:be:82:46:e5:08:20:fa:ec:89:f2:bb:
         21:ae:2b:49:d8:db:6d:b0:29:aa:ed:a6:33:d1:ba:15:3b:b1:
         8b:c8:cc:75:2b:bb:4d:4b:a8:f7:d5:e6:27:9f:51:e0:76:c5:
         dd:45:c3:de:18:be:8c:70:71:0c:37:15:00:93:89:87:6e:73:
         75:bc:78:db:61:e7:1c:ce:ce:28:a9:74:6e:7b:f4:b3:9a:6b:
         c3:fb:65:ba:43:84:80:98:be:41:e6:ac:15:5f:d1:2b:fc:7f:
         6e:63:16:06:88:88:7e:be:e2:04:95:ae:5f:0f:4c:55:b6:77:
         95:50:f5:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD7hLBROETh6Tc5CpSt2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOWI3MGVmOTk3NjBhMDY1OWRlYWVmYTY2MDM0NWEwZTYx
MTU0MjMwHhcNMjYwOTIyMTcwMDIyWhcNMjYwOTIzMTcwMDIyWjAzMTEwLwYDVQQD
Eyg0MTliOWExYWI3Yzc1MjgzMmQ5YTEyODdlNGYwNzM1NzA4YzE1NDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1JlJr5ELq+Mn7TldNl/d7jkyWvV
1HCCtiz5KVQvzf/qft6rriOjMv0zFGl3XZSkMHTO6eMguYsXkuTc80EFkNAieS5l
yVVK5TG6zeBy2LeKT0ZcmXirtIY7uWpVyZ2H5N95B6imOm9zcga6oUtw+ueqXbSv
X9AMyrKND/lULxntL+F3R7Xeowa0by/tYxenP8gEg4TB45sUDgoCS+0BEqtRCGna
Gmwy2nZxgCSE7m3nVaY7z9KBE9EvznLGEQ9Xq0YcpyPmyj4Ii1xRRaUzYNb+MM3r
YOTzpdQphfYw64VWKejsfueOPgrhcabz8xURRJAnCNRrEC8o2H0qwnzi/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGbmhq3x1KDLZoSh+Twc1cIwVSCMB8GA1UdIwQY
MBaAFBqbcO+ZdgoGWd6u+mYDRaDmEVQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jODlhNDYtNzkxMS00ZmRiLWE5M2It
Mjk5MjJiMmQyOTFiLzEvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jODlhNDYtNzkxMS00ZmRiLWE5M2ItMjk5MjJiMmQyOTFi
LzEvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYTqz4bH
C38EKvi+k+qncbO1MLKutPjMbSEZ7m9VIxCXYxW5EJl8udwN8j1Yjv1ZHtUAs2IY
JMk4KPUbMRObr+8u2DJ+yiAzkdzf1aCUMTdO7itqdmKtOouFy/AB3CLREOq08r+w
PLX0EVoy/7DsAGnztA9kGJIP/dR/TVvFQy4E4dklXL6CRuUIIPrsifK7Ia4rSdjb
bbApqu2mM9G6FTuxi8jMdSu7TUuo99XmJ59R4HbF3UXD3hi+jHBxDDcVAJOJh25z
dbx422HnHM7OKKl0bnv0s5prw/tlukOEgJi+QeasFV/RK/x/bmMWBoiIfr7iBJWu
Xw9MVbZ3lVD1cA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:39:53 2026 by rpki-client