Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
File:                     gnff8FJ6VIBMlJwPjutSh2LhECY.mft (raw, json)
Hash identifier:          tgyiUGgNIsNLBJ4+j1R6aB6oGXgN1SKDBt1plk/gmGQ=
Subject key identifier:   22:BD:9A:D1:73:B2:03:C1:A3:2A:43:BC:F2:25:2A:B9:E1:1E:9E:8A
Authority key identifier: 82:77:DF:F0:52:7A:54:80:4C:94:9C:0F:8E:EB:52:87:62:E1:10:26
Certificate issuer:       /CN=8277dff0527a54804c949c0f8eeb528762e11026
Certificate serial:       01A0CE2369C544DBAD3A20197E6AD1614823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:00:22 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:22 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:22 +0000
Files and hashes:         1: gnff8FJ6VIBMlJwPjutSh2LhECY.crl (hash: u+zy8sxGSJmOMsZIkUTKS7aYDgVUsakl+KyeACWAleM=)
                          2: grPgsj_U_QGRTfB7WZEK8rXUTd0.roa (hash: UpluOkz2vEurspkOMoiPumwTMZrbSQWruSNQMoyw1xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:69:c5:44:db:ad:3a:20:19:7e:6a:d1:61:48:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8277dff0527a54804c949c0f8eeb528762e11026
        Validity
            Not Before: Sep 23 12:00:22 2026 GMT
            Not After : Sep 24 12:00:22 2026 GMT
        Subject: CN=22bd9ad173b203c1a32a43bcf2252ab9e11e9e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:8a:ab:10:38:f8:db:b2:88:69:57:3d:6e:
                    51:36:e8:8e:b7:2e:c7:df:53:45:9e:e1:fe:db:2d:
                    d1:b2:ad:09:86:f7:12:0b:94:4a:8f:bb:2f:72:49:
                    95:e9:4d:41:cf:8f:6f:e6:1c:e2:61:eb:17:b6:4c:
                    04:41:f9:a1:ea:97:df:79:94:a7:fe:f0:2b:b0:5a:
                    b2:29:fb:fb:03:77:5a:04:eb:ea:c2:b1:e7:46:01:
                    62:29:66:a5:f6:55:39:a3:7b:2d:21:11:45:77:00:
                    bc:1e:1f:0e:e9:d9:9a:47:90:e4:18:bd:db:b2:27:
                    ee:6a:35:45:eb:0d:d7:21:7e:fc:ad:0c:e1:82:51:
                    4a:3f:c7:d8:db:95:12:44:18:ed:94:e5:14:3e:b8:
                    96:63:68:2b:b8:23:2f:1a:de:b9:22:e0:04:aa:5b:
                    7f:38:4b:8e:37:01:5c:2c:7b:e3:62:75:27:87:43:
                    a4:7f:f0:7d:f5:9d:c9:83:be:73:74:a2:2d:6a:c0:
                    e9:cd:ad:48:23:36:f3:c2:76:4d:0b:1a:1c:e8:ae:
                    0e:dd:c9:f7:25:a0:08:5c:34:3a:35:07:12:5f:72:
                    37:ae:1f:a9:c6:ee:bd:53:0a:ec:3e:33:4b:c3:90:
                    0a:78:96:c5:ea:66:35:3c:48:ea:7e:b4:be:8b:56:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BD:9A:D1:73:B2:03:C1:A3:2A:43:BC:F2:25:2A:B9:E1:1E:9E:8A
            X509v3 Authority Key Identifier:
                keyid:82:77:DF:F0:52:7A:54:80:4C:94:9C:0F:8E:EB:52:87:62:E1:10:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:98:52:3a:45:9c:8c:fe:f4:6b:55:ee:4e:f2:42:f5:57:
         41:d8:0c:c0:12:f2:32:73:a6:a9:6b:22:8d:7e:86:92:ef:ff:
         3c:d5:2d:92:10:9a:30:96:63:f1:6f:8f:47:2b:b8:a0:59:a1:
         f9:6f:89:6c:e9:1c:52:5b:14:63:9a:cc:fe:ae:34:37:7f:16:
         80:f8:d7:13:f2:ee:43:e6:46:b6:b8:35:85:bb:e2:8c:6f:68:
         4f:41:9a:e3:ca:70:ee:74:2f:6c:eb:34:5a:4a:58:86:9a:89:
         c4:f9:5e:97:5f:ec:8f:43:09:fb:e7:bf:c7:35:34:44:3d:18:
         89:1a:9b:c3:c6:4c:04:c9:a1:00:f6:d7:0c:e1:a9:74:e0:ee:
         d1:c6:39:16:6f:bc:0b:ba:e0:ab:9a:a0:0c:e2:8c:13:5b:6c:
         9e:41:14:8c:08:a7:95:24:a6:65:42:2f:cf:6e:5a:c2:0a:8b:
         e4:ac:dc:15:a8:66:8d:93:0b:0c:b8:18:4a:78:54:04:08:fe:
         ef:3b:64:d9:45:ea:a4:6b:20:f1:ca:8d:f6:9f:8d:0d:de:73:
         e8:74:02:a5:72:59:54:f0:60:4c:de:3f:f0:1b:f9:f6:2e:22:
         dc:b4:f0:79:16:2d:90:4a:a7:f9:05:63:ce:96:5b:a6:e7:c2:
         40:ef:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:11:31 2026 by rpki-client