Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
File:                     sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft (raw, json)
Hash identifier:          LCA2mmWcHr77K13mQI7JBY8Ww2mP8VgU0y74xNBqywI=
Subject key identifier:   50:82:62:01:81:EA:A0:4B:55:6E:BD:F9:FD:78:4D:53:51:88:9D:EE
Authority key identifier: B0:62:99:1D:31:8B:0E:B6:03:AD:17:CB:3A:51:14:EE:D5:B7:7E:34
Certificate issuer:       /CN=b062991d318b0eb603ad17cb3a5114eed5b77e34
Certificate serial:       01A1133CCAD450F0377C756524D2CB0C3911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
Manifest number:          19
Signing time:             Tue 06 Oct 2026 22:01:53 +0000
Manifest this update:     Tue 06 Oct 2026 22:01:53 +0000
Manifest next update:     Wed 07 Oct 2026 22:01:53 +0000
Files and hashes:         1: q7L0IplR48XvIYXG1vo7q0nqStI.roa (hash: OtAKeVylVZxm/6LVx9Mo+nBXdTqqgUjXcDKzesZIhas=)
                          2: sGKZHTGLDrYDrRfLOlEU7tW3fjQ.crl (hash: S2LFfnIrYEfRsEPEwAZJ2hgQg9iz+FY9m7aKECnHlBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:3c:ca:d4:50:f0:37:7c:75:65:24:d2:cb:0c:39:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b062991d318b0eb603ad17cb3a5114eed5b77e34
        Validity
            Not Before: Oct  6 22:01:53 2026 GMT
            Not After : Oct  7 22:01:53 2026 GMT
        Subject: CN=5082620181eaa04b556ebdf9fd784d5351889dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:74:1a:6b:03:bc:00:1b:81:9e:5c:b4:28:
                    dc:21:11:aa:ac:9f:99:09:f7:b5:a5:5f:00:5d:fb:
                    6e:ab:44:09:3c:93:8f:36:79:39:b5:d4:b4:2f:51:
                    83:44:86:b1:f9:3a:5a:8f:e5:19:9c:e1:c9:b0:ff:
                    10:5a:0c:2c:df:96:93:a7:64:89:29:1d:01:17:73:
                    a1:cd:71:e4:2b:c7:ab:57:91:a3:bb:64:ac:18:15:
                    02:22:4e:5a:23:6d:7a:34:f8:54:37:5c:04:2f:ac:
                    db:03:79:e1:50:6f:ab:b0:2c:65:e9:71:b7:55:c0:
                    e3:f1:c5:7a:6a:78:b6:98:72:d5:e8:8d:1f:51:43:
                    f8:3d:01:2a:53:53:b7:f7:a3:6f:e2:59:f5:d2:b5:
                    c3:05:4f:0d:dc:ef:de:a4:76:dc:27:42:7a:cb:65:
                    2b:28:d8:c7:96:44:e2:6d:00:c6:35:a9:28:fd:a6:
                    f3:50:ed:bc:93:dd:88:87:c9:76:af:1f:3b:31:70:
                    b6:38:77:b6:56:fb:f7:f7:05:c7:04:ff:61:54:7d:
                    66:49:be:9d:57:2c:50:bb:a8:09:84:14:0e:be:aa:
                    2d:68:d8:41:24:63:ba:7f:94:d7:69:30:19:20:68:
                    67:d0:ee:31:b5:69:6f:93:8d:46:53:6d:ba:82:7a:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:82:62:01:81:EA:A0:4B:55:6E:BD:F9:FD:78:4D:53:51:88:9D:EE
            X509v3 Authority Key Identifier:
                keyid:B0:62:99:1D:31:8B:0E:B6:03:AD:17:CB:3A:51:14:EE:D5:B7:7E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:9c:b4:e5:af:00:40:ff:86:7c:88:b7:45:47:aa:82:49:
         f3:08:f3:43:7f:56:ae:d8:d4:df:31:d7:b5:c6:21:8d:b2:04:
         ef:04:ac:e2:0f:c5:84:c2:71:c2:59:b8:ab:64:c5:ca:b0:ff:
         5c:29:59:ed:a9:73:1b:da:37:84:67:07:3e:73:d7:b7:03:6b:
         d2:4a:49:e4:6d:e1:1b:41:ac:45:f6:ee:88:d7:86:7f:44:e1:
         f0:19:d7:58:58:3c:d1:38:72:b2:e5:2f:23:70:a6:fd:64:85:
         5f:1b:48:fb:35:62:d6:6a:27:7a:4b:38:d5:05:d8:ae:0e:d4:
         b3:f2:9d:fb:b7:06:8d:d9:a8:89:64:25:db:90:37:1e:7e:a2:
         9b:49:e2:1b:8e:f0:43:14:46:39:43:5f:51:3a:f8:c5:86:5e:
         12:82:8b:e3:5b:22:da:69:8c:c0:ca:36:42:4d:ce:d4:ed:7a:
         f9:50:7a:f1:2d:f8:5a:94:c1:b4:34:b9:38:ae:50:39:4f:39:
         5c:27:5c:70:4b:07:99:a9:8f:cc:0d:17:2d:29:42:93:30:2e:
         86:bc:77:99:5b:21:5c:7c:17:d3:ed:b6:03:b6:ec:9f:67:71:
         ce:70:1d:c6:2a:05:39:f2:a0:d7:76:37:5f:51:4b:78:ff:44:
         ec:f9:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:55:16 2026 by rpki-client