Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File:                     GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier:          QU/WB5Mp++cC1d2GRpeRxzTLPKKVJqgseJwGx7EYdsI=
Subject key identifier:   73:4A:2F:69:20:51:13:0D:4C:39:02:CC:D8:99:3B:46:B0:0F:9E:BE
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer:       /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial:       01A1347F41DB28B8B1232BB9B75F9D655458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number:          1AA3
Signing time:             Tue 13 Oct 2026 09:01:57 +0000
Manifest this update:     Tue 13 Oct 2026 09:01:57 +0000
Manifest next update:     Wed 14 Oct 2026 09:01:57 +0000
Files and hashes:         1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: oB9n1ZliMPw8GFmQo4nUd0V5LUdCF03BIVakYjEJeXI=)
                          2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 09:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:7f:41:db:28:b8:b1:23:2b:b9:b7:5f:9d:65:54:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
        Validity
            Not Before: Oct 13 09:01:57 2026 GMT
            Not After : Oct 14 09:01:57 2026 GMT
        Subject: CN=734a2f692051130d4c3902ccd8993b46b00f9ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:59:88:1d:91:29:84:3f:e7:6c:83:44:9e:
                    bf:5f:99:7b:de:ac:e6:b4:aa:b9:cc:83:e2:ed:fe:
                    dd:f8:aa:eb:49:4c:41:f9:93:5d:cb:b3:e6:84:fe:
                    4d:8a:26:ca:48:f4:73:76:46:42:16:0c:26:aa:7d:
                    a8:f4:d9:1c:aa:34:26:1b:0e:09:75:1e:34:1f:ca:
                    27:e8:c0:f3:f6:37:77:4c:22:b1:cb:4d:e5:aa:c6:
                    02:d7:a9:13:95:72:8a:fa:23:a6:16:cc:f2:6f:37:
                    91:83:52:ce:b0:13:18:4a:b3:aa:c4:c1:63:35:c9:
                    5b:ae:49:90:60:08:b4:12:5d:1a:42:5a:48:09:a6:
                    f5:15:32:31:1c:ea:8c:4b:e3:b3:33:1a:08:9b:59:
                    db:7d:01:18:67:9f:0f:99:4d:4a:cb:34:46:63:63:
                    56:72:91:95:5a:1a:75:d6:c1:1d:fe:2e:7b:63:75:
                    0e:a7:8e:d1:3c:18:df:c6:a2:6a:39:d7:73:f2:6f:
                    6c:bd:ad:75:56:26:79:df:86:57:3e:87:cc:1a:e1:
                    e8:46:93:2e:13:a3:b3:41:8c:79:a5:5b:e2:45:f3:
                    22:00:76:ca:a3:56:43:e7:43:d0:04:2f:94:2b:6f:
                    95:51:20:50:6a:8d:eb:7a:90:f9:63:03:2d:7a:68:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4A:2F:69:20:51:13:0D:4C:39:02:CC:D8:99:3B:46:B0:0F:9E:BE
            X509v3 Authority Key Identifier:
                keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:90:97:91:44:6b:c6:9b:85:11:85:ce:1f:90:75:be:6e:
         78:17:8d:ca:28:7f:58:cc:40:c8:7b:d8:d2:62:be:66:df:8c:
         a4:79:50:e8:fc:63:1e:b8:e4:96:62:f7:42:7f:d6:25:bc:98:
         d1:c9:61:f0:76:1f:eb:90:98:7d:74:a5:61:ea:ad:28:c4:83:
         7c:76:ac:70:0e:b1:44:3b:81:02:4e:bf:b4:08:99:1e:79:9f:
         9e:76:76:a8:6b:48:0b:a0:df:69:f4:c5:12:51:fc:a0:75:55:
         cf:e5:90:3a:31:b8:39:41:7a:5b:a1:09:d9:5f:61:cb:55:91:
         c1:d8:1c:c7:cc:61:ea:52:29:38:fc:ba:10:5e:0a:0b:8e:7a:
         50:03:8d:bd:75:52:8a:fc:91:b9:e1:0b:df:52:a8:bb:1e:ea:
         7e:db:0b:7f:bd:55:36:ed:cd:04:ef:9f:34:ca:19:09:df:a2:
         a9:f6:19:66:1f:cc:9d:2b:60:44:a3:f5:cc:2c:63:1b:02:74:
         f5:3e:ad:8e:24:80:b7:6a:b6:f4:e3:2d:89:86:24:c2:28:d3:
         93:36:20:06:3a:5c:42:84:52:a6:6f:42:2b:07:56:d0:c5:79:
         aa:24:ed:36:3b:99:9b:06:12:fa:88:54:54:f9:f1:78:6e:27:
         cf:79:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:26:50 2026 by rpki-client