Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          Efoj2k+CcpWJIJAfA0CCdtj3Kjx4/Fz8VcxTu7hOn1E=
Subject key identifier:   8E:E4:16:A1:54:C2:F8:ED:77:13:66:11:F3:05:B7:32:3C:8D:01:98
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       01A0E1AB45F2934FA6B6332D51C13EA698BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          0E25
Signing time:             Sun 27 Sep 2026 07:01:33 +0000
Manifest this update:     Sun 27 Sep 2026 07:01:33 +0000
Manifest next update:     Mon 28 Sep 2026 07:01:33 +0000
Files and hashes:         1: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (hash: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4=)
                          2: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: JOQFrmYcBjRCUTB4w4wvcDPShkY6I2Rk+XRvmSBhhF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:ab:45:f2:93:4f:a6:b6:33:2d:51:c1:3e:a6:98:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: Sep 27 07:01:33 2026 GMT
            Not After : Sep 28 07:01:33 2026 GMT
        Subject: CN=8ee416a154c2f8ed77136611f305b7323c8d0198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:3e:73:2a:11:4b:06:2c:5f:a4:29:26:e7:
                    9b:67:40:ea:6c:c4:ef:b8:9d:d8:eb:85:9a:a9:32:
                    43:56:49:51:fa:f1:48:ca:39:ae:8e:4f:73:8f:da:
                    71:a2:d3:74:53:f1:7c:d5:ee:d7:ba:f8:5f:2a:09:
                    a7:2b:00:c0:d0:5d:6b:01:ff:ea:2c:16:54:b3:8a:
                    90:21:cd:69:dd:69:a1:33:2f:08:d8:7e:c0:b3:ca:
                    0d:6e:02:ef:3d:28:a4:05:cc:d3:79:d5:51:6b:95:
                    f0:22:49:4a:e9:1a:71:8a:91:3b:c0:e8:bb:ea:e7:
                    b3:26:e9:36:18:39:8e:d7:92:4d:00:50:f5:1b:15:
                    ba:01:91:4a:17:83:d6:c4:8c:e8:83:9d:96:59:43:
                    d9:1e:d8:7b:71:cb:3b:e0:03:5d:a0:31:c7:2c:15:
                    7f:f1:e9:ac:40:a1:c4:3e:83:e7:60:64:b9:9f:38:
                    1b:2e:8e:2e:dd:46:b2:6e:88:66:05:ef:84:02:e4:
                    af:e8:23:cd:98:13:a8:52:94:ba:cc:d4:dd:2f:f2:
                    3d:e1:45:47:97:3a:41:6c:f3:4a:07:fd:8a:f0:5c:
                    77:fc:99:16:43:fc:9b:8c:22:1d:36:d4:f5:18:fa:
                    40:30:af:5c:8c:3f:59:da:7b:0f:2a:f0:12:68:c2:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E4:16:A1:54:C2:F8:ED:77:13:66:11:F3:05:B7:32:3C:8D:01:98
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7f:be:1c:0c:52:9d:b0:4e:13:f0:50:3a:0b:16:32:c5:96:
         f3:40:50:5f:a0:d6:31:88:88:70:fc:11:31:42:e4:90:48:66:
         6e:12:98:51:f6:a6:21:07:e8:32:aa:58:24:d5:8d:4d:85:0c:
         b2:6e:52:dd:2c:62:31:2a:3c:ac:e6:97:dd:34:37:6c:37:95:
         43:4f:b3:79:95:d6:06:c4:e2:4b:7f:31:61:8d:b0:67:34:06:
         e0:f8:94:08:e7:e6:4f:56:03:c6:3a:c2:e0:e6:7f:b7:de:69:
         97:c0:16:ea:29:72:b5:af:96:62:77:2e:9e:2c:1e:43:d0:96:
         99:00:98:25:0c:35:0b:d4:70:5d:6f:16:c1:9e:1d:f5:97:ae:
         ef:4e:60:bd:f8:1a:6a:14:a3:90:6c:3b:14:ae:3a:60:a7:64:
         53:07:2c:6d:14:0c:d2:13:74:ca:42:d6:06:f8:2e:f5:7e:16:
         4a:eb:b2:c0:01:ab:a7:9a:f0:52:e9:8a:2a:2d:41:44:62:a0:
         b9:f1:0d:44:1f:e0:ec:d5:c6:3d:d5:42:1b:a8:ac:34:54:95:
         7b:46:85:60:03:05:1c:b9:6c:72:f4:95:86:cb:da:d4:ae:1e:
         6c:d6:2f:90:e0:81:ad:c2:35:a0:19:8e:69:56:4c:eb:2a:27:
         ab:31:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:11 2026 by rpki-client