Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          Lwia51kCGeOjm+cHvPsHhOj2NyGGdJHomAg0eE+LZ04=
Subject key identifier:   E0:2C:D6:9D:64:54:6B:D2:C5:70:FA:DB:E3:D1:0F:A5:61:91:31:A6
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       01A0D727D5D8E0FA3328135BE68ACE099427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          1A78
Signing time:             Fri 25 Sep 2026 06:01:47 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:47 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:47 +0000
Files and hashes:         1: 0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa (hash: w3LcFmfi5o+ZqCPWaVzw9mcyP3jYqj4m9ROiWLMpgAY=)
                          2: 5t0r8fJd2nhioYpGfkI7Yf9otXA.roa (hash: k52ZXWE/9hDIrYh0zpZm2nywZwLzZgmA6wQ6L4w58mM=)
                          3: 6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa (hash: s//DyxiKkxSxvwwq0U0tirxt/hDGoM9Ut2Dc50YCwqM=)
                          4: Cryli7tFA3xQzdS5-qcU49qg2iM.roa (hash: ZS2Te+uiOMALn+TaiqIM3OKXyBaszdLcDeqRDP7qYwo=)
                          5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: QCuwwpVz9iGkV2DcoyWAwbvBDFIvWRRbGmwMm1gcYao=)
                          6: jsVSRtJd2CDXuEExXGRqUMz5PZw.roa (hash: 3KBrD6dE8HRG9EKrovP9Lr4d9GeL2O9jLSsM034LhGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:27:d5:d8:e0:fa:33:28:13:5b:e6:8a:ce:09:94:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Sep 25 06:01:47 2026 GMT
            Not After : Sep 26 06:01:47 2026 GMT
        Subject: CN=e02cd69d64546bd2c570fadbe3d10fa5619131a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:ce:86:cc:c3:89:ed:dc:99:5a:7f:44:d5:
                    13:72:1c:f2:91:50:bc:d0:2f:3c:cb:5a:76:9c:94:
                    45:b1:e1:6b:9c:d1:e9:52:ab:2c:5f:6c:d9:a5:a9:
                    c2:c1:fe:57:f7:62:97:2d:b7:e8:59:70:eb:14:2b:
                    04:dc:5d:51:ff:72:e2:3a:39:84:88:6b:dd:68:7a:
                    bf:e1:78:5f:b9:82:18:7e:d9:78:fe:80:fb:56:14:
                    a7:73:e0:29:c8:89:9b:b1:0c:9b:ae:39:b7:1d:7d:
                    ce:31:25:35:dd:25:aa:8a:f8:98:df:6e:e8:32:8d:
                    31:92:24:f4:ca:ac:0a:46:68:0f:c2:98:44:9f:01:
                    0b:43:f0:3b:8e:43:9b:62:97:61:79:9c:a9:2f:bb:
                    ea:cc:1a:2d:9c:64:6c:1f:4f:19:35:1e:02:71:35:
                    29:8d:a4:36:d9:4c:ea:ee:44:78:70:e2:0a:28:3d:
                    aa:f9:8d:d8:46:1b:52:43:70:5b:75:5a:4b:b4:81:
                    83:e7:51:df:c3:1d:bb:15:dd:d8:34:7f:53:22:3f:
                    5c:82:76:1a:d1:db:ea:6d:b6:bf:a9:a1:d7:48:95:
                    dd:ac:14:08:81:c2:09:4f:c5:4a:df:89:57:68:d2:
                    8d:73:1b:4f:dd:e5:9c:a9:d9:b4:b5:06:e4:d3:ec:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:D6:9D:64:54:6B:D2:C5:70:FA:DB:E3:D1:0F:A5:61:91:31:A6
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5a:e5:ea:36:d4:4e:f3:c7:5e:6e:53:e8:ed:90:80:53:7e:
         19:63:06:cb:23:dc:25:aa:4c:0d:0c:a5:2a:51:71:4c:de:d1:
         02:99:de:ab:c1:00:67:82:3d:7e:af:26:1a:d4:8c:a4:0b:e5:
         e7:cc:1d:af:4c:57:f6:5e:2e:8b:d1:8d:e6:77:91:31:52:d8:
         fa:43:9f:06:c3:c3:4c:b2:6d:e3:bf:6a:64:b1:2e:8e:93:d9:
         6e:11:c6:c2:2a:83:e2:55:e1:5b:3a:4f:d0:62:09:8a:53:6e:
         0f:5b:4e:ca:fc:47:96:aa:b4:e9:c3:8b:b8:65:44:fd:69:be:
         e5:16:29:7b:05:4f:b4:38:1e:5b:e5:e9:ba:0d:cb:cd:cd:f5:
         66:e4:9a:4d:77:09:49:59:07:49:a8:63:50:db:e2:92:53:c5:
         a7:4b:e7:c5:e9:e7:3d:38:d3:ce:ab:a5:b7:a1:2e:46:4a:e8:
         2d:f0:ac:bb:32:22:ee:7f:9b:c0:58:9f:88:4a:10:43:12:f3:
         a0:4c:09:06:83:bb:52:80:d6:fb:c5:61:e3:17:b8:eb:cb:b1:
         bb:c2:cd:96:f8:08:d0:f3:70:67:0e:0b:9f:8b:28:6e:ca:44:
         81:33:80:a7:b9:58:6d:f3:88:66:23:ab:f1:72:30:64:b2:0f:
         61:06:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:45:48 2026 by rpki-client