Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          9Qtdw+ALpKviyu6wMaL2OL1dge+gYjcf+GPzmnp5N/k=
Subject key identifier:   D6:4C:82:41:63:90:3C:28:F8:F2:30:D4:CC:03:99:07:32:99:A5:EE
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       01A104A53D08DDADA369A6C9D6144C668974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          1A8D
Signing time:             Sun 04 Oct 2026 02:01:40 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:40 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:40 +0000
Files and hashes:         1: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (hash: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: EeXw1tJL56TlgPvjH0SS44PsLri5zxwpNOIRpox/0Lg=)
                          3: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (hash: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M=)
                          4: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (hash: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8=)
                          5: xoTCt08cS7BgB_IaDphUNXFIRxo.roa (hash: s3xQf9aSy+8qTNIu1cEAABJrY28zwSkcrisFpnI+ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a5:3d:08:dd:ad:a3:69:a6:c9:d6:14:4c:66:89:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Oct  4 02:01:40 2026 GMT
            Not After : Oct  5 02:01:40 2026 GMT
        Subject: CN=d64c824163903c28f8f230d4cc0399073299a5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:5d:35:86:f4:8f:f3:93:ab:b4:3c:ea:63:
                    9d:77:3a:bd:38:1a:89:d9:5c:e3:27:8d:ae:64:25:
                    d1:ce:91:be:8d:a8:94:cf:e8:fd:35:ee:12:23:23:
                    70:15:46:7a:e8:16:57:86:4b:63:b7:88:01:e2:75:
                    44:b3:74:08:d6:72:51:df:02:fa:b2:75:55:28:86:
                    b8:03:9c:2b:5d:a3:f7:35:91:2c:66:d3:0d:e5:ad:
                    ce:b7:7d:c4:ae:2f:02:60:55:2f:46:8c:b3:68:ce:
                    61:e6:d1:93:a9:c3:e2:f0:43:0a:47:71:5a:a5:b4:
                    fb:1f:b9:55:3a:e6:57:a9:8b:f0:7d:df:36:3c:b4:
                    24:2c:fb:7a:6f:6e:10:d4:16:7a:5e:09:02:c7:ab:
                    d5:97:aa:48:9f:b1:09:2f:a4:95:ab:3e:a5:1a:87:
                    be:52:b8:40:15:6a:d7:bc:0c:a4:69:e2:32:16:ce:
                    eb:1a:54:8b:2d:9f:41:3d:7e:f7:2a:50:54:85:4a:
                    28:4b:8b:b8:bc:73:bd:a9:e8:cf:a8:19:9e:99:9f:
                    50:96:9a:ae:29:9f:cf:7f:9a:ce:24:28:a5:af:3c:
                    7a:15:ca:63:b7:6b:3e:a5:6d:f9:19:75:69:88:7c:
                    12:26:eb:cc:2c:68:b0:5a:f5:09:2f:94:55:f8:71:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4C:82:41:63:90:3C:28:F8:F2:30:D4:CC:03:99:07:32:99:A5:EE
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:8c:f4:70:e7:e4:b4:c9:dd:7a:88:f1:87:93:fb:e9:3e:
         4e:ff:00:fd:16:9f:ba:16:95:89:8f:a1:ac:7f:69:60:f8:9f:
         06:60:11:50:a2:57:16:fe:3d:e2:5e:0a:c1:3d:00:89:07:13:
         2a:e2:ca:b8:4b:c2:b3:33:ef:6b:58:be:ef:a2:5d:7d:17:a7:
         b8:1e:fb:b2:b4:c9:e1:76:1a:4d:88:3c:23:95:32:03:3f:fa:
         b5:2d:9a:75:b2:22:7d:0b:89:0e:6b:ac:d5:d4:04:76:5d:3f:
         24:0d:93:81:8e:d6:f7:52:a0:2c:9c:07:7d:fb:bd:8b:5f:b8:
         72:62:8d:19:b5:bb:34:23:36:da:eb:28:64:e4:30:29:6d:22:
         6a:a7:a3:05:ff:74:c4:6d:0a:76:e1:66:c8:8c:26:5e:b9:bb:
         ec:0b:65:fa:0e:7a:ef:e3:a4:0e:de:b2:23:eb:64:ec:9f:8d:
         4b:f4:c1:52:74:8f:08:70:f0:51:f8:2d:12:40:79:f5:66:3d:
         e9:b8:e0:a8:ca:e9:d4:77:10:5f:45:fb:48:69:5f:25:c4:72:
         0a:99:ca:20:17:64:0d:7d:e9:e0:73:fd:8d:53:4b:be:ba:28:
         81:08:49:b6:51:03:79:8b:0b:ca:43:82:60:a7:73:48:ff:e3:
         27:28:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:01:14 2026 by rpki-client