Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File:                     giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier:          EXtgoht1PenHHL6twXvio1mLxe4fa4dp+TmQvrxbJb8=
Subject key identifier:   F8:88:BF:B0:E3:D9:BF:7B:53:03:0F:D7:43:66:68:09:C0:C3:E2:29
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer:       /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial:       01A0D7CC18B1BB17A62993915166A75543F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number:          1A00
Signing time:             Fri 25 Sep 2026 09:01:12 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:12 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:12 +0000
Files and hashes:         1: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: UrCu3gr+1ldhyVbLGdTngYpGQgU8MaIZqK9/b2I64XY=)
                          2: zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa (hash: LZDUp9nuJRfFK7K/b0GgwAZrAzR3hWtlaKiCODrTlMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:18:b1:bb:17:a6:29:93:91:51:66:a7:55:43:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
        Validity
            Not Before: Sep 25 09:01:12 2026 GMT
            Not After : Sep 26 09:01:12 2026 GMT
        Subject: CN=f888bfb0e3d9bf7b53030fd743666809c0c3e229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:21:98:80:51:98:8c:9b:38:ac:c6:0f:61:
                    1d:54:0c:57:80:90:ff:ce:5f:2b:9d:fd:47:06:ef:
                    82:1b:6e:65:f8:45:4a:03:6b:98:4a:fc:4d:2d:22:
                    54:5b:a9:19:57:2e:79:d0:1b:4c:b4:c4:e7:74:77:
                    84:60:42:2c:37:71:70:cd:1c:18:55:6d:79:54:5e:
                    14:2f:93:5a:15:48:8f:72:ed:e8:e8:93:7e:9d:2c:
                    9b:4e:c7:7c:e0:9b:80:43:cb:0e:4c:2f:43:5f:b5:
                    bc:91:f5:ef:8d:bb:84:37:c5:6f:98:f8:7d:68:52:
                    8c:41:0c:32:c5:25:dc:1c:9b:aa:fb:f7:14:0c:13:
                    01:05:39:32:42:1e:a5:eb:dd:a0:27:a3:6d:8d:48:
                    84:12:93:dd:4d:aa:01:72:c3:fb:f1:6c:c0:2d:88:
                    33:cf:54:d1:c0:d6:a6:5c:66:ca:31:8f:27:86:1f:
                    2d:9e:4e:9e:b2:b8:07:b3:aa:24:7d:3d:3c:64:eb:
                    86:12:a8:76:b5:f5:f0:93:51:c2:8f:13:a8:dc:56:
                    5a:9b:78:ab:06:62:32:f3:09:b0:79:d4:cc:3d:fc:
                    b2:c0:ef:f7:32:71:81:47:44:d7:c7:ce:d1:ad:3e:
                    5e:21:f2:04:3a:ee:94:aa:03:ea:b4:fd:f6:06:bc:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:BF:B0:E3:D9:BF:7B:53:03:0F:D7:43:66:68:09:C0:C3:E2:29
            X509v3 Authority Key Identifier:
                keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:8c:b2:7b:c0:cb:51:d3:ba:86:98:71:04:f4:4e:95:f2:
         83:72:fd:28:95:13:09:fa:6e:7e:51:f9:2a:3d:06:5b:b6:3f:
         e0:49:00:19:ab:9a:60:b4:2b:45:26:56:ad:a8:81:ad:05:7f:
         02:c5:e8:e2:52:d1:33:fc:e0:de:e7:fc:55:8c:5d:18:d0:ff:
         d9:8e:09:5f:e0:6d:c1:a7:64:ae:75:04:f8:cc:bf:79:9c:4b:
         de:6d:af:20:16:1c:37:41:20:87:d6:4c:5c:a1:58:0f:8a:1b:
         e0:04:81:70:8c:16:b2:f5:c9:79:e3:44:31:9c:ed:e6:ba:43:
         f8:17:3a:c6:11:6d:99:04:c9:70:3a:7c:50:48:61:d6:bb:5d:
         b2:2b:d0:d8:ec:8d:34:b9:83:18:90:2c:c8:4b:fe:05:b7:41:
         47:33:32:fc:ec:48:45:88:bb:53:b2:7b:db:d0:27:49:5c:d6:
         2c:41:43:81:be:95:9c:17:48:de:22:b5:f9:c5:5f:a3:45:27:
         6c:11:c2:c3:6b:8a:13:bf:56:ce:01:7f:d5:81:17:3b:d2:a8:
         a2:9c:a4:a2:6b:e1:06:7b:f9:5b:c8:69:08:0a:bd:4b:28:9e:
         06:ca:28:0d:05:33:96:56:e9:7c:2a:6a:83:79:69:55:1b:5c:
         54:c1:33:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzBixuxemKZORUWanVUP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMjQ4YjVlMDg4NTg5NjRiYTJiNTQ3MzE1MjAxNWZkNTk5
MWZkZjgwHhcNMjYwOTI1MDkwMTEyWhcNMjYwOTI2MDkwMTEyWjAzMTEwLwYDVQQD
EyhmODg4YmZiMGUzZDliZjdiNTMwMzBmZDc0MzY2NjgwOWMwYzNlMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywohmIBRmIybOKzGD2EdVAxXgJD/
zl8rnf1HBu+CG25l+EVKA2uYSvxNLSJUW6kZVy550BtMtMTndHeEYEIsN3FwzRwY
VW15VF4UL5NaFUiPcu3o6JN+nSybTsd84JuAQ8sOTC9DX7W8kfXvjbuEN8VvmPh9
aFKMQQwyxSXcHJuq+/cUDBMBBTkyQh6l692gJ6NtjUiEEpPdTaoBcsP78WzALYgz
z1TRwNamXGbKMY8nhh8tnk6esrgHs6okfT08ZOuGEqh2tfXwk1HCjxOo3FZam3ir
BmIy8wmwedTMPfyywO/3MnGBR0TXx87RrT5eIfIEOu6UqgPqtP32BrybkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiIv7Dj2b97UwMP10NmaAnAw+IpMB8GA1UdIwQY
MBaAFIIki14IhYlkuitUcxUgFf1Zkf34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYt
YWU2NDY5YWIzZjQwLzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYtYWU2NDY5YWIzZjQw
LzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA2MsnvA
y1HTuoaYcQT0TpXyg3L9KJUTCfpuflH5Kj0GW7Y/4EkAGauaYLQrRSZWraiBrQV/
AsXo4lLRM/zg3uf8VYxdGND/2Y4JX+BtwadkrnUE+My/eZxL3m2vIBYcN0Egh9ZM
XKFYD4ob4ASBcIwWsvXJeeNEMZzt5rpD+Bc6xhFtmQTJcDp8UEhh1rtdsivQ2OyN
NLmDGJAsyEv+BbdBRzMy/OxIRYi7U7J729AnSVzWLEFDgb6VnBdI3iK1+cVfo0Un
bBHCw2uKE79WzgF/1YEXO9KoopykomvhBnv5W8hpCAq9SyieBsooDQUzllbpfCpq
g3lpVRtcVMEzZw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:03:27 2026 by rpki-client