Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          wtOOi1yBScXdydWr/oRQfbjHDQrGoHw0xoWs2xb5wJs=
Subject key identifier:   70:77:0E:AB:E7:6B:93:F5:8F:92:4A:16:7D:B0:85:F9:96:82:50:1A
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       01A10693596156F50CAD10B3FEBD2289D916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          1A8C
Signing time:             Sun 04 Oct 2026 11:01:22 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:22 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:22 +0000
Files and hashes:         1: ATLOmeA5cf4AwJ9U-Q-N1ldTcPE.roa (hash: hnP5uN1NwwvHi/WK/M6S1b6bdfJWGxirQCx3zSYRXtM=)
                          2: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: aSMFXtSUsbSMccnybGm/1nONbe8lIreLJ8itKsLLT6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:59:61:56:f5:0c:ad:10:b3:fe:bd:22:89:d9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: Oct  4 11:01:22 2026 GMT
            Not After : Oct  5 11:01:22 2026 GMT
        Subject: CN=70770eabe76b93f58f924a167db085f99682501a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:0b:07:55:31:7c:55:e6:bd:a3:21:00:12:
                    be:9f:05:02:6c:83:45:26:af:ed:b5:02:5c:c8:5a:
                    df:67:c3:08:0a:8d:8f:b1:8c:75:86:f4:7c:55:f6:
                    92:50:1b:73:4c:60:b2:42:8b:f5:74:13:39:26:12:
                    b1:a4:b1:f6:73:3d:78:96:6d:35:95:ef:03:41:c8:
                    99:a7:2a:32:4a:aa:d6:bf:2f:72:1a:43:0f:14:5a:
                    93:67:89:b7:8d:18:d7:be:a0:e3:bc:1e:39:b0:a8:
                    0c:b0:82:1d:8b:7f:66:fd:2f:1b:2f:df:12:be:ee:
                    71:cd:37:b0:14:82:22:7e:5b:77:7b:88:3f:c4:44:
                    f2:e6:2f:f3:d7:21:0d:3a:b8:20:07:0f:1b:2b:e5:
                    e2:d6:f6:38:fa:c3:0c:90:4a:27:c7:0d:c7:73:da:
                    e6:45:de:58:84:73:71:4a:0c:2e:7c:25:a1:62:89:
                    7b:e7:69:f2:5e:ac:b5:a9:ea:d9:9f:e9:71:91:68:
                    1e:38:25:d2:37:7b:ec:34:7a:af:15:b2:c5:0a:86:
                    d3:2e:8a:d4:69:2d:b9:65:87:4c:27:4d:71:03:88:
                    96:e0:72:16:18:05:c3:e7:25:cc:ff:3a:7e:2f:7c:
                    2d:d5:68:b0:ec:a7:4c:8d:fd:da:ec:36:1f:d8:ac:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:77:0E:AB:E7:6B:93:F5:8F:92:4A:16:7D:B0:85:F9:96:82:50:1A
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:06:3e:d5:2d:3a:05:be:29:67:22:c8:a9:bc:da:95:b3:
         2c:2f:ac:18:21:71:3b:55:7f:11:47:e1:fe:61:cc:71:7d:17:
         e2:52:09:9e:e0:87:66:aa:0d:e4:97:30:44:53:2d:43:52:42:
         e4:d7:f8:11:10:6f:26:95:1b:49:b2:3d:cf:e1:6a:1b:2f:0d:
         5c:e1:5c:ce:52:27:14:54:95:84:0f:43:a8:2b:f7:48:17:99:
         fb:28:97:94:42:6b:5b:a9:0f:4d:80:f6:ae:06:8a:01:f8:cd:
         82:a1:fb:4c:25:20:5d:0b:65:66:c7:00:83:04:64:39:6f:a3:
         b0:e0:60:61:17:e7:3e:6e:84:f0:9d:30:a2:c9:d3:19:ab:26:
         45:36:7c:57:08:3b:e7:4c:77:d1:8a:31:ba:74:71:c1:13:70:
         09:7f:4c:0f:f9:ea:f6:78:3a:7f:f1:7b:4e:17:a6:14:7d:21:
         9e:e5:c6:0d:03:b8:0f:a6:d1:39:03:71:d6:66:3c:68:bf:f0:
         2f:c8:de:e4:a1:d1:51:65:a2:a9:b1:9d:33:2e:88:6c:34:08:
         7c:ad:74:2a:3f:ba:54:cb:92:70:4a:0a:2e:15:5a:43:e7:e4:
         a0:91:a7:3c:52:36:cf:91:3e:ac:b8:87:d8:b3:61:88:0d:fc:
         51:a8:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:24:38 2026 by rpki-client