Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          aCKzDYqo9p00PbI2krfoDeRQUY63QIeY09JMyuqYrSs=
Subject key identifier:   61:9C:6A:F3:D8:52:1F:2C:79:3B:54:E1:30:9F:C0:12:CB:0D:43:C8
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       01A10F5EE2CE6C2A100828C2367B83E6F260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0F0B
Signing time:             Tue 06 Oct 2026 04:00:38 +0000
Manifest this update:     Tue 06 Oct 2026 04:00:38 +0000
Manifest next update:     Wed 07 Oct 2026 04:00:38 +0000
Files and hashes:         1: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (hash: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs=)
                          2: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: +DCUFGt4+dSjAWEbh0eASsWnxEfrB/3tIMdedA0DRrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:5e:e2:ce:6c:2a:10:08:28:c2:36:7b:83:e6:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Oct  6 04:00:38 2026 GMT
            Not After : Oct  7 04:00:38 2026 GMT
        Subject: CN=619c6af3d8521f2c793b54e1309fc012cb0d43c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:50:a6:7d:49:55:d0:a4:d9:84:04:c8:9f:
                    0b:0f:b6:4c:6e:e9:ff:7f:14:a3:3a:8e:03:ea:2c:
                    4d:be:c1:61:30:86:48:6d:0a:3d:88:a1:76:2e:27:
                    c9:63:c1:0e:be:39:4a:a7:60:97:1f:3f:05:83:58:
                    14:39:44:57:3b:26:15:e5:f3:43:d7:47:a4:a2:28:
                    a2:85:82:28:0a:04:d5:3e:0f:0a:87:45:56:39:fe:
                    96:cf:88:8a:2f:67:c6:6a:dd:8c:5d:9f:89:32:fb:
                    44:47:b2:36:fd:98:7e:ed:0f:7a:66:05:5a:3d:c8:
                    e7:63:ad:2a:45:68:3a:14:66:a7:43:bb:02:13:ed:
                    80:63:fa:ef:9d:4c:cb:08:fd:83:94:34:b6:13:6e:
                    79:61:c0:00:5d:fb:27:9b:f1:73:ff:56:97:21:36:
                    85:03:9d:e3:0f:35:70:77:50:f2:a9:d9:64:0b:27:
                    a9:da:41:2a:6d:49:0f:87:ee:85:d4:14:3b:30:4f:
                    39:e7:3d:3c:48:56:0d:9a:97:37:72:fb:49:11:e9:
                    96:00:43:04:51:d6:e2:ef:3e:25:42:e9:92:26:82:
                    54:e3:77:f5:f7:eb:89:af:4c:ef:9f:a6:71:fc:19:
                    37:74:99:b2:b1:f9:85:5e:d1:bc:82:4b:ce:2c:cc:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:6A:F3:D8:52:1F:2C:79:3B:54:E1:30:9F:C0:12:CB:0D:43:C8
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:06:0f:7c:0e:fd:dd:a5:77:89:a3:ae:17:6b:d3:61:c1:9b:
         39:71:ab:fc:a7:d0:fc:57:e3:60:e1:7c:ea:a4:b7:65:f3:a7:
         dd:97:3a:8f:e1:43:8d:94:dd:9b:b7:f4:5f:89:c7:97:4a:2a:
         33:6a:00:87:f0:af:c1:a2:87:2a:b3:be:e8:d4:ae:a2:c0:31:
         a5:75:02:8d:06:9a:ef:00:5c:07:ba:f9:b0:2a:53:d1:2c:97:
         e7:b4:e5:19:ef:13:fc:ad:11:6f:c2:3f:94:f1:c6:26:07:0a:
         91:c2:53:0c:d4:d9:ac:ec:2c:36:c5:52:2a:59:3a:a0:a2:2a:
         f0:73:61:71:14:42:61:18:b2:33:8b:cb:31:96:2e:9f:67:48:
         3f:29:c4:90:49:9c:cf:d1:fb:e6:c8:1f:f7:50:f3:e8:6e:9d:
         05:fc:22:ef:a8:ff:77:e0:02:86:a5:f1:26:09:15:86:03:bf:
         af:b6:16:61:3b:4c:76:e0:ca:41:0c:a1:19:49:53:9a:e9:e6:
         69:13:b3:7c:a8:fd:3b:ee:69:bd:a2:4d:db:79:f6:f1:54:ca:
         4e:ea:3a:0e:38:5a:6b:e3:53:d1:4a:9c:e4:2d:ca:60:2e:56:
         f2:2d:2a:1b:6d:07:0e:42:08:2d:b3:83:fd:c3:ac:53:77:a1:
         92:ba:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:22:41 2026 by rpki-client