Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File:                     gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier:          7gby3/uwZLDR6fYm1/41mfWlWnBXQ4MHWvGtGk4N+cg=
Subject key identifier:   D3:10:E5:61:95:C0:4B:92:96:9A:00:B1:DE:62:FB:74:AA:14:29:DD
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer:       /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial:       01A0D3EFED9157BCA50EE865BEA2E7CBB060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number:          0178
Signing time:             Thu 24 Sep 2026 15:01:51 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:51 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:51 +0000
Files and hashes:         1: Qr6lJM203NhFGKZShnscSCdGFno.roa (hash: jbJSkdqG0TP7acpwCoEzRW1DcU+dJ+gbIy2PJggIZmM=)
                          2: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: TUmd4IeNwZU6lc1OvAWqA9T6AOvUsl10eRSUSzZobNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:ed:91:57:bc:a5:0e:e8:65:be:a2:e7:cb:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
        Validity
            Not Before: Sep 24 15:01:51 2026 GMT
            Not After : Sep 25 15:01:51 2026 GMT
        Subject: CN=d310e56195c04b92969a00b1de62fb74aa1429dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:fd:1e:0e:85:76:c9:71:b3:72:33:3c:f4:
                    dc:f5:dc:82:cc:5d:a2:07:36:32:ae:a5:5d:18:fe:
                    ae:6f:03:6c:3e:b3:6e:87:a9:4f:5b:3d:74:dd:cc:
                    57:f8:0e:81:83:58:cb:78:ed:8c:e6:ab:19:db:6f:
                    e5:68:91:9b:c3:ba:77:05:5b:55:a5:46:9b:8a:7f:
                    e5:da:6c:ea:6f:d5:3d:df:67:92:ff:5d:d8:83:38:
                    ea:d9:16:c8:a2:3d:33:b8:93:8f:77:d1:98:a4:3c:
                    4a:46:e9:d3:e3:4b:93:4a:52:28:10:69:e9:ea:64:
                    ec:33:fc:12:45:20:29:a8:0c:2d:5c:7f:31:85:cf:
                    b1:cb:ba:93:ab:80:fd:86:46:b1:e5:a5:88:89:8a:
                    cc:5e:23:8f:a0:c7:68:f9:8e:d6:71:3a:c3:2c:4b:
                    e3:f0:05:4f:99:2b:c1:80:76:b9:06:ac:42:e1:3c:
                    f3:00:fd:d1:c5:80:79:46:7b:3c:a7:d0:80:43:e2:
                    cb:2a:c2:d7:2b:5d:13:f6:e0:1a:2d:56:89:fe:a4:
                    26:ed:82:89:96:50:2f:b3:a1:ab:d1:ad:bf:56:9b:
                    d8:b6:cc:1c:7a:aa:80:e3:eb:ca:c7:88:ab:53:c6:
                    e7:14:52:91:2c:9d:a4:c2:a6:65:2b:60:17:5c:55:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:E5:61:95:C0:4B:92:96:9A:00:B1:DE:62:FB:74:AA:14:29:DD
            X509v3 Authority Key Identifier:
                keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d3:b3:7c:4a:ec:04:34:53:f3:b0:f2:b7:b4:72:5f:34:fc:
         70:74:ba:c1:c2:09:d7:8a:3e:10:53:ab:04:e3:15:9a:a5:3b:
         6b:bb:6e:12:0a:83:49:7f:b8:8b:e2:13:ce:d1:e7:84:17:13:
         59:61:ff:24:81:38:25:a0:ae:8b:de:e6:3f:90:64:e4:58:b0:
         fc:2c:30:bb:a7:e2:8f:a6:95:ab:fd:93:3c:e0:97:fe:6c:a7:
         95:a3:fb:91:7f:2a:b8:0f:c7:b4:3f:98:15:84:9b:ca:d7:cc:
         fe:1d:88:c9:33:ba:a3:d8:b9:51:68:c5:58:51:e8:a0:f3:f5:
         df:e1:1c:37:e0:a0:80:0f:43:4f:fb:80:7c:71:d5:47:f2:cc:
         50:56:7e:23:48:3b:24:b1:3c:2f:59:01:c1:92:90:68:1f:3d:
         6d:b4:03:c3:33:51:55:c6:88:18:4b:c8:d2:c0:bd:22:1d:61:
         b3:f2:b8:a2:3f:a0:b2:4d:fd:fc:19:8d:e0:5e:01:93:90:1c:
         02:a1:6e:d2:18:92:da:9c:b1:43:b4:1f:2c:83:6a:32:4e:89:
         2b:73:d3:9d:b6:ab:7d:87:67:6b:de:76:79:7a:9c:e9:eb:3b:
         6c:53:5a:46:3b:db:bc:30:e0:72:a0:ca:12:c6:b0:46:f1:2e:
         9a:71:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:32:21 2026 by rpki-client