Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File:                     GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier:          +0dlckDJp1YyqYOow0lwCdPa9WA9dqkntops7J0EduM=
Subject key identifier:   86:56:EC:42:36:5A:4C:85:EC:B5:7C:E2:F7:63:CE:27:FC:9E:A8:B5
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer:       /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial:       019FAAF5C5BA7633359056C4664DEC34E0AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number:          1225
Signing time:             Tue 28 Jul 2026 23:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:01 +0000
Files and hashes:         1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: RyBbLqWA7cQbXL6pszCbjMDs3GABPjGCBZb14iW0qDQ=)
                          2: e7GASbeCgANWz5iegzo-dHYfZVM.roa (hash: l9HQNVcMldPVoQboUzC9kltlmdqxfM4f7etmfeKvc9E=)
                          3: l1XA1WxDomG_I7YpojfGXMLSADs.roa (hash: 5XkhMqZeEKAmgMdjJ9L6nB7pdTZD72Q0VcYVhIxf4rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:c5:ba:76:33:35:90:56:c4:66:4d:ec:34:e0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
        Validity
            Not Before: Jul 28 23:01:01 2026 GMT
            Not After : Jul 29 23:01:01 2026 GMT
        Subject: CN=8656ec42365a4c85ecb57ce2f763ce27fc9ea8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:43:89:0b:7c:9d:10:bb:9c:f0:24:22:24:
                    80:b3:d4:01:01:45:33:46:a6:ec:90:ee:e0:b8:f4:
                    61:9d:9e:8a:58:9f:d9:5b:5a:e0:4d:17:4c:44:c4:
                    64:7b:67:e0:17:05:fa:54:9c:15:26:3a:19:26:b3:
                    4e:d7:da:4e:6b:f2:ca:24:a8:8a:cb:8f:fc:bf:ea:
                    26:81:b9:2e:af:2f:48:b4:ce:83:a1:6a:34:9e:16:
                    f0:4d:7e:15:de:1c:16:82:d1:2a:bf:5a:18:2d:eb:
                    55:9b:30:a6:a5:a5:27:ab:06:0c:79:c1:26:8a:d7:
                    84:1b:43:46:78:92:ac:51:05:35:71:8d:8e:4f:9d:
                    b8:59:74:f8:ed:4c:c6:6d:6f:54:db:21:6a:10:35:
                    6c:49:9b:23:45:cb:b4:90:ea:06:81:3b:78:c9:41:
                    1c:ea:ef:aa:1f:71:2d:ed:68:01:15:c6:f2:64:24:
                    60:ae:e1:d2:b6:d9:07:af:b6:d9:12:5f:81:d8:00:
                    4d:7f:27:87:47:de:bb:da:16:cc:f0:f8:84:c3:7a:
                    be:61:13:d3:09:62:78:08:82:cf:cc:7f:8c:14:bc:
                    22:a9:8c:87:b0:20:d0:ef:9b:2c:8e:37:c8:d2:b7:
                    32:c9:7c:8d:54:ff:67:6f:c2:ba:bf:d1:7f:c1:8f:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:EC:42:36:5A:4C:85:EC:B5:7C:E2:F7:63:CE:27:FC:9E:A8:B5
            X509v3 Authority Key Identifier:
                keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:11:ad:9f:23:00:4c:35:90:07:9f:77:00:54:f5:c7:ac:58:
         8e:44:0f:78:ea:92:51:df:a2:d9:a4:f2:0f:ed:ed:1b:ae:ce:
         d3:65:84:a0:c6:7e:40:0f:66:03:8e:0e:1a:51:f9:bd:a5:8a:
         14:ac:d2:2b:50:02:29:9d:42:88:72:ac:b4:bb:54:20:03:c0:
         47:b2:b8:62:ae:af:ee:c5:a8:86:9e:66:d8:fd:ad:42:7e:89:
         b0:a0:31:df:99:52:de:4e:fa:17:7b:6b:dd:45:88:2d:0f:a4:
         20:f3:cf:76:85:0a:78:c9:ed:a4:c5:95:76:83:7c:f3:ca:29:
         92:87:27:b6:69:13:17:16:64:b5:9f:16:cb:91:4d:8c:9f:16:
         a6:3f:12:bc:ce:0d:1f:b9:aa:4a:27:a4:cd:e4:a9:09:d5:ee:
         80:40:a9:f9:dc:5e:48:a2:3b:8e:46:e7:b4:5c:27:c4:e7:89:
         2c:36:6b:9a:d8:b7:3d:db:36:7e:4a:46:4b:2e:6d:54:a0:4c:
         e8:39:a1:88:2c:66:5a:e7:77:c3:8a:ba:ee:a6:cf:e7:fd:22:
         52:16:20:14:43:dd:80:9d:84:46:c7:e3:7a:8e:09:71:a8:bd:
         5a:21:d6:9e:25:93:61:68:3d:08:f7:fd:80:53:96:05:a2:37:
         5a:2b:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:09 2026 by rpki-client