Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File:                     G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier:          rZte0dQaGaiMnoDj7U+yKMfmEADSSrzN/x4A03Bt7Bk=
Subject key identifier:   1D:51:58:C8:16:8F:4E:32:D4:76:7F:2E:01:20:49:29:1A:31:FF:DE
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer:       /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial:       019FAB2C2822DF5290FCD5C09A330C343A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number:          171A
Signing time:             Wed 29 Jul 2026 00:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:25 +0000
Files and hashes:         1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: 0kaJJMjkHsYkb/aKMlK+gOzIk9hO6sLHvA7LzNnfpsY=)
                          2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
                          3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
                          4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:28:22:df:52:90:fc:d5:c0:9a:33:0c:34:3a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
        Validity
            Not Before: Jul 29 00:00:25 2026 GMT
            Not After : Jul 30 00:00:25 2026 GMT
        Subject: CN=1d5158c8168f4e32d4767f2e012049291a31ffde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:1c:b7:5c:de:48:08:f0:c4:3a:b2:e5:6f:
                    23:d7:4f:33:f5:6c:24:bc:84:6e:29:9b:7a:eb:31:
                    f2:af:f0:45:e5:9c:62:b9:e9:74:b2:34:1d:89:37:
                    9e:f3:b1:56:17:c4:d9:41:b5:72:33:d2:0d:a6:19:
                    3d:98:21:a5:fb:02:f0:1d:45:da:af:75:ac:64:aa:
                    c0:10:1a:55:43:18:e5:f3:c0:31:86:62:7d:92:43:
                    74:aa:85:ee:00:c6:bf:f7:c0:f5:79:0f:8d:5c:6f:
                    62:47:4a:52:ee:e2:de:98:41:99:98:6a:c2:59:53:
                    84:f2:05:16:f1:5c:70:ed:a8:c2:75:56:06:6a:04:
                    f6:f2:0b:69:50:33:44:a2:d4:d3:89:70:29:5d:8c:
                    44:d9:51:b8:ee:74:fd:ce:f9:17:82:84:f1:1a:9f:
                    b1:ee:d3:30:69:e4:87:d1:0e:77:17:af:64:10:74:
                    2b:13:cc:1b:ce:c0:f2:26:89:9d:be:69:e2:df:32:
                    c7:26:21:5a:42:39:ac:38:ed:bd:59:30:17:f3:db:
                    7f:05:0d:ef:20:e0:66:ce:5a:12:3c:80:a2:0b:82:
                    a0:8f:96:0f:8a:de:ab:49:08:60:fb:9f:a4:1d:be:
                    84:e9:99:08:a9:ce:25:0a:fc:8d:35:36:4b:c6:3b:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:51:58:C8:16:8F:4E:32:D4:76:7F:2E:01:20:49:29:1A:31:FF:DE
            X509v3 Authority Key Identifier:
                keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:04:47:56:8e:80:54:1d:bc:8d:aa:c0:1e:0c:1b:f6:84:4e:
         a1:c4:c8:6f:d1:1b:31:f5:aa:0b:26:d9:14:6b:3f:b0:c5:27:
         0d:2d:1b:26:d5:02:c8:a9:35:c4:94:27:a1:9f:15:69:53:32:
         87:8e:ef:fe:2d:35:01:1d:d9:b9:3a:b1:36:2f:76:d0:79:71:
         2c:be:f2:5f:aa:26:76:4c:c1:bd:27:dc:82:b5:63:f0:50:0d:
         f5:02:ca:f1:08:be:bc:3c:1f:45:98:a0:8f:43:97:6a:45:7b:
         80:83:2c:e6:a2:f5:36:7c:6e:a3:2d:2b:77:08:da:d2:d6:15:
         a7:e6:8b:aa:e1:8c:29:15:7a:92:86:b5:74:ce:ff:05:f1:48:
         17:36:2e:ee:89:9e:83:b8:c7:f3:31:05:df:ae:62:6f:6d:f8:
         39:dc:de:b2:2c:de:c2:00:51:b1:dc:35:f8:b5:c2:c1:c7:61:
         fe:5c:0f:c0:4e:49:e9:82:b3:b0:03:23:a7:35:b2:c1:15:e0:
         e3:63:73:d0:55:0f:ba:b7:57:3b:23:32:32:99:3e:56:5b:26:
         44:74:5f:e8:09:c6:69:cc:e9:c7:02:8d:3e:e9:d6:36:a5:0b:
         8f:b9:9d:39:bb:71:ee:f7:ae:e2:ea:4e:35:e7:97:82:f0:39:
         f6:92:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:24 2026 by rpki-client