Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
File:                     gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json)
Hash identifier:          VdwfygTMPS0faizayYukJW8pZoLdAYOm1AUWGlErGuI=
Subject key identifier:   37:B9:6B:2D:88:05:B1:FA:00:91:1D:FC:87:4B:8F:25:7E:67:CF:4C
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Certificate issuer:       /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial:       019FAC3ED40EBA4E93CE13C5212508832343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
Manifest number:          0B48
Signing time:             Wed 29 Jul 2026 05:00:26 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:26 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:26 +0000
Files and hashes:         1: Jt8B4khwmZHADx5hs4s41B6Lb_g.roa (hash: 88Q+yO8fBrvt5Fpre+J3rE1H4/OHXMsoCVUlReFwY/c=)
                          2: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: 4iYMwtMkuZeyaNDhQ5XW8mpCO2bP4QTKGwwsQ5bLwME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:d4:0e:ba:4e:93:ce:13:c5:21:25:08:83:23:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
        Validity
            Not Before: Jul 29 05:00:26 2026 GMT
            Not After : Jul 30 05:00:26 2026 GMT
        Subject: CN=37b96b2d8805b1fa00911dfc874b8f257e67cf4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:99:17:ec:ca:68:31:8e:48:dd:b2:ce:c8:ed:
                    f5:79:61:6a:14:c9:5c:40:f4:45:bf:e6:f8:87:69:
                    43:e7:cc:ed:8d:d8:5a:fd:9c:85:3d:80:8c:39:b4:
                    7f:0f:a8:19:25:65:4a:99:2d:61:f8:a6:97:05:b6:
                    ff:1d:63:57:73:f1:1a:b6:cf:5a:81:0e:d8:fd:76:
                    5c:3f:8d:c0:1c:13:90:5a:c6:e4:89:fb:0a:09:54:
                    12:15:7e:a3:e1:e0:18:77:34:60:01:2f:ff:fc:08:
                    b3:3d:43:b2:67:9c:b2:3c:04:51:ce:ca:1b:04:1f:
                    ea:5a:6c:10:16:a7:4f:ab:1c:e8:f2:91:d4:cb:29:
                    64:82:90:27:82:88:1d:92:c1:97:3e:67:2f:a8:35:
                    2e:08:52:5b:ea:54:25:ed:15:82:e4:89:43:2a:53:
                    67:ac:73:e5:c1:00:65:67:23:19:0b:52:df:85:6a:
                    56:b5:37:c0:4c:ed:66:2c:29:de:0f:cd:3b:92:87:
                    e6:5c:9b:aa:7a:7d:04:1c:41:55:34:10:da:42:e0:
                    4d:7f:7c:82:ae:7d:30:15:ef:f2:ff:90:11:ba:59:
                    48:e0:46:36:40:20:85:99:26:bf:e3:4d:2f:e3:65:
                    00:58:82:e3:c8:b4:7d:b2:12:c7:22:b8:35:4a:0b:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B9:6B:2D:88:05:B1:FA:00:91:1D:FC:87:4B:8F:25:7E:67:CF:4C
            X509v3 Authority Key Identifier:
                keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:37:4e:9c:62:59:a9:79:24:e7:23:97:de:06:3a:d4:a8:
         ff:b5:bc:71:1a:91:54:4c:b4:ee:14:9f:eb:6b:11:9a:ad:69:
         19:55:6f:ef:88:05:72:4e:43:ea:1c:9f:22:d5:e9:dd:f6:bf:
         2e:60:64:3c:1d:0b:59:5e:58:2f:8c:2e:3a:e0:e7:ec:76:0b:
         3b:38:5e:1b:58:f9:fb:fb:bf:58:18:12:ad:30:0a:21:55:9f:
         8e:6e:1a:c4:3d:c3:ed:dd:71:cd:8f:d3:70:16:91:25:a9:ec:
         5b:85:43:fb:7a:ad:c4:72:dc:92:18:ee:e2:20:88:09:74:5d:
         b9:36:2c:d3:a1:52:08:bd:3d:46:02:29:65:ba:bc:fa:98:8f:
         e9:40:67:f2:e7:f8:dd:f0:78:26:b7:4c:5c:7e:ed:30:c0:01:
         a9:4e:0d:fe:1d:55:84:ff:41:81:ca:8a:d8:ea:b8:38:ff:a6:
         09:b6:38:4f:b9:9b:fd:d8:0c:82:e2:51:92:4e:9b:74:55:0f:
         a2:6e:2a:db:c5:54:a9:9b:6a:4d:24:77:fc:99:d9:27:e2:ad:
         2d:54:7d:d4:b1:5f:cd:12:ff:21:15:76:16:76:bd:bf:d1:85:
         86:5c:13:69:97:bf:d7:3f:2c:cf:50:57:7a:0e:4f:a1:7e:84:
         55:24:96:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:07 2026 by rpki-client