Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File:                     GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier:          PGH0hkXXSMXL7py/ms3ust8wXxLpgiG+bloj6CyqD/g=
Subject key identifier:   E8:A7:B9:20:2F:90:B1:6D:57:A1:5C:DF:90:FB:5B:F9:6E:F3:04:17
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       01A0CCA39D2D81394D33B9457F6A013D57C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number:          1580
Signing time:             Wed 23 Sep 2026 05:01:09 +0000
Manifest this update:     Wed 23 Sep 2026 05:01:09 +0000
Manifest next update:     Thu 24 Sep 2026 05:01:09 +0000
Files and hashes:         1: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: l8YCiGHnYC3jpC32UrNKk9i3Ua8q/UUQlf//DrXnIhs=)
                          2: PvoOGCPl9_uRABB0axn6ZoPjSfw.roa (hash: R0bL5Wz36hlUi6u7PbZBlbeTSW6yCz9pE1JTno5Jnd4=)
                          3: f2RzKPqHeeSwshGgaI03kVuo9ZY.roa (hash: vcuUb/xuMjhKt4KDFSNHCcpL3GkZRwfPEaVwfoajM48=)
                          4: v6DHuOuOQo5ADYQoffR2c_O6QS8.roa (hash: i6eWCZPdAHUsEhQJa4fw9gAODBNNYJr2pgzQXjsynVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:9d:2d:81:39:4d:33:b9:45:7f:6a:01:3d:57:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Sep 23 05:01:09 2026 GMT
            Not After : Sep 24 05:01:09 2026 GMT
        Subject: CN=e8a7b9202f90b16d57a15cdf90fb5bf96ef30417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:64:5b:96:4f:1a:65:18:c3:d9:4d:c1:be:
                    c6:56:a2:21:35:e3:4d:ed:14:88:d4:3b:38:35:6a:
                    f9:d0:d5:5c:87:e6:81:18:10:18:44:94:49:30:78:
                    05:ce:20:7f:fe:e2:be:aa:61:24:c8:12:6a:9a:62:
                    01:6d:fe:91:a0:55:3b:d4:ee:c0:f3:d9:50:a0:1c:
                    ee:27:5c:5c:71:5d:b6:2c:19:18:3d:4f:da:22:a3:
                    d7:cd:07:dd:c1:42:0a:e9:18:40:cc:87:1a:72:97:
                    ea:77:a6:e4:4f:f6:36:71:cd:11:1d:9e:eb:15:29:
                    6d:ba:a2:1b:0f:5b:cf:1b:c0:50:9b:5a:10:05:d8:
                    4e:dd:68:43:ed:bb:ad:93:db:ac:8c:bc:30:34:99:
                    98:4b:bb:6f:38:e6:41:b9:fa:1e:e8:d8:5e:ec:8f:
                    36:b8:27:40:81:dd:eb:22:7d:61:1f:81:b5:1d:3b:
                    34:1d:b8:0f:cf:43:1a:62:e6:d8:65:5d:ed:7c:eb:
                    35:b4:4e:36:81:3c:ec:8c:bb:b0:f9:98:92:b3:5d:
                    20:2b:e8:60:a5:0f:46:26:93:6e:40:36:f5:60:85:
                    7b:d9:e4:7e:0e:e9:d0:38:b8:b8:7d:dd:f5:3b:fd:
                    27:4d:cd:c1:9e:4f:56:ec:81:33:98:d2:e7:84:f3:
                    aa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:B9:20:2F:90:B1:6D:57:A1:5C:DF:90:FB:5B:F9:6E:F3:04:17
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:04:80:fe:0c:d0:a8:4b:f4:c4:7f:6a:26:19:6a:51:c3:
         1e:c4:27:f7:a4:27:80:16:66:1c:51:54:4e:47:c4:aa:94:5d:
         31:9d:a6:34:d5:b3:30:dc:5a:7c:ab:12:aa:3a:f9:7f:df:97:
         ae:c9:bd:fe:e4:dd:c7:5f:a2:79:85:90:1b:a1:6a:75:8d:e5:
         e6:55:c0:61:54:df:91:db:44:fb:56:c6:61:05:58:c9:f1:9b:
         c4:5a:c0:d1:03:fa:9c:1e:88:6f:c0:a4:56:9b:0c:34:a6:8f:
         a7:30:b5:55:a2:9d:d2:35:14:12:d9:b6:d0:71:8e:32:03:47:
         1e:4e:79:3d:6a:79:f3:cc:5d:32:67:be:a1:d5:d3:18:a0:77:
         6c:ba:90:11:b9:45:a7:5f:df:e9:97:16:04:26:bb:8d:c8:13:
         62:36:c0:3b:33:68:65:ee:aa:5b:d7:40:19:d7:77:e9:37:26:
         7d:21:98:71:5b:27:ae:ba:9b:12:27:91:ab:c1:cd:db:a9:ec:
         9e:9e:d1:5c:e1:6f:37:45:54:b9:bc:d5:33:c9:fe:a4:75:5a:
         7f:1f:c1:68:da:39:9f:37:f3:7d:de:ae:e6:5a:08:e5:f1:2d:
         47:57:fd:24:86:80:19:45:33:e3:08:66:b3:25:6a:20:26:bc:
         5f:69:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:29:52 2026 by rpki-client