Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          BmRGefyxVROoRtgORka1MTN6RMCnjWhweFgGM2QDrSg=
Subject key identifier:   1B:D7:D8:8F:E3:64:BA:17:A6:47:20:41:1B:58:68:E1:EA:78:20:4B
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       019FACE442121C26C2BDB841C4305D6644AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 08:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:07 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: QGU8xaBjIAjKBfzLv06oUbv2l54B6nuNC5VCBBi8wSw=)
                          2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:42:12:1c:26:c2:bd:b8:41:c4:30:5d:66:44:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: Jul 29 08:01:07 2026 GMT
            Not After : Jul 30 08:01:07 2026 GMT
        Subject: CN=1bd7d88fe364ba17a64720411b5868e1ea78204b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:3a:30:5f:2f:8f:ba:46:28:41:ae:d5:b4:
                    be:44:d0:e5:e7:ce:3d:89:8e:80:7e:99:da:40:9b:
                    c3:ed:a6:41:b3:93:0e:d9:68:11:37:87:b9:80:b2:
                    85:0c:1e:1e:be:b8:b7:66:0f:c9:7a:29:ac:04:d3:
                    8a:a0:84:7a:90:a1:49:0c:12:12:b3:9a:29:c4:19:
                    d5:41:76:dc:e8:c1:59:ea:85:28:55:84:cc:3d:a8:
                    f7:3d:59:22:40:5a:bc:42:00:35:2e:11:04:ca:15:
                    5a:d8:01:7e:5b:fe:b5:5a:50:6a:30:83:69:18:31:
                    07:4f:eb:df:b4:ee:db:43:08:94:13:65:cf:8c:66:
                    99:12:f4:72:0a:0b:1f:14:51:c8:37:3b:2c:d7:60:
                    58:84:cd:aa:30:50:be:fe:6c:da:37:0a:70:4a:61:
                    86:79:c9:db:cb:26:10:35:22:9b:24:a1:ae:19:43:
                    62:6a:8f:c2:ac:7c:7f:30:d0:5b:9d:78:b5:87:19:
                    fe:e0:46:b3:98:d6:b3:c7:e2:2a:41:e7:8b:9d:e5:
                    46:17:d2:aa:ad:51:68:8c:d6:6b:26:5a:23:23:35:
                    11:51:ff:03:87:48:77:66:1a:2c:3e:eb:df:6b:78:
                    03:6a:c7:60:b2:06:9c:ea:e8:21:33:9f:c8:c5:ba:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D7:D8:8F:E3:64:BA:17:A6:47:20:41:1B:58:68:E1:EA:78:20:4B
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:cb:01:8b:8e:b5:bd:07:4e:98:b6:fb:f2:29:a3:69:bc:b9:
         f5:82:66:96:fa:f4:c9:99:2e:8b:8c:41:75:c7:5d:7b:3e:a3:
         38:7a:d6:c1:e6:1b:df:1a:88:06:5f:ea:e5:cf:bb:f2:c0:68:
         a7:4c:30:df:6f:35:bd:33:7c:b0:ec:9a:c8:99:b9:e2:15:49:
         21:9a:44:e7:82:e9:db:cf:53:f4:11:66:d4:92:5b:60:ec:5f:
         ae:c2:68:49:e1:05:d4:4b:e0:d0:0f:9f:78:c2:7c:68:de:c6:
         12:df:04:65:48:1c:26:ee:81:a9:87:ad:0e:46:ae:19:fc:89:
         5f:63:ff:10:c3:5f:1b:48:7a:57:f4:42:3a:f3:4f:77:55:d1:
         fe:fa:5e:87:53:b4:f5:e6:41:cd:20:f5:81:5e:99:96:6a:35:
         58:15:00:bb:ea:43:d0:df:40:b9:b7:8e:ea:bf:db:d0:94:2b:
         5b:c5:84:ae:1c:0a:1e:6e:c2:1e:eb:73:75:ed:32:e2:f7:db:
         96:cf:b6:ec:28:57:3a:50:5f:a3:03:d8:e7:94:39:db:66:90:
         5c:2b:c3:55:d0:3c:42:4f:27:70:7c:28:90:37:8d:5b:fa:43:
         75:06:45:03:e5:27:52:5c:dd:84:45:d5:ae:74:72:da:57:c1:
         52:3d:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:33 2026 by rpki-client