Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File:                     gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier:          Cu4j1iW+2mlqFeMq4GJ41ViOFrw4koa44I0PzwQbsiQ=
Subject key identifier:   13:8D:E1:7B:A0:1B:3B:4D:FC:59:09:C0:BA:00:DF:75:43:44:09:68
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer:       /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial:       019FAA1A258EE8319D12BECEE6D6BD0D88B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number:          0578
Signing time:             Tue 28 Jul 2026 19:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:07 +0000
Files and hashes:         1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: 8qNpFXYkvRw8Iq7yJ2OmLfxNSVoH5YXtKuK56eBXcCY=)
                          2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:25:8e:e8:31:9d:12:be:ce:e6:d6:bd:0d:88:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
        Validity
            Not Before: Jul 28 19:01:07 2026 GMT
            Not After : Jul 29 19:01:07 2026 GMT
        Subject: CN=138de17ba01b3b4dfc5909c0ba00df7543440968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:7f:7d:07:f4:df:0c:b1:67:99:ce:8c:07:
                    ca:07:fe:5c:18:81:5b:95:3f:51:99:c6:e2:3d:c7:
                    51:38:92:87:d6:c8:18:22:44:d3:e9:79:4b:90:f2:
                    e9:3b:ec:65:e7:82:44:ba:d9:12:30:5e:ad:5e:ab:
                    be:6b:ca:71:e0:44:b6:31:75:ad:1d:f8:1e:3e:dc:
                    1c:f0:30:87:bb:39:d6:92:57:15:7a:5b:62:59:93:
                    18:e5:84:d6:80:8c:5d:3a:56:34:85:3b:0a:a2:ef:
                    ee:fe:3b:11:31:c8:3f:03:28:1c:6a:04:25:2f:69:
                    af:20:97:67:70:9a:0b:66:2d:08:16:90:62:5a:fe:
                    91:1a:7d:69:32:0f:98:9b:b2:ae:21:68:64:f7:d9:
                    d8:12:e8:f0:03:af:dd:8c:9b:a6:32:81:55:92:2d:
                    7c:52:6c:77:ba:f2:55:03:46:54:4b:9e:b1:68:b4:
                    bd:df:88:6a:0b:17:98:63:8f:d9:eb:aa:b5:bd:5d:
                    6f:c9:75:13:f5:5a:28:48:7b:dc:d5:fd:3b:99:de:
                    0d:a9:64:fb:c8:9a:73:06:33:a1:66:05:58:1c:f9:
                    83:0e:57:5a:e5:eb:96:84:bd:11:39:12:1e:a9:b7:
                    59:c3:b8:39:a4:33:02:c3:ad:d6:3a:19:0e:40:4d:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8D:E1:7B:A0:1B:3B:4D:FC:59:09:C0:BA:00:DF:75:43:44:09:68
            X509v3 Authority Key Identifier:
                keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:31:53:96:e4:08:81:5a:9d:b5:2c:42:7a:12:7a:9e:bc:a0:
         ba:e0:16:dc:c7:35:79:0f:92:64:c4:6d:61:74:f2:71:04:74:
         b8:0d:f4:6b:86:38:8a:cd:8a:5d:67:f1:2d:93:3e:82:98:a4:
         29:3b:b8:51:a9:eb:06:13:07:5c:8d:c3:80:55:92:76:65:b7:
         eb:84:ad:98:66:a7:07:aa:1d:dd:14:bf:a1:09:48:2f:a5:82:
         35:fa:fd:3d:56:82:0f:80:29:c5:09:99:f8:c8:1b:4b:69:26:
         00:0d:0d:02:b6:f2:50:60:a0:47:09:7e:6a:29:61:6d:ef:b2:
         02:ce:46:6a:0f:18:a6:63:7b:ff:a7:66:cf:59:83:8d:b6:2f:
         13:aa:97:4d:89:59:a0:3a:44:5f:7b:f9:46:d1:4e:dc:cc:15:
         ce:8c:e8:74:1d:0e:08:6b:6a:bf:0e:0f:1b:d9:a5:0b:b2:c4:
         38:d0:25:23:90:57:3e:5b:2e:a0:37:cf:31:af:52:f7:92:f9:
         01:c0:b4:5b:a5:f1:a2:d2:97:25:5a:90:94:c2:8b:62:62:db:
         da:f4:1c:06:c4:80:5f:7e:9e:22:9e:e5:20:ea:6f:20:4d:1a:
         8b:17:f2:3f:c2:ea:60:64:00:c3:cf:99:cc:6c:73:63:64:db:
         f0:f7:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:25 2026 by rpki-client