Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
File:                     gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json)
Hash identifier:          ALLklqGZ40/tFJvW+hx1I07RRz1cUhkZGyOWn39Zgzw=
Subject key identifier:   4F:26:94:E3:99:FD:68:18:4B:83:95:34:95:9C:A3:D8:8E:54:F0:BC
Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
Certificate issuer:       /CN=80f23f429504203c189737a2074e53f2efc64fc7
Certificate serial:       019FAD522AA85F32848E6AD970FA40A12E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
Manifest number:          047A
Signing time:             Wed 29 Jul 2026 10:01:10 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:10 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:10 +0000
Files and hashes:         1: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: ACcdGDeve6CHJy9QZAuZaPrkEX2S7D9fBihFs6+70Yc=)
                          2: rng8GtvhW_7ZteA0FnuaZ2OXfUE.roa (hash: kHUVVB4FBTKzzPlqingwFv/L2jPUQKZj58gnh5dBOiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:2a:a8:5f:32:84:8e:6a:d9:70:fa:40:a1:2e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7
        Validity
            Not Before: Jul 29 10:01:10 2026 GMT
            Not After : Jul 30 10:01:10 2026 GMT
        Subject: CN=4f2694e399fd68184b839534959ca3d88e54f0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:f5:a9:5d:02:45:1f:4d:94:11:bf:2d:bc:
                    a2:e3:18:c2:f7:ff:5c:92:ea:96:89:c1:9b:80:d8:
                    2d:dc:fc:e1:46:68:44:8a:d7:ef:23:5e:06:83:37:
                    7e:70:72:5f:c1:c3:af:c4:33:da:be:6c:df:51:83:
                    09:fd:93:7b:01:4a:ba:d3:bc:ed:dd:7a:05:16:f9:
                    ad:02:c2:ab:e7:fe:cd:a7:6f:71:d6:94:a5:d7:04:
                    c6:95:bd:7e:fa:05:bd:08:cb:7a:aa:96:9f:11:86:
                    b9:45:a3:a0:c7:eb:d5:6b:60:b9:e8:d6:4c:08:2f:
                    5f:79:c9:81:67:4c:d1:98:3b:6b:90:ea:32:d6:f6:
                    ae:ca:40:d8:01:93:04:06:06:3a:62:80:e0:c1:15:
                    32:e5:ec:22:4a:39:f4:e2:ce:e3:c6:bb:a6:a1:2c:
                    b5:6c:80:d0:d8:f0:d0:2c:df:89:2d:23:b4:a4:04:
                    68:8b:de:c3:f1:65:12:14:98:25:7d:dd:1d:28:bd:
                    94:e4:fc:b3:44:98:2d:2f:e7:04:6a:7f:37:5e:03:
                    d5:9a:75:06:f3:54:2a:2b:44:fc:38:cc:2e:84:5c:
                    49:2b:c3:51:34:57:fd:56:6e:04:d2:43:1b:0e:6b:
                    c2:d8:53:ab:f8:7c:55:24:04:a9:e2:f6:0d:29:9a:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:26:94:E3:99:FD:68:18:4B:83:95:34:95:9C:A3:D8:8E:54:F0:BC
            X509v3 Authority Key Identifier:
                keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ba:d9:83:81:44:9a:b5:28:46:c8:22:cb:22:b5:4d:ee:c6:
         b1:a4:46:61:5a:f4:8d:d8:ee:38:40:7f:7e:e1:d6:00:7e:02:
         70:92:2b:04:a3:45:1e:19:44:39:41:ad:ca:c3:28:cc:71:f6:
         ee:0c:2c:57:63:ed:d8:52:d5:45:11:d8:b2:cf:78:f7:11:8e:
         c3:7a:6e:af:35:70:db:06:a5:44:5e:ac:e7:3b:25:8e:40:82:
         e4:05:21:25:e7:c2:8c:f0:c1:0e:3d:8b:fc:94:74:6e:2b:cf:
         0b:aa:7d:0e:3b:79:1c:91:f9:7f:e8:ad:72:e2:29:12:fe:8f:
         55:42:6c:10:95:8c:50:07:cf:07:e7:02:54:46:a2:cc:35:2e:
         ae:19:b8:12:7d:56:79:b0:fe:f4:44:28:be:05:a8:b9:b5:9e:
         cf:3d:46:89:53:ba:24:8e:4d:23:0f:30:39:ab:b1:4f:a8:cf:
         20:0c:b1:58:09:d4:a6:39:33:52:37:06:1b:01:66:8f:39:5f:
         f8:de:db:2d:04:88:0f:03:ed:33:94:3c:5e:41:33:30:f7:a9:
         e8:6d:b3:73:52:98:74:81:fb:67:ec:a7:ed:e2:b8:1b:9a:1c:
         54:43:5d:cf:f3:d8:c4:c3:be:8f:a7:2b:30:54:6e:3f:eb:f2:
         59:d7:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:34:00 2026 by rpki-client