Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File:                     GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier:          7fjEF9clA5cQY6EUVxcW00SnQRubfpk/LMQLviVseuE=
Subject key identifier:   E7:CF:33:E5:A2:25:06:8C:3F:1A:4D:3B:A4:F3:9F:15:CE:30:80:C3
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer:       /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial:       019FAB63520DF68A0C76436B2FE6EEC3C167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 01:00:40 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:40 +0000
Files and hashes:         1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: ItYh+OiRgQEWbHNix46nji8iT2oOH/19MqdGUDGIrIY=)
                          2: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (hash: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:52:0d:f6:8a:0c:76:43:6b:2f:e6:ee:c3:c1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
        Validity
            Not Before: Jul 29 01:00:40 2026 GMT
            Not After : Jul 30 01:00:40 2026 GMT
        Subject: CN=e7cf33e5a225068c3f1a4d3ba4f39f15ce3080c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:a1:42:78:c5:a7:46:e6:d9:07:34:85:c1:
                    7d:c5:b0:d5:fd:c8:d3:31:c6:90:01:20:71:c5:18:
                    91:69:55:12:37:eb:c9:ab:2e:da:5f:56:b4:44:7a:
                    ae:5b:f1:fe:32:a2:81:09:75:2b:e9:d7:cf:c0:5a:
                    94:17:e9:e5:3a:1d:f6:ba:2c:57:56:3a:77:bd:76:
                    71:f7:b0:64:e1:fb:1f:7d:8b:7f:53:90:67:c8:bd:
                    f6:2b:a5:9e:fe:92:d2:b2:18:f4:ea:37:b5:96:21:
                    47:f5:9d:ed:f2:78:84:19:7c:b3:cc:c2:12:a2:80:
                    cc:45:2c:12:39:79:b9:3c:7a:91:e2:7b:72:07:b7:
                    a9:e7:cd:e6:31:0f:c2:db:65:4d:3a:a5:cf:d5:a8:
                    e1:b2:c6:7f:44:d3:5e:09:4a:29:21:95:1c:98:d4:
                    aa:9b:6f:47:e5:1b:74:43:a7:08:9b:54:6d:d1:a1:
                    b9:0e:b1:9e:36:a3:7c:5b:7c:bc:a4:f3:88:de:2c:
                    38:e3:76:4a:a8:7f:ef:75:50:58:83:ac:82:db:bb:
                    e2:d8:c6:8c:79:a1:9c:dd:de:15:fd:5f:88:68:0f:
                    68:56:fc:3d:02:ac:fb:f6:a7:ef:71:28:34:8f:d9:
                    fd:52:9d:46:3a:97:12:ea:ba:59:48:d5:ee:b9:05:
                    fa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CF:33:E5:A2:25:06:8C:3F:1A:4D:3B:A4:F3:9F:15:CE:30:80:C3
            X509v3 Authority Key Identifier:
                keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:6f:b5:67:06:b5:c7:a2:71:87:84:8d:ba:8a:f4:3c:ff:
         7d:89:da:b2:10:21:e6:3b:6f:25:dc:f4:1e:ec:8e:9f:ad:ca:
         0e:6f:a4:5f:f8:1e:82:75:8f:58:17:e2:38:37:54:e4:17:49:
         33:5f:da:e6:5d:70:6c:09:cb:e2:50:a7:c8:d3:23:d9:35:97:
         17:fd:5a:71:ca:33:0c:b8:c2:d9:5f:0e:cd:c6:f8:d4:c6:6d:
         50:49:a8:a3:a3:c9:58:d7:e4:7b:06:6a:80:4f:ff:54:10:d6:
         e5:08:48:e9:32:5c:c6:7d:4c:df:82:7a:86:ef:85:8d:96:56:
         25:84:eb:49:c1:51:68:98:50:c7:f7:11:bb:0c:65:9c:b9:13:
         22:19:71:6d:3e:89:65:78:3c:99:fb:96:ce:76:39:3f:f4:9a:
         64:56:97:b7:e9:5c:24:be:98:75:7a:b1:8f:65:b3:98:b0:52:
         1b:eb:b5:d6:0c:eb:8b:8f:1a:f5:41:29:95:70:ff:ef:d3:2a:
         4b:82:d4:ec:bc:d7:4c:f9:69:4f:8e:80:1e:46:d6:ca:31:58:
         fd:ca:cf:c5:cf:0c:a6:f3:67:cb:da:37:aa:2e:90:1a:ec:98:
         0f:30:60:ef:0b:96:35:b4:d4:c0:42:54:68:f9:fb:e2:8e:e1:
         59:01:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:52 2026 by rpki-client