Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          iukN7NiqOTWfvTxMQ80P5bL4oFUXBJqmfRW9sWAErYM=
Subject key identifier:   6E:0A:EC:6F:6E:27:71:CE:FC:05:D6:F3:0F:DD:A4:48:FC:41:B2:93
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       019FAC763D38E09FC9FFD55CA736BCF8DD1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          0B35
Signing time:             Wed 29 Jul 2026 06:00:57 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:57 +0000
Files and hashes:         1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: Y5UiY+B6UTjmV14UUTJk+mus0/JMsiNMVt46fB4dPd4=)
                          2: o3r3LVeAg0XhbGCZk-y6DwCxou4.roa (hash: uuHSHcLGNqdUCeJk1xcr0aW7E5+DD4Bm+aWpzxn7+gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:3d:38:e0:9f:c9:ff:d5:5c:a7:36:bc:f8:dd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Jul 29 06:00:57 2026 GMT
            Not After : Jul 30 06:00:57 2026 GMT
        Subject: CN=6e0aec6f6e2771cefc05d6f30fdda448fc41b293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:91:d3:f8:22:5a:f1:e3:65:c8:f2:85:a3:
                    b7:81:1e:e4:ed:0b:0c:a3:69:9b:18:0a:f9:45:ac:
                    34:5b:57:e3:6e:64:1f:8e:f9:6b:f4:74:61:31:e8:
                    d3:57:22:c4:4d:91:53:82:c7:b9:a2:36:2b:37:d6:
                    43:f1:19:16:02:6d:4d:8c:a4:4e:51:c2:11:d8:df:
                    b6:60:ac:30:ba:f4:b5:8a:03:00:03:69:43:98:94:
                    a6:cb:28:5b:92:07:8a:d1:84:34:41:a6:fe:04:b4:
                    63:44:fb:b0:95:0d:21:4e:3c:cb:d9:2d:aa:2e:65:
                    1b:d9:d4:0a:8a:55:5b:3d:80:37:58:da:f7:52:76:
                    e6:f1:5a:d2:61:83:60:53:cf:02:43:ec:96:6f:25:
                    68:af:21:39:03:8d:2e:b0:a2:e0:00:c8:14:14:3c:
                    37:6d:f8:a1:26:42:34:af:d4:d0:13:97:9a:0c:6b:
                    28:79:5a:4b:e1:fd:6d:34:21:48:b1:4b:c9:1f:77:
                    33:46:3c:68:e8:2a:70:f5:4b:6e:2d:99:8a:41:23:
                    69:e6:78:fa:f9:ed:f4:22:32:72:04:a4:96:1e:c5:
                    4f:97:09:24:bc:33:3d:65:43:23:42:fe:9a:fc:5b:
                    7f:b3:64:42:06:32:b6:ce:77:9e:96:82:6d:f8:aa:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0A:EC:6F:6E:27:71:CE:FC:05:D6:F3:0F:DD:A4:48:FC:41:B2:93
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:5a:9c:44:b2:21:7e:db:f6:c0:e7:90:6c:9a:09:1d:2e:
         12:4e:38:3d:30:f2:55:1d:fa:d4:7c:f1:11:3e:ef:05:bb:30:
         ee:41:4b:e7:05:80:15:9a:d7:68:90:fe:3e:7f:24:98:87:7b:
         4d:30:39:a5:8c:0b:3b:7b:08:82:e8:1e:3c:78:8b:b9:06:6d:
         5a:3f:81:c8:73:6e:65:e5:3f:56:d0:78:68:82:82:82:02:07:
         21:19:b6:6a:fd:b1:e0:c4:22:27:00:c9:f4:42:67:04:9b:95:
         1a:6f:69:ec:34:24:0d:9d:0b:de:da:0e:7f:ce:75:9f:4f:de:
         23:5a:40:ed:46:fb:33:aa:f5:fb:f8:5c:cf:15:8e:4f:33:29:
         70:18:79:14:0e:5e:33:63:2e:ea:c0:c7:b8:f4:f7:ca:3f:53:
         ef:e3:9d:8d:ae:08:f7:2f:98:97:8a:d7:15:d6:91:46:31:e8:
         ed:47:67:7b:48:42:a3:e7:5b:ad:3a:2a:41:c5:20:2d:96:26:
         0b:d9:f0:fd:d3:29:b8:67:02:51:92:58:91:d2:c3:d0:77:5a:
         9c:df:3e:3c:7c:43:7e:bc:0f:7a:a4:18:ce:27:59:a8:3e:6b:
         a1:b2:bd:97:59:17:a8:d6:34:54:03:ee:66:28:43:fd:5f:f3:
         c4:fd:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:48 2026 by rpki-client