Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          yAkAXoEEX2IUOmZsmK51e0LweXsw8Mb1pmzU9WZ83tE=
Subject key identifier:   E8:F3:9A:96:D4:51:F8:B9:F9:57:9D:DA:31:4A:89:9A:7C:7C:40:69
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       019EC0A45C15DB2952AD53D29ECE30624856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          0AA1
Signing time:             Sat 13 Jun 2026 11:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:57 +0000
Files and hashes:         1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: mHzKV1/EFp8zerfBSLtkFWES+s8Jp1IO+uE1C3D2U4c=)
                          2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:5c:15:db:29:52:ad:53:d2:9e:ce:30:62:48:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Jun 13 11:00:57 2026 GMT
            Not After : Jun 14 11:00:57 2026 GMT
        Subject: CN=e8f39a96d451f8b9f9579dda314a899a7c7c4069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:2b:fa:0c:08:e1:51:14:05:d8:d5:1e:d4:
                    97:a3:eb:22:20:f2:ae:c6:6d:64:b3:8e:78:7f:19:
                    72:89:c2:93:1a:f7:a4:36:97:b4:98:dd:5e:2c:64:
                    b5:40:61:c4:b8:b1:4c:67:e1:dc:cb:f5:e4:15:ee:
                    b3:9a:72:7b:39:7f:6c:31:73:e2:40:b3:c6:72:06:
                    3b:4a:96:d2:f3:8a:eb:c4:64:c7:e3:af:e8:a2:8f:
                    91:e1:fc:62:54:9b:45:87:7f:5c:5d:21:0a:7f:c5:
                    82:7b:70:96:81:5a:75:9d:fb:ac:a6:53:dd:1f:93:
                    b7:06:96:f3:be:d1:a2:ea:f7:03:13:1d:2f:c6:c9:
                    16:2a:d7:0e:c7:eb:55:93:15:0b:91:1d:52:5c:83:
                    4f:4e:64:49:0b:02:76:c5:94:8b:08:53:16:d0:9e:
                    c8:6b:c7:eb:d6:fc:b7:6f:bb:5f:1d:10:cb:e1:1b:
                    33:be:3b:86:a6:e8:35:61:53:58:c8:32:df:6a:96:
                    da:9c:c0:26:5c:fc:e8:a3:ea:47:78:fd:b1:cc:37:
                    fa:28:43:2d:6c:cf:2f:c7:bb:32:13:5b:58:7b:52:
                    57:ff:df:1e:43:94:44:2a:89:20:1f:9e:f9:e8:56:
                    ba:33:8f:46:6a:f0:f6:26:09:20:01:9f:91:40:cf:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F3:9A:96:D4:51:F8:B9:F9:57:9D:DA:31:4A:89:9A:7C:7C:40:69
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c8:be:8d:05:53:8c:03:41:dc:3b:d9:d5:50:0f:f5:39:4f:
         55:bf:a2:67:be:ec:72:ee:54:34:02:e6:36:74:b9:d5:03:80:
         1e:f2:ee:e7:10:2f:89:41:9d:27:c4:a5:bb:3a:73:73:fc:e1:
         84:8d:db:39:ad:17:55:b9:9b:fa:86:fe:3c:2e:ed:ac:1e:b0:
         85:d2:9f:68:55:39:aa:03:19:58:ad:d7:2f:e3:7e:fc:70:5b:
         14:30:63:a7:4a:fd:35:0f:23:18:4b:41:c8:81:eb:0b:fb:c9:
         e8:01:7e:7e:4c:af:69:44:39:2b:e4:75:95:fe:3d:66:af:66:
         bd:95:b4:db:2b:94:65:a8:36:02:f4:61:26:ac:a9:0a:8e:3f:
         f0:e2:8a:f3:0f:7b:9d:77:79:1b:76:9d:56:e0:99:15:21:70:
         82:d9:7d:11:ca:69:c0:d4:a3:8c:9a:5a:d1:87:ad:b2:d3:de:
         92:cf:34:7c:7a:ad:ad:74:8d:b9:3b:cc:3a:4e:96:38:05:02:
         51:81:19:da:67:08:37:b1:35:b4:6e:e7:73:32:84:50:bc:47:
         ce:bb:63:67:1e:8a:89:ac:be:12:69:aa:2f:0a:d9:09:fe:ef:
         2b:54:59:ba:62:13:f5:51:08:ed:ac:aa:6b:79:18:83:91:d5:
         9f:f0:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:33 2026 by rpki-client