Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          SjhWrlnR25y01spoOsppCU8l2mUcFw0CTNHtnasYoGA=
Subject key identifier:   24:A5:DD:D8:91:66:57:30:D3:23:8F:39:C5:16:60:01:42:6C:9E:D9
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       019FAC3F67F4724BDFDF032254F878D44784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          0B1B
Signing time:             Wed 29 Jul 2026 05:01:04 +0000
Manifest this update:     Wed 29 Jul 2026 05:01:04 +0000
Manifest next update:     Thu 30 Jul 2026 05:01:04 +0000
Files and hashes:         1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: k3Ka5aitMikx3bn3OQTW/g1Y/1saXLrdFPfnEKdh7w0=)
                          2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:67:f4:72:4b:df:df:03:22:54:f8:78:d4:47:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Jul 29 05:01:04 2026 GMT
            Not After : Jul 30 05:01:04 2026 GMT
        Subject: CN=24a5ddd891665730d3238f39c5166001426c9ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:c7:57:05:8f:73:ca:f2:38:5b:36:00:62:
                    56:9e:4f:1f:9b:ca:73:d1:70:74:95:47:98:9a:d9:
                    66:7f:33:cb:a3:01:7c:7b:7f:23:aa:e7:ab:0a:a9:
                    14:54:de:ed:a9:e1:f5:ba:81:07:94:66:35:cd:da:
                    cd:0a:8e:d3:c6:0e:5d:ff:93:97:f1:bb:0a:65:64:
                    de:8b:5f:d3:7a:9d:22:a1:2c:6a:7d:2f:8f:9b:c6:
                    70:38:14:40:9a:30:d6:a2:b5:04:db:48:1f:f6:b8:
                    5b:a4:6b:42:8c:c4:a2:a7:99:77:3a:ae:03:4d:54:
                    84:77:68:5f:a5:60:87:f0:ce:69:a4:55:65:ae:a2:
                    e4:71:ba:86:c9:3b:bb:05:85:ae:17:d5:da:48:97:
                    cc:43:bd:e2:a1:1f:71:92:a1:15:5f:15:e5:bf:57:
                    ab:6e:e5:ee:e8:a9:ed:72:18:ed:e5:7c:a5:7a:f6:
                    73:5d:c8:a8:07:f0:6b:da:d0:76:33:37:74:8b:22:
                    a8:89:81:ca:80:2a:e0:c2:fd:2b:49:57:54:f4:43:
                    0e:20:22:d6:1e:7d:38:81:6e:d3:c6:ec:4c:1c:e4:
                    43:de:9e:68:e6:10:a1:7e:b3:bb:f1:71:66:d0:1c:
                    b7:36:51:4c:2a:27:75:a7:09:cc:20:8e:aa:d8:7b:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:DD:D8:91:66:57:30:D3:23:8F:39:C5:16:60:01:42:6C:9E:D9
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:84:f4:21:be:d1:59:46:7a:ae:ed:21:60:c1:42:1b:c1:6d:
         9c:f1:80:cb:bb:8f:ba:dc:71:63:95:37:ee:6e:c7:53:36:ee:
         e7:3e:82:d8:bf:20:8b:59:c5:fe:7c:bd:1d:ea:f4:ac:de:51:
         a5:a0:b1:ca:a9:c6:68:89:7c:92:db:b6:12:ca:a7:3f:4c:ad:
         97:af:3d:b0:2e:9f:56:aa:c1:e0:41:26:a5:d6:ad:d8:f6:e7:
         56:fc:be:2e:95:97:67:9c:da:d2:29:48:6a:98:69:24:dc:64:
         12:d1:e1:75:af:88:91:ab:f4:2d:97:ba:7c:ef:88:6a:1f:5d:
         a6:41:36:20:de:91:77:bf:e9:ad:5c:f1:c1:72:89:73:d6:e6:
         cb:a9:18:c1:a9:a5:24:28:45:fe:b6:bf:67:21:68:16:a2:da:
         54:74:16:db:ec:db:ad:3b:4b:26:01:ae:25:03:2b:b7:ad:a4:
         f5:08:a1:ec:39:b8:a9:fe:77:e5:b0:f5:4d:79:c0:5b:42:fc:
         16:ca:3d:ee:33:d1:2e:c0:d9:35:e2:6b:7a:b0:29:5e:d3:2f:
         8d:cf:2f:a1:44:1c:78:11:b5:db:52:be:9f:70:1a:de:fa:03:
         c7:9f:25:a4:98:de:07:1e:93:64:d0:86:32:4a:cd:2f:8c:41:
         8e:e3:95:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sP2f0ckvf3wMiVPh41EeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0
MThkZjYwHhcNMjYwNzI5MDUwMTA0WhcNMjYwNzMwMDUwMTA0WjAzMTEwLwYDVQQD
EygyNGE1ZGRkODkxNjY1NzMwZDMyMzhmMzljNTE2NjAwMTQyNmM5ZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7/HVwWPc8ryOFs2AGJWnk8fm8pz
0XB0lUeYmtlmfzPLowF8e38jquerCqkUVN7tqeH1uoEHlGY1zdrNCo7Txg5d/5OX
8bsKZWTei1/Tep0ioSxqfS+Pm8ZwOBRAmjDWorUE20gf9rhbpGtCjMSip5l3Oq4D
TVSEd2hfpWCH8M5ppFVlrqLkcbqGyTu7BYWuF9XaSJfMQ73ioR9xkqEVXxXlv1er
buXu6Kntchjt5XylevZzXcioB/Br2tB2Mzd0iyKoiYHKgCrgwv0rSVdU9EMOICLW
Hn04gW7TxuxMHORD3p5o5hChfrO78XFm0By3NlFMKid1pwnMII6q2HuGgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSl3diRZlcw0yOPOcUWYAFCbJ7ZMB8GA1UdIwQY
MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct
NjNkZjYwMzE2MWM5LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5
LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIT0Ib7R
WUZ6ru0hYMFCG8FtnPGAy7uPutxxY5U37m7HUzbu5z6C2L8gi1nF/ny9Her0rN5R
paCxyqnGaIl8ktu2EsqnP0ytl689sC6fVqrB4EEmpdat2PbnVvy+LpWXZ5za0ilI
aphpJNxkEtHhda+Ikav0LZe6fO+Iah9dpkE2IN6Rd7/prVzxwXKJc9bmy6kYwaml
JChF/ra/ZyFoFqLaVHQW2+zbrTtLJgGuJQMrt62k9Qih7Dm4qf535bD1TXnAW0L8
Fso97jPRLsDZNeJrerApXtMvjc8voUQceBG121K+n3Aa3voDx58lpJjeBx6TZNCG
MkrNL4xBjuOVNA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:36 2026 by rpki-client