Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File:                     GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier:          fZOIR45SQXK9HypvkY2DFxjO8UA3c3nsbD1SgFn9CRw=
Subject key identifier:   F4:45:E8:A2:E9:5F:4D:6E:C7:9F:A3:D0:83:1E:15:80:C6:AC:28:FD
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer:       /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial:       019FAC083CC40FC3D76B095E9BCF52573905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number:          BC
Signing time:             Wed 29 Jul 2026 04:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:48 +0000
Files and hashes:         1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: cB6ChofFxG5DwQN3vwlKGCPo97ZM8ZBYEj44W6GSpcQ=)
                          2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:3c:c4:0f:c3:d7:6b:09:5e:9b:cf:52:57:39:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
        Validity
            Not Before: Jul 29 04:00:48 2026 GMT
            Not After : Jul 30 04:00:48 2026 GMT
        Subject: CN=f445e8a2e95f4d6ec79fa3d0831e1580c6ac28fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:1a:22:db:e2:47:12:d3:52:3c:b5:96:85:
                    e3:73:dc:54:2e:e8:0c:10:1a:dd:df:74:60:b2:9b:
                    db:78:92:cf:eb:82:c0:8e:3b:db:30:f9:a3:e9:42:
                    27:07:47:5a:1c:1b:02:7d:75:60:3f:de:ef:57:1f:
                    d7:d0:ef:82:8f:2b:92:5b:07:ac:6d:0f:4d:d4:fb:
                    5e:81:aa:3d:fb:33:99:18:7b:d5:65:c3:4b:d8:0a:
                    39:ea:e9:cf:7c:b7:f6:6c:04:48:fe:0e:b6:96:f2:
                    78:2d:b9:61:58:72:87:69:04:c3:0e:db:5d:51:39:
                    1a:31:96:db:db:f6:ee:10:3b:3a:0f:58:0a:2c:44:
                    50:77:7f:f9:2a:a8:ba:7b:ea:99:b2:55:02:a7:65:
                    64:6e:96:c6:60:1e:16:a8:00:88:3d:c7:6a:04:7c:
                    54:4b:ae:74:d6:81:d2:65:72:65:c0:99:43:4f:a2:
                    80:41:cb:d7:d3:38:85:e7:d1:0c:6b:5c:06:25:f6:
                    05:87:09:8e:a3:ee:84:25:3d:2d:84:94:54:91:b1:
                    b0:66:5d:18:02:b5:39:6b:19:55:ca:22:b3:4a:bc:
                    59:21:b5:72:b8:c3:5b:26:9b:3b:c9:37:8f:d0:13:
                    8a:3a:62:8a:8b:fa:64:84:b6:9b:ab:e3:be:0b:2e:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:45:E8:A2:E9:5F:4D:6E:C7:9F:A3:D0:83:1E:15:80:C6:AC:28:FD
            X509v3 Authority Key Identifier:
                keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:82:a9:12:63:d6:0b:4e:c8:c5:dd:e5:d6:12:6b:47:19:84:
         f0:18:c3:dd:b0:61:ba:8f:e8:65:79:72:c6:1a:b1:7a:be:fc:
         d0:9a:d9:08:9b:a7:22:b2:7f:98:32:53:96:f0:bb:4e:1f:f7:
         20:e5:4b:f9:0f:de:2a:d0:24:1d:f8:11:ef:11:ab:63:7c:c7:
         a6:ec:1d:dc:a8:35:71:d4:b7:11:30:eb:03:a6:66:0a:19:06:
         fc:f1:9f:1d:47:80:d1:60:74:8c:2d:a3:4b:68:1f:5c:5f:64:
         ff:02:13:70:ae:fa:10:4d:4d:36:52:a2:91:aa:d9:6a:0d:28:
         7d:bb:89:71:cc:3b:cc:e2:79:57:9d:7a:11:a5:78:a7:4a:cc:
         7c:c7:6a:48:59:19:6b:0e:f0:6a:25:b8:af:1c:71:9f:37:5e:
         fb:88:4b:36:16:c3:5b:0d:42:ee:12:73:ad:41:c9:7d:47:de:
         1c:3b:7b:06:f4:19:65:af:e3:11:1e:0e:22:3e:dc:63:26:50:
         f9:51:34:29:af:48:92:eb:0a:77:e7:2c:68:35:02:a7:15:e9:
         b0:c6:64:74:8a:5c:bd:8b:f3:4d:e5:fc:e7:c3:39:07:4b:05:
         81:2d:50:82:1a:b6:5d:b4:21:40:a2:90:f0:4a:1e:32:8e:99:
         8f:9f:31:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:02 2026 by rpki-client