Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          sDEKzQAh3NaN9tu9kbazNnpxsbSfFnOpJy+z6fpXIOw=
Subject key identifier:   FF:A0:23:BC:AE:CA:B6:FD:25:EB:8F:5C:3A:84:0B:2B:78:50:2C:75
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       019FAB633E5027CE18AADABA5C104149D313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          19D9
Signing time:             Wed 29 Jul 2026 01:00:35 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:35 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:35 +0000
Files and hashes:         1: NZ202JDARGMozqemjOm18XWqeB4.roa (hash: EMsYlcYoxjdRaOpIk5ySMPKn2gsFMeYDx9Ik13Whe1E=)
                          2: VizEqnthMjQ52TLR8h7x9BYDAIM.roa (hash: 41b89AhKzVApaqcIg1s1Z2VRJk8VnvLCBhm/gL3LlSM=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: zY2FZQI2nbtRO5/Fz2VRR34W+qprqWgKDC6Pg8N1mq0=)
                          4: jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa (hash: CUYbXow71FwfWTHYT6HzHF7ERdH4KcdRAJs9h9PrlE4=)
                          5: loP1-9Yxdj4AbH_rrSqa5GcHgiQ.roa (hash: M03ifXkLsZpfGj/FUbAJuSvBmjEYd8yCYHsKRiZZ6dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:3e:50:27:ce:18:aa:da:ba:5c:10:41:49:d3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Jul 29 01:00:35 2026 GMT
            Not After : Jul 30 01:00:35 2026 GMT
        Subject: CN=ffa023bcaecab6fd25eb8f5c3a840b2b78502c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:56:8e:57:55:b8:36:b8:31:72:98:2c:e3:
                    e9:82:e0:d2:98:f0:35:8a:a0:14:1c:7a:9b:59:1c:
                    5e:94:69:81:7e:44:14:d9:c9:b8:48:2d:06:4d:a8:
                    67:f4:b2:79:16:d5:81:a4:5e:45:5e:ed:86:a8:9e:
                    28:f7:7a:77:fa:ed:47:2b:fa:7b:57:1b:27:7d:34:
                    f9:ab:ba:fc:98:6b:f5:c6:62:86:98:0b:d6:8e:90:
                    27:cb:c1:7c:27:86:cf:4f:7c:dc:92:df:c6:f0:e1:
                    8c:ae:7a:40:78:d1:8e:4d:29:74:5d:f5:81:f2:14:
                    1d:d9:e0:37:4a:bc:e2:58:71:6e:5d:84:fb:ee:e9:
                    41:81:63:7f:5b:f5:67:c5:6b:a2:0e:57:fb:c2:46:
                    77:fb:2d:60:5a:26:54:c3:0a:ff:6f:5a:a2:3a:b2:
                    85:43:8b:d5:28:38:07:e4:6e:1f:34:1a:fa:da:dd:
                    1d:e7:98:9d:9a:42:fe:07:c6:22:e2:b4:bd:37:fc:
                    c3:99:ed:af:7e:6c:43:30:b4:fb:4e:3c:92:0b:1f:
                    e7:9f:e7:29:bb:3d:55:96:19:bd:d4:76:4f:c0:67:
                    ae:80:f7:6c:75:e8:59:ba:34:45:9c:f5:dd:2a:ef:
                    34:65:8c:f3:85:4e:97:92:c4:f2:bb:0c:1c:93:70:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A0:23:BC:AE:CA:B6:FD:25:EB:8F:5C:3A:84:0B:2B:78:50:2C:75
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:67:ce:a0:4a:29:0e:d7:4b:70:95:6e:a3:81:a6:c8:92:4d:
         9b:d1:d7:2c:a1:37:a4:0a:93:52:1e:97:96:6b:bc:9e:2d:01:
         2a:14:9d:b8:a7:66:dd:c8:78:ba:74:1e:d3:30:97:85:53:4f:
         ac:f9:36:af:55:ce:da:cd:8f:af:e9:0b:6e:2f:31:cf:ff:3e:
         9d:7c:2e:3c:bf:f6:05:1b:be:67:19:a4:a4:a7:df:e7:de:1f:
         36:21:1f:c5:aa:95:75:10:24:1d:8e:2f:13:17:6f:9d:b6:65:
         ba:de:c7:32:9e:87:95:f9:b9:25:b0:21:19:2a:69:73:d1:e7:
         ea:5d:a6:f8:b2:53:db:ea:71:44:94:e3:ff:05:93:91:6e:da:
         c0:9d:2a:a1:3e:fa:f3:3b:c3:a4:5a:54:63:d6:08:b9:a1:a0:
         7f:9c:35:74:58:2b:af:27:6d:78:a3:da:c0:5a:e5:f9:3f:b5:
         b7:53:44:b7:9e:e3:e4:55:3b:f6:69:bf:5f:d2:ef:ea:a5:92:
         dc:52:89:d9:80:39:3c:aa:9e:84:a2:91:fc:88:77:0b:ef:a6:
         fd:f0:95:b6:07:2b:bb:e1:2b:05:ff:7a:88:b6:11:7f:82:4f:
         46:45:b3:97:85:d2:44:82:ad:73:1e:f2:e5:32:9d:d1:c8:b5:
         cd:a6:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:18:05 2026 by rpki-client