Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          +JQMHzI/AlJzH4SN1i1XN91TWpRDz3+ltLHe3IZgEpA=
Subject key identifier:   E0:3B:BC:E1:A1:1F:42:DE:ED:2C:6B:6B:F4:FB:BE:91:3F:B5:DA:79
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       019FAA873C09458B47E25786A56658FE3675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 21:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:17 +0000
Files and hashes:         1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=)
                          2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=)
                          3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=)
                          4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: RyPpIS+FubzRqohh4/kf+W0YSWI+KNno1C9qA/jIkyA=)
                          5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:3c:09:45:8b:47:e2:57:86:a5:66:58:fe:36:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Jul 28 21:00:17 2026 GMT
            Not After : Jul 29 21:00:17 2026 GMT
        Subject: CN=e03bbce1a11f42deed2c6b6bf4fbbe913fb5da79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:89:19:ac:f9:52:7e:ae:ae:1a:f0:a8:e7:
                    94:e0:92:56:bf:8a:a6:31:e5:3d:71:a7:35:92:e1:
                    62:9c:97:17:53:e5:4b:5e:04:2f:cc:66:13:e8:8c:
                    02:d4:d0:e9:07:bf:32:66:19:33:0f:8a:bc:f6:60:
                    c2:d1:6c:da:3a:af:ae:a2:b9:61:fb:4b:72:a4:34:
                    df:0b:26:25:68:0d:87:c3:ac:ee:61:81:a7:62:82:
                    08:a2:95:ff:36:ac:93:47:de:08:29:fc:eb:f2:25:
                    ba:19:ff:d0:ac:41:0e:28:59:7f:81:0f:d5:d2:fd:
                    fd:c2:b9:30:10:0a:bd:fe:9d:5f:21:d6:82:2f:12:
                    69:c6:08:62:44:ca:d1:a3:85:07:d7:6f:48:db:6a:
                    7e:58:04:ff:d2:2a:10:71:55:f4:df:05:ba:00:73:
                    85:1d:e2:55:b8:d6:99:50:23:a7:23:72:b2:76:99:
                    61:1c:24:98:c4:65:4c:2f:c5:d7:c5:ce:e6:e6:69:
                    b2:d6:44:2c:e6:52:81:d8:f8:97:82:95:8a:4d:42:
                    e8:fa:9e:97:b6:a8:d1:3a:b9:7e:ff:5c:55:19:8d:
                    a0:04:a7:06:d1:cd:20:6b:4f:e9:e3:05:b0:b2:e2:
                    fa:bc:9f:0a:09:12:05:c0:fd:0b:f9:a7:81:30:7e:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3B:BC:E1:A1:1F:42:DE:ED:2C:6B:6B:F4:FB:BE:91:3F:B5:DA:79
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:02:47:fb:d6:d9:f5:0b:22:fe:f0:b2:15:ef:bc:1c:5d:
         ed:95:74:72:a6:1a:f4:e9:b2:66:6c:84:7c:d3:0b:98:95:0c:
         a9:0b:a8:bd:73:cd:0e:d9:b7:c1:c0:72:ba:34:92:15:cd:d3:
         03:50:b0:5d:fe:38:62:22:55:df:69:c3:74:6f:0c:70:60:2f:
         bb:e7:2f:08:e4:ec:04:b9:01:aa:2a:0a:a1:88:97:9b:dd:af:
         71:83:60:ea:c5:d4:11:85:c6:cf:3c:ef:98:b6:b3:65:5c:e3:
         d2:2b:85:a5:12:37:84:88:ef:f6:24:2c:70:4e:84:e5:50:bd:
         26:c7:4f:6c:b7:a1:a8:59:82:fa:f7:1d:98:68:bf:7c:61:b1:
         7c:c8:2b:90:b2:4e:16:4b:27:44:06:26:dc:cb:49:af:f1:ff:
         09:36:31:bb:d2:b4:8f:03:3c:23:79:cc:40:4d:71:aa:bc:4a:
         21:eb:e7:4e:65:ea:a2:14:93:ed:5b:67:00:f9:1d:68:a2:cb:
         7f:23:e8:b7:78:ae:03:b9:d2:9d:9a:02:b5:2f:18:c9:5f:9e:
         68:8a:2b:5c:b6:23:50:c7:63:16:dd:62:da:e8:6d:28:30:e8:
         93:be:12:ac:00:2d:38:6b:3e:ba:b9:6a:30:f5:e4:b2:70:d0:
         01:24:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:11 2026 by rpki-client