Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File:                     GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier:          jhffhdTvE7jJmho7B9vLQrmpVa2jamBWpQkvI1VZHq0=
Subject key identifier:   26:A3:2E:3E:5B:A3:FE:83:B8:B1:D4:A7:B9:5B:3E:E0:3D:07:74:7A
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer:       /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial:       019FA975455D4C93B6879916AB09B6B43CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number:          0B51
Signing time:             Tue 28 Jul 2026 16:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:02 +0000
Files and hashes:         1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: nk2gBJSyguKpfk5VnG2wJNy+XBRkBnzJuHp1j21aXtA=)
                          2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
                          3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:45:5d:4c:93:b6:87:99:16:ab:09:b6:b4:3c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
        Validity
            Not Before: Jul 28 16:01:02 2026 GMT
            Not After : Jul 29 16:01:02 2026 GMT
        Subject: CN=26a32e3e5ba3fe83b8b1d4a7b95b3ee03d07747a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:c5:01:28:99:8e:40:69:82:23:5b:58:5d:
                    c7:2c:94:49:e4:c5:c6:c9:be:6a:2a:0c:f1:28:46:
                    54:a5:0b:eb:28:16:4a:af:d4:59:fb:89:b3:5a:cd:
                    ef:36:52:6e:3d:d7:7a:1f:44:66:ff:17:e4:4e:55:
                    ff:28:78:db:ac:44:c8:40:81:cc:c6:81:2f:bc:63:
                    68:af:4b:92:60:03:e6:cf:29:3d:05:82:5f:b3:05:
                    0c:a8:d2:1d:6e:24:45:df:13:a8:68:26:85:64:c5:
                    c8:19:ec:3a:2d:5c:77:48:46:bc:07:0c:d0:b2:a9:
                    e3:ba:2c:b2:71:06:88:0d:40:e3:13:7e:d7:60:cd:
                    8b:a0:5f:9a:32:46:53:ea:80:38:01:19:40:c4:00:
                    85:b8:fd:32:d3:01:5c:75:3c:9b:f4:af:23:33:d0:
                    6e:4c:f1:b3:c6:30:9c:3e:e6:51:74:e6:9a:fb:a2:
                    6a:fc:90:cb:d3:c5:d0:56:5c:8d:6b:13:14:65:9b:
                    ef:ff:f5:0a:94:69:80:03:65:01:6d:b3:d6:bb:45:
                    98:ac:ab:c5:7e:4e:f9:53:15:31:77:1a:e5:75:f2:
                    19:a9:de:82:54:c4:be:43:f5:11:d2:80:cc:b7:2f:
                    21:70:da:5d:14:2f:d3:de:4e:04:ce:74:e1:27:63:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:2E:3E:5B:A3:FE:83:B8:B1:D4:A7:B9:5B:3E:E0:3D:07:74:7A
            X509v3 Authority Key Identifier:
                keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bf:f7:12:38:dd:16:fe:c0:7e:b2:6b:71:02:3a:87:76:df:
         15:35:37:ca:a1:8a:9f:af:53:73:96:55:d2:7c:bd:41:b1:f6:
         72:e3:86:51:f3:df:37:06:f8:70:22:68:4c:84:33:8b:ec:5c:
         4c:8a:25:ef:c5:aa:4b:ce:3f:7c:ec:09:1e:21:3e:88:f3:c1:
         53:23:44:1f:74:5d:04:6e:0c:57:47:d1:1b:c3:89:f1:b2:44:
         a7:53:51:35:ba:1e:68:9c:a0:82:3b:e4:ed:2b:ca:b8:66:dc:
         60:c5:43:87:3a:e9:46:84:4c:dc:63:43:12:03:ac:95:8d:50:
         ab:a4:e4:88:a0:bf:54:7d:02:2d:1e:5e:4e:6a:1d:f5:15:c0:
         1a:34:ad:99:ea:43:7f:0e:d9:fc:ea:8c:8e:33:50:57:b2:d9:
         2b:3c:89:11:03:b0:a2:e5:01:9d:a0:3c:b5:79:fd:3b:41:9b:
         3e:40:f6:f7:7c:3d:91:bf:7e:7f:d0:ac:b6:0e:aa:f0:d1:b3:
         b1:00:85:b6:4a:7a:94:19:40:d8:6e:3b:1f:b2:7a:0f:11:b3:
         1c:2c:13:bf:9a:8f:b0:a3:a3:ce:90:27:60:f8:e7:a2:8f:60:
         5b:e7:66:07:0d:8d:ff:b1:c4:1d:a3:58:03:25:89:25:db:4d:
         ef:d3:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:45 2026 by rpki-client