Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
File:                     GuwRjCU363UtdoXMGf0-xDD1Bfw.mft (raw, json)
Hash identifier:          r6NH5YzJhR2FXwtPJ55bbuz+bztITapZvn6vKoKn2XY=
Subject key identifier:   25:2E:E3:4E:1C:AE:02:A9:F1:B7:D1:B1:CC:A4:12:EE:2F:0A:BD:F8
Authority key identifier: 1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
Certificate issuer:       /CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
Certificate serial:       019FAC080D0877B048E7C38AC18789005945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
Manifest number:          0173
Signing time:             Wed 29 Jul 2026 04:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:36 +0000
Files and hashes:         1: GuwRjCU363UtdoXMGf0-xDD1Bfw.crl (hash: uPGB0PgaqFjDiyGcoe0fhsnAVPv54P9BScjQl01cEzU=)
                          2: fyrwpSpHOQ51MD8HtpifeJqSkG4.roa (hash: o8gKMzDK7KI5j5Qki30gQMXdbKnHqlaCMrDbLfOew8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:0d:08:77:b0:48:e7:c3:8a:c1:87:89:00:59:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
        Validity
            Not Before: Jul 29 04:00:36 2026 GMT
            Not After : Jul 30 04:00:36 2026 GMT
        Subject: CN=252ee34e1cae02a9f1b7d1b1cca412ee2f0abdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:cf:12:8d:75:91:7a:5e:7a:4b:92:a8:89:
                    2b:08:a6:be:f4:50:3c:a6:c4:fa:f7:64:32:e8:f0:
                    a6:c2:e1:f0:34:2c:92:35:98:95:3a:6d:cd:80:1c:
                    76:42:2a:78:7d:f6:c1:0f:46:95:c0:c4:d5:b5:7d:
                    27:d5:f7:0a:61:a6:8a:3e:c8:6b:a1:13:2c:78:38:
                    6b:54:6c:b8:03:16:44:53:57:2c:f0:4c:5d:40:2c:
                    97:59:5f:67:96:72:f3:e0:3b:a8:72:a0:0a:27:66:
                    01:2b:6f:58:08:0d:4a:75:62:1c:da:7a:d8:06:a0:
                    48:00:e2:14:9e:36:2b:fc:a2:83:6e:6c:91:a0:8e:
                    21:e7:3b:ea:a9:a5:88:32:43:bf:52:fa:c4:a6:5f:
                    2e:4f:24:92:47:e5:a0:a5:46:f5:a5:1e:55:94:cc:
                    2d:09:9a:60:b0:49:f7:df:ea:f3:7d:3a:46:76:e1:
                    25:86:bc:a9:8a:64:cb:3f:a6:72:dc:b1:bc:6c:46:
                    69:cc:79:9b:c6:29:d5:ef:17:09:53:47:fc:18:f9:
                    35:78:11:96:44:e5:c9:e0:95:0b:d1:7a:cc:99:eb:
                    bd:10:bc:aa:29:1c:88:08:da:be:7d:a5:1e:7a:67:
                    61:c4:06:36:63:41:9d:0f:5b:49:b0:bb:da:be:44:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2E:E3:4E:1C:AE:02:A9:F1:B7:D1:B1:CC:A4:12:EE:2F:0A:BD:F8
            X509v3 Authority Key Identifier:
                keyid:1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:97:2c:ca:5d:70:e7:18:3f:c4:bd:54:39:d3:d5:dc:53:
         de:5b:9a:d9:88:02:64:2e:8b:d2:df:af:6e:40:87:e9:5b:c5:
         51:1f:1a:f2:05:06:9e:fd:5e:ca:a9:ea:72:28:a4:74:94:16:
         15:97:22:ec:a9:e0:f2:c4:34:40:f2:ca:f3:30:ae:59:28:25:
         41:88:3c:68:6c:bb:51:ec:74:46:40:36:74:c2:02:ac:ba:79:
         85:41:ce:80:e2:7e:75:cf:e4:e2:20:b2:39:8a:7c:ed:4e:4b:
         68:a5:60:2a:db:6a:40:df:c4:f5:cc:e8:e4:d5:23:3a:55:60:
         3d:1e:72:0f:02:80:bb:b5:8d:29:1f:f5:d8:97:74:c8:57:0f:
         13:ec:b6:f7:4d:84:61:6d:85:3f:06:db:9b:e0:c8:26:c2:d1:
         16:e2:10:86:9f:52:11:78:79:fe:84:04:8a:5d:f5:80:cc:45:
         29:42:1a:ff:8f:14:6a:e8:cd:60:6c:ea:1a:18:1c:7b:7f:7a:
         6e:da:e0:e4:c6:08:0d:d0:af:06:2a:98:12:3c:0d:97:be:e9:
         9a:da:94:54:a9:f7:58:54:67:4c:fa:0a:ae:79:16:bd:76:46:
         cd:80:fd:07:e9:15:33:6e:ca:e8:b9:e3:24:4b:a4:ff:1a:c1:
         e9:1e:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:04 2026 by rpki-client