Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File:                     gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier:          VWsfbS4uxFvusOM1mXPpaSCciemJJ9kgML/OR6Lr6ww=
Subject key identifier:   F7:20:7C:9E:E7:10:6E:5D:C9:ED:C6:A2:82:4F:5C:F9:FF:63:66:B2
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer:       /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial:       019FAB6327639ED60DD0DCC65060F0FA99B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number:          E0
Signing time:             Wed 29 Jul 2026 01:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:29 +0000
Files and hashes:         1: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: MEF7S1zEODg6AjY621fWUsIHRa4G4PaZZ+9r6dNhS1E=)
                          2: nTAeOQ1yfLeE7UobuYd95qQsnDc.roa (hash: MGx/T2ybNPO76ocB/JBxy+Dt6X73selrSnb5nBMcig0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:27:63:9e:d6:0d:d0:dc:c6:50:60:f0:fa:99:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
        Validity
            Not Before: Jul 29 01:00:29 2026 GMT
            Not After : Jul 30 01:00:29 2026 GMT
        Subject: CN=f7207c9ee7106e5dc9edc6a2824f5cf9ff6366b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:d0:8f:12:2b:42:a5:31:f8:65:81:ed:44:
                    6a:22:83:62:7b:c1:2b:de:15:18:21:b6:0d:ff:03:
                    53:a4:b2:54:42:56:2f:21:15:c7:cd:7d:8b:88:4a:
                    1d:ee:ad:c6:5c:e6:c5:8e:b0:85:fc:16:2e:42:3a:
                    ad:5e:09:fd:81:ef:f7:9a:39:f8:38:56:50:99:5d:
                    43:a3:c5:a7:20:2b:7c:e0:13:dd:a7:93:80:93:65:
                    09:e9:4f:fe:40:4d:f3:07:de:21:8a:ef:0a:0e:9f:
                    91:ba:2b:c7:a0:2f:fc:ac:c0:21:33:30:72:e1:ad:
                    96:ee:e3:47:bf:ab:2b:c7:cb:0d:6f:ac:da:8e:a4:
                    f6:99:86:6e:cc:83:62:98:2a:6b:ff:6c:fd:84:d5:
                    c6:aa:b0:12:bf:77:21:8c:8c:26:a3:47:75:a1:8e:
                    14:14:0b:fb:15:d3:5b:f0:a5:19:69:e0:d2:96:57:
                    6a:ef:ee:2d:29:64:49:94:47:a0:a2:0c:30:b8:20:
                    44:bc:3c:00:16:db:e3:24:80:81:5e:ac:6a:b9:b4:
                    0a:22:e8:42:24:8b:77:42:69:0f:e6:c7:29:50:6c:
                    76:e4:a4:de:cb:f8:a4:39:3f:b7:2d:89:64:d6:bc:
                    eb:c8:4b:4f:91:56:bb:e2:4e:f7:08:03:eb:d8:f2:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:20:7C:9E:E7:10:6E:5D:C9:ED:C6:A2:82:4F:5C:F9:FF:63:66:B2
            X509v3 Authority Key Identifier:
                keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d1:3a:6b:09:0d:37:2d:40:f6:fa:d6:5d:6a:45:75:a7:98:
         2e:03:3b:30:45:64:97:bf:4f:3c:23:a7:51:89:c3:ce:28:50:
         73:73:1c:2b:4a:54:19:36:be:e2:2d:68:da:d8:58:40:0f:04:
         10:92:43:2a:41:b5:f9:90:e9:fc:ee:cd:42:4b:b1:a0:4f:34:
         39:33:f3:00:70:81:74:14:26:a6:5c:0c:c8:97:d9:04:4b:a3:
         4a:c4:81:0c:c9:07:81:f9:21:3f:8b:08:ea:7f:eb:f2:ee:8d:
         3c:31:8a:98:56:1b:bc:af:a6:51:25:85:da:89:35:ad:22:7b:
         69:95:ae:f1:27:6d:8c:3b:5f:08:64:51:fa:7e:5c:59:ff:12:
         c0:ba:16:a0:af:08:c8:cd:ce:9c:71:a5:b2:96:ec:17:82:07:
         09:df:4f:da:fe:85:2d:34:22:23:de:20:a6:2a:ea:16:05:d5:
         ee:73:aa:54:fa:60:fa:81:b7:9c:f9:82:cf:9f:77:9e:17:75:
         cb:8e:bd:55:bd:27:b9:ca:fc:cd:f4:76:5b:20:c6:56:5a:00:
         ca:cf:6d:cd:ae:9d:df:2c:3d:dd:5e:bb:d0:89:5a:6c:25:54:
         8a:e7:91:a8:9c:e7:91:d0:c0:c4:54:c7:b4:1e:67:df:5e:d9:
         f9:87:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:38 2026 by rpki-client