Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
File:                     gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft (raw, json)
Hash identifier:          cIzEA8gKRPjKxXpv2uw9ixX3WdsV3Xu7G6blp+UmCwc=
Subject key identifier:   3D:7F:4D:BF:E5:A5:E7:F6:52:9C:09:F0:55:2D:82:B9:5E:67:B7:D9
Authority key identifier: 81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
Certificate issuer:       /CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
Certificate serial:       019FAABE966B5A05DD86271BE89815BEC990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
Manifest number:          1E
Signing time:             Tue 28 Jul 2026 22:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:44 +0000
Files and hashes:         1: 3c12ieSU9RhqpmzjPf9hRCT_8No.roa (hash: +2cjmK41brny7jHxZs8/WuLLOqfrVztHpp8kEr7qmFw=)
                          2: gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl (hash: AnfGpDvN53Z8CKsp0/9hf3aIbyf3J0B1vdKImgtamds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:96:6b:5a:05:dd:86:27:1b:e8:98:15:be:c9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
        Validity
            Not Before: Jul 28 22:00:44 2026 GMT
            Not After : Jul 29 22:00:44 2026 GMT
        Subject: CN=3d7f4dbfe5a5e7f6529c09f0552d82b95e67b7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:42:06:17:ff:15:63:34:ee:59:d7:11:fd:b1:
                    62:82:e0:a0:9f:fa:db:68:c5:a0:c0:d7:b8:5d:58:
                    c8:05:c7:fd:f2:6e:77:79:2c:b0:a6:11:3a:34:4c:
                    c1:3c:5a:b7:28:61:c0:c2:9c:b4:80:b3:7d:ac:df:
                    0e:54:1f:5d:51:48:93:38:99:39:b3:6b:a6:13:b8:
                    ec:ca:d1:69:96:21:be:1d:14:27:e1:70:67:ad:a9:
                    2a:43:84:6a:a2:77:a8:e0:fe:2c:f5:37:8d:76:6a:
                    69:12:d2:c3:74:55:9c:57:e7:00:63:56:ad:5e:32:
                    05:55:27:4b:d0:bc:35:2e:1e:56:d0:e6:32:b5:ca:
                    29:01:6b:73:db:8a:de:86:d5:8e:27:97:50:d1:df:
                    bb:ce:9a:75:01:ba:ce:0a:68:48:c7:59:39:45:ff:
                    6f:0c:a5:b8:d2:b7:f4:c2:8c:ff:85:91:fa:04:c7:
                    0e:cb:1e:51:aa:5e:97:40:6a:b0:5e:1f:ab:87:79:
                    f4:42:36:0b:62:64:b0:5e:cb:5a:bf:b3:64:9d:52:
                    ea:3c:e5:e7:14:d8:9c:3e:48:f3:48:7d:4d:ed:cc:
                    3c:d3:26:51:21:90:c2:3d:e3:f2:5f:03:ae:d7:93:
                    3e:9c:60:f4:36:94:ed:8a:79:af:0f:4a:e8:0d:7c:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7F:4D:BF:E5:A5:E7:F6:52:9C:09:F0:55:2D:82:B9:5E:67:B7:D9
            X509v3 Authority Key Identifier:
                keyid:81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c6:e1:78:35:a7:63:87:56:49:7a:17:81:ea:e1:c3:15:a3:
         1d:18:67:0b:8e:a8:69:b2:22:ff:c6:39:cf:52:c9:c1:3a:4a:
         43:f6:99:a2:26:01:82:b0:80:85:26:8e:8c:70:6f:af:63:7c:
         8c:ff:21:cd:77:f2:53:25:ee:9c:6e:ba:57:cd:0b:a1:d1:bd:
         29:54:79:25:2a:6b:8e:90:b8:91:93:d6:d4:0b:b1:01:ca:c3:
         45:70:51:cf:14:e7:f6:e6:24:28:a7:8a:d1:c0:52:b3:e1:64:
         48:74:28:48:32:a9:99:c6:3b:c1:65:bc:de:61:a5:df:9b:09:
         65:8b:fe:cb:a0:f2:a8:f7:75:30:85:74:6f:2b:5d:b2:30:08:
         26:b1:af:f9:4a:60:d2:82:02:3b:c9:88:46:b6:96:a9:00:4d:
         3c:39:9e:e0:e3:cb:01:5d:bf:27:18:a4:7b:51:7d:8a:01:f2:
         de:27:13:10:c4:ef:9b:79:cb:4a:75:de:6c:7b:24:b5:1b:a0:
         d6:9b:67:cf:84:d4:84:c3:08:c7:59:5f:c6:c2:83:ea:cb:f6:
         4a:e8:dd:9c:19:85:d5:ac:9d:22:cc:55:1b:ab:21:52:fd:84:
         85:9c:f9:c4:5b:52:d4:59:d3:d0:45:b6:b2:f9:fe:95:c4:9a:
         4a:57:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:26:46 2026 by rpki-client