Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
File:                     gGcKCuUZoyz9hbowc3yOPQfEvM4.mft (raw, json)
Hash identifier:          rDmFK4QGvylKbqv6mF6//TykLn6tRD9iVLUvxyKu5zw=
Subject key identifier:   E7:97:0D:9D:FF:16:81:4A:46:83:FF:B5:15:F1:A3:AA:FF:B0:5F:7A
Authority key identifier: 80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
Certificate issuer:       /CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Certificate serial:       019FA89A5FF776EC85D26242C78877F698AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:57 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:57 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:57 +0000
Files and hashes:         1: 4bGr-yXBWayGcjl1qM4F7v2Bc2M.roa (hash: eCKqYMCveD4+cT5IE20UBn+5fdkZH3p4iIVGa8fR06o=)
                          2: 7KMei89cF5bMU_4TaRPp6g42s1E.roa (hash: NRXPLOV3OLAB5gs1dIMy5Wr/b2KoynjrFtKRrh8XYUo=)
                          3: 8oTK3TC0D2Jp0RoOQfL5lALHOb0.roa (hash: bDWj0S7zTHlaNQd9wpyLKfimVq/tWXy8hbrpF7M3lP8=)
                          4: GYKQ0334-OMW8rJhiyMdFoDF1bA.asa (hash: YAXSLUp33H5lCmvEZdnmSsgUIL8C1t9c3ekAGHDBNDg=)
                          5: MkOrn3cx2BQqm02t_vueOKsFKPk.asa (hash: 8g1RjrvQ79n3k/tOZkjWDSSi6fzCwbwd+67DGegC7ZY=)
                          6: gGcKCuUZoyz9hbowc3yOPQfEvM4.crl (hash: JT1RaUJHD7KmmTLK2apw1pcR7MxWKCovVYh3aWgEfjw=)
                          7: o-m7cT62SUN3tXUWb6144IEDJko.roa (hash: GUeFgCZSQLXdFp7pq8g4v2HhOf5ueahzNXG4APOlM3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:5f:f7:76:ec:85:d2:62:42:c7:88:77:f6:98:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
        Validity
            Not Before: Jul 28 12:01:57 2026 GMT
            Not After : Jul 29 12:01:57 2026 GMT
        Subject: CN=e7970d9dff16814a4683ffb515f1a3aaffb05f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:47:d2:62:e0:78:e8:4e:87:53:bf:6d:61:
                    77:41:a8:ca:a9:c0:05:4e:37:e8:82:e0:76:c2:fc:
                    e3:38:52:4e:6d:4b:9f:28:88:38:7b:9e:ce:43:4f:
                    f2:49:b6:cf:f6:a4:f0:d4:d9:db:8c:f5:12:31:e1:
                    b0:34:84:46:df:8c:b9:34:c1:b3:54:72:01:96:7d:
                    79:b3:82:17:96:75:ff:e4:f2:4d:af:41:72:c1:d0:
                    3b:4f:4a:be:13:a0:fb:05:c8:68:ae:32:87:61:1c:
                    2e:64:f6:39:3a:89:97:a7:9b:4b:7e:a6:74:fe:aa:
                    7c:f0:d8:bb:4c:8d:4b:9d:f5:a5:6a:d4:e3:e9:03:
                    16:43:98:61:7e:51:5a:e1:c0:0e:b7:6a:82:9a:fb:
                    3b:80:fc:b8:77:60:ca:e5:4c:d9:42:ed:36:1e:2a:
                    5f:53:ea:de:a5:82:af:05:33:85:2f:e4:c2:e0:b8:
                    45:38:ce:8f:9d:e1:35:38:0b:eb:0b:95:f8:5b:26:
                    ff:22:5f:5e:b5:a2:75:60:02:3f:6e:63:95:38:ee:
                    18:c7:49:85:76:c5:65:e4:34:f1:f6:ff:e4:e0:88:
                    47:38:92:e3:9b:55:ae:c3:4d:1d:e7:20:81:c9:38:
                    9a:93:5c:0c:80:fc:49:29:4c:cd:cc:aa:22:92:6a:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:97:0D:9D:FF:16:81:4A:46:83:FF:B5:15:F1:A3:AA:FF:B0:5F:7A
            X509v3 Authority Key Identifier:
                keyid:80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b8:09:b7:28:c7:57:91:ce:6f:41:a2:be:96:50:97:53:09:
         0a:7d:5f:c8:81:45:fc:7c:5e:a4:ab:22:75:87:73:e6:06:ba:
         e5:fb:81:12:c6:44:01:a1:78:53:20:26:9c:f6:b0:a7:6f:e5:
         dc:d7:5b:ef:26:1c:ad:58:28:81:4e:49:fc:6a:d6:f5:bb:03:
         9f:72:45:2d:96:f9:37:48:21:c0:db:0a:6e:f6:e8:62:c9:42:
         5a:fa:1d:5e:61:c5:04:97:c3:57:5f:50:f1:e2:8e:67:69:77:
         12:10:6f:24:75:b1:b9:c0:35:e0:b7:48:7a:df:94:1d:fa:de:
         8c:29:e3:6a:c2:dd:26:d4:15:3d:1f:f1:6f:ac:a9:82:91:bc:
         e4:80:c5:30:2a:e1:9c:95:de:a5:59:89:9b:a5:eb:59:06:f5:
         ff:f0:65:f6:cc:55:0d:2c:89:47:03:93:92:a8:0c:f0:0d:7c:
         09:05:e5:44:10:1e:bf:1a:b8:11:90:dd:68:b9:01:86:d3:80:
         19:2d:a9:ff:17:34:70:ea:b2:8a:e8:3f:fc:ee:47:28:df:b8:
         0b:e6:65:be:57:9c:cd:d8:af:b6:8a:fd:39:85:9f:d8:21:08:
         83:fa:5e:f1:36:97:14:fc:d6:c0:b8:c7:f5:a0:d5:63:2e:cf:
         5d:86:97:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:32:52 2026 by rpki-client