Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          JqckpL+zfs1nAho3PxyQOlDk6z59pQCSOrkuqh/YHaU=
Subject key identifier:   27:1D:04:76:50:90:40:12:34:6A:97:C4:47:C4:52:A0:34:DA:45:13
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       019FA9E2AA962E5D688F10F4A000280D7B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 18:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:31 +0000
Files and hashes:         1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
                          2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
                          3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: JNczxTIu49GIEy8yj703ommVURMTN/PR7XqT27Cb8nw=)
                          4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
                          5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:aa:96:2e:5d:68:8f:10:f4:a0:00:28:0d:7b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Jul 28 18:00:31 2026 GMT
            Not After : Jul 29 18:00:31 2026 GMT
        Subject: CN=271d047650904012346a97c447c452a034da4513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:9f:5a:85:fa:1d:f3:f3:c9:7e:f9:6b:5e:
                    9b:8b:74:c9:4c:a7:74:c1:5f:9c:30:1f:07:3f:ec:
                    d7:43:f1:08:ee:6b:37:cc:a1:27:e0:17:8c:87:9c:
                    77:55:e9:3e:80:d7:fa:f6:39:d3:53:07:4d:58:4a:
                    a8:83:89:8f:1a:b0:4f:d2:7f:93:09:1c:13:36:be:
                    1b:73:44:99:84:0f:16:33:27:6c:f7:50:17:5b:f5:
                    39:94:10:70:03:a9:41:c9:28:90:df:f0:c2:c1:42:
                    82:a7:f6:7b:6b:de:4b:53:c9:39:97:e4:61:b5:c6:
                    23:4a:b8:2f:c9:47:2b:a2:fe:c2:d5:04:8b:c4:84:
                    4b:1e:ef:31:ab:73:73:2e:c6:a1:7d:b5:b2:3f:44:
                    d2:53:41:8f:14:6d:27:86:89:a0:f3:50:4c:09:3f:
                    07:e4:98:9f:5a:e9:87:b6:be:83:b9:6d:40:18:98:
                    04:ea:5c:01:82:87:03:e5:15:c5:ec:6b:b2:8b:7f:
                    72:e3:cc:e4:e4:ee:29:36:ee:c3:65:ec:d5:1e:3c:
                    91:42:9e:c6:0b:83:a4:b0:63:52:09:f0:86:b2:45:
                    72:23:4b:3a:80:4f:c2:2b:5e:b7:0e:1e:7e:b1:f8:
                    36:d7:12:f3:19:d7:bb:51:46:41:09:55:ac:e6:a1:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:04:76:50:90:40:12:34:6A:97:C4:47:C4:52:A0:34:DA:45:13
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4e:1f:a4:95:b1:5e:6b:c0:16:31:1b:97:a5:36:00:e4:79:
         1f:a5:7f:5c:28:24:67:12:55:b3:ad:b9:86:4d:0f:0d:5a:ad:
         e0:08:33:4d:b9:11:0e:28:9c:97:72:8b:21:82:f5:1c:f3:a4:
         59:cd:62:a5:dd:a6:a3:0f:83:26:5d:73:49:c0:dc:1f:7d:ef:
         da:96:d6:bc:0b:06:ec:76:2d:25:b2:a3:9f:35:12:c3:a9:ee:
         0e:ff:09:d6:d9:02:2e:5b:e6:d1:9d:2a:9f:72:b6:2c:1c:4f:
         20:9a:27:fa:d8:6c:16:1c:1a:38:13:8d:d0:4b:b1:08:4b:9d:
         e1:3b:85:a5:df:40:99:2a:92:79:64:cf:f6:26:12:b0:a3:6f:
         a2:4c:7a:b2:d7:14:2c:a4:3c:e5:c5:68:6b:b3:da:4f:e2:14:
         bc:fe:96:a2:e0:9c:fc:d6:0e:68:0b:12:41:0e:a6:e6:24:91:
         e0:cf:5c:78:88:63:60:3b:2c:da:47:0a:47:21:93:6c:04:a7:
         66:40:58:ee:21:4b:d3:57:c1:2b:50:df:87:62:ed:ce:30:d5:
         8e:ab:35:bd:5e:8f:22:4f:e6:d7:30:a0:d7:fd:98:ac:f5:13:
         a1:7a:f6:57:a3:ce:78:0f:43:e1:7c:73:ca:94:45:af:16:74:
         34:99:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:39 2026 by rpki-client