Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
File:                     gV1MO26b-NpPoYWDUtVnCXSU64A.mft (raw, json)
Hash identifier:          XayT0HcvJ21Hs0aYEUAEnuluV75BPOGoMvA2yiQ09Ug=
Subject key identifier:   BA:3E:E3:01:83:C7:9A:84:0F:15:BD:A0:4B:A9:00:39:03:23:B8:0C
Authority key identifier: 81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
Certificate issuer:       /CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Certificate serial:       019FAC76391C142FE7F8521B233CC5367C1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:56 +0000
Files and hashes:         1: 9OSNQHYwP7hMCYqH3m4FGoNr2h0.roa (hash: oI3UIYnZEeaaqKn53u1eLaxo0kke+QgwtslSgUJGtVo=)
                          2: eS4B6UGXaj1jtg698wa76I6I9s0.roa (hash: ee1yHXEYh01F57rf9ic6LVAj3dkGow/zQH8cnd6TnOc=)
                          3: gV1MO26b-NpPoYWDUtVnCXSU64A.crl (hash: 1J03lMYPkQeKWuJ2tmc0fRC6JxQ3KYzUL6HpPHKXzaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:39:1c:14:2f:e7:f8:52:1b:23:3c:c5:36:7c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
        Validity
            Not Before: Jul 29 06:00:56 2026 GMT
            Not After : Jul 30 06:00:56 2026 GMT
        Subject: CN=ba3ee30183c79a840f15bda04ba900390323b80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:97:3e:2e:af:b3:0f:c9:2e:cd:40:5a:6c:
                    a8:00:53:af:ed:28:36:6b:60:6c:44:05:b9:bb:10:
                    0c:b7:c4:7a:86:1a:79:4c:c2:a5:96:de:4a:81:b1:
                    60:82:da:1b:f9:b3:b5:34:79:b1:87:f8:d0:5e:5a:
                    d4:67:e7:f8:ce:ae:81:d2:22:71:16:66:e2:48:53:
                    79:d0:b3:31:0c:94:e7:d2:80:71:11:2a:d7:4f:a8:
                    32:1e:0e:b0:48:54:3b:4a:ec:8d:83:e5:e7:f4:2b:
                    d7:c0:d7:4b:b7:d8:84:b4:f8:28:d8:10:6c:e1:24:
                    d8:d6:05:5f:2b:af:5e:d1:b0:9a:ca:ae:36:47:72:
                    90:2f:c7:75:88:15:4b:99:39:dd:77:dd:d7:f9:16:
                    fc:3e:c1:a1:29:c6:75:d4:34:c0:02:11:67:86:f0:
                    f2:18:ab:5a:60:2c:84:e9:48:42:e8:6d:19:f6:11:
                    2f:6d:c9:66:94:6d:ef:f7:f0:b1:f7:47:4a:bc:c9:
                    b3:7b:28:df:2d:e5:dd:63:a2:77:65:97:92:67:02:
                    ae:6f:13:c2:50:41:27:1c:dd:85:0d:aa:a8:de:0e:
                    86:9f:b6:19:86:5d:45:be:92:aa:b3:15:b6:0b:09:
                    16:a8:51:9d:ba:42:96:b4:71:04:e9:30:48:0e:4d:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3E:E3:01:83:C7:9A:84:0F:15:BD:A0:4B:A9:00:39:03:23:B8:0C
            X509v3 Authority Key Identifier:
                keyid:81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1c:74:0f:74:1b:92:34:c5:c6:1e:0a:c4:27:48:e1:26:2c:
         d4:68:b6:ab:c9:01:99:f7:0b:b1:72:45:38:eb:71:48:97:c9:
         7e:32:d7:ab:71:33:e3:08:0f:35:df:08:30:6c:8a:59:6d:e8:
         e2:87:5b:6a:91:ce:7d:48:4d:3d:d8:c3:cb:35:e3:b5:d5:5f:
         0e:6c:ef:76:14:4e:e1:db:f4:ee:6f:94:2a:ac:de:1c:08:21:
         30:1c:b2:4c:35:4d:97:f9:d2:d3:2a:99:65:ed:8d:84:8e:a4:
         d7:75:d7:1f:72:d0:b8:5f:f8:2e:4f:f9:04:6e:71:e8:c9:d0:
         9d:c6:2f:10:23:fe:54:c8:a4:df:aa:2c:37:36:4f:5c:82:33:
         08:5a:7f:f8:82:14:ec:98:2f:31:51:30:9b:7f:45:88:f4:cd:
         ee:1d:50:34:49:9f:ff:a5:6f:55:84:e1:15:4e:92:46:67:70:
         99:e8:4a:10:87:34:e5:85:e8:fd:4d:86:ac:f9:53:96:65:ec:
         6a:e9:d8:19:62:96:cc:85:c3:e2:e3:8a:d1:c6:f6:d6:e8:20:
         e9:c0:9b:86:bb:12:b3:0a:4b:14:b2:72:bb:bc:f5:0c:d4:57:
         b4:6d:60:ac:14:b2:6f:84:e3:cc:6b:17:f7:64:c5:a7:87:13:
         fc:ac:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:15 2026 by rpki-client