Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File:                     gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier:          hfQ1z9Wyufzg0/+38GSbP7Nnq2yK/OeblnAzQf1EW2Y=
Subject key identifier:   04:64:1A:E4:D6:60:2A:43:94:0C:AD:F9:AC:34:14:7A:6E:38:21:9E
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer:       /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial:       019FAD1A7B5F3F438853DA47D9B3CF267804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number:          13CF
Signing time:             Wed 29 Jul 2026 09:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:21 +0000
Files and hashes:         1: _znAllcUhDUk5vaonzcpuUajgfo.roa (hash: qYtkv42oHHUxBFtOZdOaS3DV/fsi8LFPD+D7XK8B1uc=)
                          2: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: ZdG+7PUayxdxQsBUeh+Nho0EUVNaWy0lA6aNvpdSUC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:7b:5f:3f:43:88:53:da:47:d9:b3:cf:26:78:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
        Validity
            Not Before: Jul 29 09:00:21 2026 GMT
            Not After : Jul 30 09:00:21 2026 GMT
        Subject: CN=04641ae4d6602a43940cadf9ac34147a6e38219e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:79:b6:13:7a:38:bc:b3:00:8b:8d:9f:da:
                    0e:84:ba:3c:15:12:76:36:8f:e3:3a:12:fe:1d:12:
                    a6:88:d9:7a:f5:8f:74:26:4a:4e:89:29:eb:0f:fd:
                    f4:a8:05:1a:e7:30:e1:06:bb:8d:ca:af:39:f7:0e:
                    b1:52:f2:39:bd:b6:55:11:2a:c1:a3:fc:d2:96:18:
                    9f:aa:a7:7d:23:0d:33:f9:27:9c:37:1c:07:44:6f:
                    38:8e:9e:bb:0b:a6:06:f7:53:e9:12:bf:96:b6:95:
                    e3:2c:b4:e2:6f:ff:2b:c2:c3:6b:2a:87:cb:05:01:
                    97:b4:2b:7b:40:60:92:d8:3f:6c:bf:42:89:08:c7:
                    65:fb:82:f7:5d:89:ca:9d:6c:85:bb:33:51:64:e4:
                    50:f3:c6:ef:33:2a:18:35:39:4d:bf:4c:11:d4:fb:
                    dc:fc:2f:c3:14:2a:e7:72:2f:7f:94:c4:c0:34:1b:
                    34:ba:11:11:4e:d0:64:91:b3:1e:f3:df:f2:75:b7:
                    4b:63:02:91:7a:ba:4a:48:17:7a:28:88:b9:39:43:
                    7d:95:7e:50:e2:42:06:a4:39:34:c2:05:97:9b:b7:
                    f2:70:b9:36:ff:d0:4c:e1:11:2d:a2:a3:00:09:fe:
                    c6:b9:5c:24:01:fc:af:2c:56:4c:41:f3:e1:e9:2d:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:1A:E4:D6:60:2A:43:94:0C:AD:F9:AC:34:14:7A:6E:38:21:9E
            X509v3 Authority Key Identifier:
                keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:e4:4b:45:a2:4d:c3:bb:8f:3f:00:b5:c2:67:8e:5b:37:
         a4:e0:4e:07:89:66:ae:3c:72:34:a3:9d:cc:63:48:30:38:ac:
         b9:6f:0f:d7:f5:bd:80:29:20:31:1a:fa:08:6d:e0:7b:51:b8:
         82:7f:b9:72:b8:90:10:1c:c3:31:3b:ce:b6:bd:1b:1f:76:02:
         76:4a:2b:72:f7:7f:0b:03:43:7f:12:52:c3:f9:bc:85:85:aa:
         d5:fd:42:d4:60:22:5d:96:fc:48:2b:2b:ba:e5:f3:dc:56:00:
         8c:a1:4e:2f:74:bc:93:34:54:e1:da:21:6f:98:06:3b:2a:88:
         a9:21:1c:f8:36:91:bc:31:5e:7e:d5:06:e8:93:2c:c3:3c:9c:
         84:9e:e9:fd:c8:08:4b:62:a7:2e:4f:16:18:e1:ff:a7:67:ac:
         23:99:e8:85:02:c9:67:83:62:78:df:31:b6:68:b3:54:3a:92:
         3c:fe:ae:13:19:e9:b5:14:f7:27:d8:d4:80:c3:8a:20:86:d4:
         58:82:cd:70:3b:4e:18:c2:05:ff:0a:93:0f:49:1f:7d:80:13:
         0e:4e:45:46:ae:c0:a2:60:1e:e1:ec:3d:d8:9f:c7:f0:8b:8a:
         ad:c6:d0:57:55:65:ec:22:c0:f8:70:98:21:25:c0:5d:60:f3:
         f5:24:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:36:13 2026 by rpki-client