Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File:                     GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier:          GuugoFuzc/ZBGCsfixlMkeepXvEcXknsPetKXTJaz10=
Subject key identifier:   27:09:36:1D:3A:E0:E4:95:0F:A7:43:12:2F:4C:7C:16:FF:EA:30:A5
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer:       /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial:       019FAC085B44C20B9ABE421ED4E792E8780E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number:          0AAF
Signing time:             Wed 29 Jul 2026 04:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:56 +0000
Files and hashes:         1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
                          2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: PrGqVA1T9np9DJlM4JXcysC0k52egDq67BSvVQoicAg=)
                          3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
                          4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
                          5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:5b:44:c2:0b:9a:be:42:1e:d4:e7:92:e8:78:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
        Validity
            Not Before: Jul 29 04:00:56 2026 GMT
            Not After : Jul 30 04:00:56 2026 GMT
        Subject: CN=2709361d3ae0e4950fa743122f4c7c16ffea30a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:52:05:3c:04:aa:ec:69:bd:d1:c2:1a:2c:
                    7c:f8:e3:36:c8:f2:92:e2:de:2d:4d:3d:47:bf:3a:
                    c2:c8:05:2e:e6:8d:81:27:51:a3:9e:8f:22:fb:a6:
                    8a:62:b5:67:d3:e5:fa:f2:8b:c0:03:f9:50:25:cf:
                    82:00:b7:60:b0:8a:e8:cb:94:a7:48:32:cf:f6:24:
                    f1:92:aa:d3:48:a2:c5:ce:9f:a3:f6:83:ba:b5:97:
                    c1:af:97:d7:81:ac:ba:37:34:56:69:80:6e:2e:b7:
                    5d:e0:a6:6d:89:af:f8:07:84:70:d2:05:74:c9:8b:
                    43:1e:9f:04:a0:37:0d:8f:3e:35:c1:21:8f:18:92:
                    37:c4:6d:e1:09:df:13:b3:f5:ad:4d:d9:61:96:46:
                    a1:f8:6b:a5:df:e8:79:ea:bd:ca:1d:56:fc:c2:92:
                    9d:cd:d0:d2:d6:2a:13:94:9a:06:da:6f:89:20:16:
                    34:89:6c:72:da:9f:ce:e0:63:aa:9b:a6:24:a7:ae:
                    d4:c0:80:61:c9:dd:4f:45:b6:29:66:40:33:03:c4:
                    35:bb:5a:5d:08:c6:25:8b:24:49:28:7d:ca:96:10:
                    6f:12:0b:7a:4c:d7:b7:f0:08:83:8c:c1:7f:c8:4d:
                    a0:b9:0b:f4:91:79:92:d4:cb:0d:db:1e:95:0d:05:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:09:36:1D:3A:E0:E4:95:0F:A7:43:12:2F:4C:7C:16:FF:EA:30:A5
            X509v3 Authority Key Identifier:
                keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:da:00:88:ba:ec:9b:9d:03:74:5b:57:7d:22:0c:a6:ab:39:
         8f:59:a0:c7:b3:d9:a2:ff:c3:19:63:13:e6:90:ae:40:93:5a:
         23:25:39:4a:3a:19:7e:c1:32:3a:44:85:eb:ba:12:1c:69:19:
         eb:ba:29:ee:08:b6:cc:c3:83:60:b4:34:e8:48:18:25:4b:83:
         87:ab:a4:54:62:2d:5f:ca:44:f4:63:db:e5:cf:1e:bd:5f:50:
         67:33:e8:10:6c:c5:67:55:3e:9c:60:af:29:5e:c0:81:c3:5b:
         ec:b3:9b:54:76:34:bc:45:52:75:bf:65:3e:be:6c:fe:f7:44:
         b2:27:9c:20:6a:3e:5b:00:fc:b3:a4:47:28:9a:9c:6e:c5:26:
         f2:24:8f:ed:01:64:f9:ec:42:6d:cd:2d:74:d4:a6:3e:45:c0:
         32:b0:83:04:f2:fa:95:2c:43:9f:bf:32:14:22:ef:55:a9:fd:
         cd:d3:fa:71:6f:99:ed:0c:b9:d4:92:87:56:31:f5:6e:b2:d6:
         c1:09:72:71:06:3d:0a:99:b4:a2:4d:58:eb:a4:9b:de:7e:7d:
         c9:00:8b:1e:61:1f:5c:40:79:81:b8:c4:76:89:b2:5b:4a:5b:
         0b:f1:15:56:62:c9:c0:e5:5d:e8:84:62:47:d9:8b:90:ff:1d:
         3a:68:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:12 2026 by rpki-client