Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File:                     gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier:          FWiiRkx1or32n9QKEF6/VK8s0rlLIZZn8feRELb2knU=
Subject key identifier:   6E:E5:84:95:A1:92:EE:D7:F0:06:42:CF:E9:95:83:C2:B8:28:45:37
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       019FAB62FE0923669C850F5194D99113B4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number:          19E2
Signing time:             Wed 29 Jul 2026 01:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:19 +0000
Files and hashes:         1: BfT142IZrG6w9x_sdv9NlYOwnjk.roa (hash: nMyUMScF9ierHQNaWf4H2FAJS6EPcrZmAIOFL2K/38E=)
                          2: WbmA7_GX8lhYD5gwDfMty_B0UMU.roa (hash: pbu61dkoeJNOEFlPCcPVO/fOlKpt2IKFm6HwfwnwwJQ=)
                          3: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: 8jW8NVUhOU4d5tzmfszldtdWTDteJwvymDPZA5JpqZo=)
                          4: hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa (hash: VGcdVOE9BIoWHNOMBje5zrVkxvWhg/+tqscfV1XcAU8=)
                          5: ltFa2izzbGOqtwBVA_TWfrJgXcI.roa (hash: OPV1MRSkrBUfBNL/wEtgSLV80hiGFh9joek6UVN6nV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:62:fe:09:23:66:9c:85:0f:51:94:d9:91:13:b4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: Jul 29 01:00:19 2026 GMT
            Not After : Jul 30 01:00:19 2026 GMT
        Subject: CN=6ee58495a192eed7f00642cfe99583c2b8284537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:65:04:4b:76:6e:b7:33:10:ce:f5:f7:ab:
                    5f:0f:ad:dd:d8:59:7c:72:29:f7:7c:60:20:77:21:
                    f6:19:22:97:de:5d:5f:1a:94:d1:79:3e:bb:bb:ef:
                    9a:42:5e:47:b8:2f:91:22:d4:66:3c:77:3b:f9:c4:
                    86:5c:68:1c:a2:77:f6:fa:42:0a:36:25:06:60:2c:
                    31:40:c9:a4:ee:1e:b1:e3:3d:96:32:16:98:53:21:
                    a6:97:c1:fb:c9:2e:8b:d1:f3:58:32:d4:54:0a:f5:
                    ff:36:87:fe:25:dc:bb:34:4d:24:1b:8f:ba:35:fa:
                    c8:63:78:10:22:53:de:37:9f:d3:3f:50:aa:c3:52:
                    a0:62:c0:4c:e4:29:2d:1d:02:e5:a6:ac:a6:52:04:
                    e6:91:d6:1a:3b:f8:c0:08:eb:fd:af:1d:90:99:e0:
                    da:67:b8:36:19:5f:8d:13:ec:f8:97:8a:b6:32:0a:
                    ad:82:77:ae:19:e3:e0:45:c1:c5:b0:2f:83:55:65:
                    a6:ab:5c:44:4e:6c:87:f9:75:74:eb:52:0e:56:b0:
                    e7:f7:30:a6:6a:95:b6:44:32:11:aa:63:74:7a:1d:
                    7e:10:50:02:e2:e7:d0:a4:31:df:87:f4:b8:18:9d:
                    04:98:57:ac:f0:3f:66:20:ef:1d:11:23:14:35:4f:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E5:84:95:A1:92:EE:D7:F0:06:42:CF:E9:95:83:C2:B8:28:45:37
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:67:35:d6:35:4f:f1:ba:75:b4:fc:9e:06:c8:ff:1a:9d:d6:
         b3:22:89:e0:67:69:48:32:8c:3b:08:2b:54:cf:74:2a:e6:27:
         7f:cb:25:0a:c8:96:40:8f:33:0f:1b:89:55:b8:e1:b1:8f:f3:
         66:7f:cf:b1:3c:e8:07:60:2a:46:7a:23:8d:96:61:ab:d5:8c:
         5a:d0:11:9e:4c:74:4d:9b:5b:11:09:b7:9e:d5:eb:1e:4c:83:
         93:e1:81:16:e8:bb:3f:85:1f:3b:9d:6a:47:fa:e9:0c:0d:fe:
         14:8f:8b:ef:34:46:25:8f:57:51:2b:b6:bc:90:9f:87:a2:0f:
         f5:16:aa:0c:a6:8c:66:3d:99:d3:50:5f:34:88:71:e7:aa:ab:
         36:eb:6d:37:c0:cd:6b:72:95:9a:dd:08:4f:e4:f9:70:ec:44:
         41:87:b0:57:03:9e:77:42:84:65:51:be:cf:ec:4b:98:33:0e:
         dd:ce:70:84:4c:dd:ff:67:6a:ad:a6:60:db:85:ac:8c:77:f2:
         1d:5a:2f:ec:dd:a1:53:61:88:f5:f1:35:49:95:16:50:3b:f0:
         21:37:e4:36:e6:2f:50:c5:dd:81:a0:bd:72:4e:5f:83:90:6c:
         b0:4e:67:39:5b:b9:50:b2:b6:99:d7:ce:e2:f8:12:2c:62:13:
         35:47:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:50:11 2026 by rpki-client