Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File:                     giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier:          1ypLaPlKnqFcHjcaTGxcuuOmw9YZPOGERJxb9Wuwqt4=
Subject key identifier:   3A:A2:9F:FA:15:B6:D8:14:04:D3:34:EA:E1:A6:80:E0:76:50:78:83
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer:       /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial:       019FAA874AC26049550F4603B1B3A95A1361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number:          1964
Signing time:             Tue 28 Jul 2026 21:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:20 +0000
Files and hashes:         1: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: dDXpjOBuCY145SaojrP05vGtd1dD0HgEtnrYk/ZvKio=)
                          2: zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa (hash: LZDUp9nuJRfFK7K/b0GgwAZrAzR3hWtlaKiCODrTlMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:4a:c2:60:49:55:0f:46:03:b1:b3:a9:5a:13:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
        Validity
            Not Before: Jul 28 21:00:20 2026 GMT
            Not After : Jul 29 21:00:20 2026 GMT
        Subject: CN=3aa29ffa15b6d81404d334eae1a680e076507883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:7c:6a:fa:f5:d7:c7:32:b1:94:3a:6c:a4:
                    e7:53:f4:49:17:ec:35:dd:e4:69:d9:2a:5d:4c:d6:
                    33:28:ba:d6:ed:8d:33:fb:36:b9:20:72:50:d1:9f:
                    f9:2f:1f:44:35:ac:34:b8:9a:fb:de:9b:d4:5a:89:
                    a3:60:79:2c:49:64:c6:7f:c3:62:33:fa:25:c7:f5:
                    2b:d7:90:60:14:8b:b8:67:e1:9d:6a:63:50:47:38:
                    b5:05:2c:85:bf:dc:e7:e8:73:43:18:3d:9f:54:8c:
                    12:90:11:12:9f:60:47:ae:77:12:77:54:bc:3a:1b:
                    74:b4:94:79:89:a4:28:be:bd:9c:34:05:07:47:be:
                    fa:7d:18:30:17:2d:a9:b9:87:24:b0:42:ff:0b:78:
                    d4:72:61:8a:8a:41:81:cd:68:8e:8d:28:96:51:b4:
                    fa:65:5e:ef:c9:5e:f5:d4:5f:1f:3c:64:c6:02:01:
                    a7:6b:04:05:30:13:1f:03:77:42:a4:fc:17:12:55:
                    1d:b0:66:92:a1:78:6c:f8:73:dc:f3:42:9c:3a:d7:
                    b5:c7:59:fe:14:c4:3c:e7:cb:49:57:73:d3:3c:8e:
                    03:06:60:2b:26:e5:f9:d8:b4:5c:56:cd:81:8b:76:
                    f8:8c:27:69:07:1b:90:aa:1b:e3:17:a7:f2:dc:2a:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:9F:FA:15:B6:D8:14:04:D3:34:EA:E1:A6:80:E0:76:50:78:83
            X509v3 Authority Key Identifier:
                keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:1d:15:26:8f:fe:9c:14:8d:47:66:d2:a6:07:e3:4c:e4:
         43:ce:97:40:6f:0b:59:0f:27:9e:4c:05:fa:66:4f:9d:83:75:
         ae:11:b1:37:33:49:41:32:22:16:04:92:9f:9a:a0:22:55:51:
         5d:a6:34:57:41:ed:bf:7d:cc:6f:91:2a:46:ee:d5:aa:af:90:
         b4:90:a8:ee:a4:d8:9b:ef:a9:f0:25:ff:4c:18:6c:48:8d:0e:
         0c:7f:ca:96:9c:c5:35:15:ad:82:8c:2a:3f:9c:e9:7d:b0:b7:
         7f:13:aa:87:73:41:ec:d7:e6:1d:0b:9c:c8:30:66:6b:4c:21:
         c2:e1:3b:0c:12:f8:60:52:c9:b0:d5:1e:fa:70:90:70:2b:ba:
         f8:7c:3c:10:9c:57:41:46:6f:5d:bc:f7:b8:5e:f9:24:b7:6f:
         3a:1e:99:88:e2:c1:87:60:71:d1:bd:d0:c9:ba:59:cc:3c:92:
         f6:be:57:fc:e3:86:bf:7c:3d:e9:cf:a2:de:b1:bf:82:db:cb:
         96:7b:91:74:2a:e4:19:42:e0:44:a9:3d:46:94:85:59:69:43:
         5b:26:1c:da:b9:da:b1:35:2b:57:45:0a:08:2e:c5:60:e7:4f:
         e8:12:df:9c:32:bd:32:8d:dc:46:13:07:67:9f:0e:df:a8:c3:
         bd:2d:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:50:36 2026 by rpki-client