Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File:                     gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier:          ySIxmBwmvDbspi+MLcTxovB/1uFpcTs/JFJgvZiI2N4=
Subject key identifier:   D5:22:32:35:DC:9A:00:AE:A5:67:F4:D2:52:46:7C:32:81:2E:82:AC
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer:       /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial:       019FAB9A86270C5A7A1E33FD2B5C8EFF0CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number:          19DC
Signing time:             Wed 29 Jul 2026 02:00:58 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:58 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:58 +0000
Files and hashes:         1: BdSuQVDQN0VvLBhw0-t0KDo8T2w.roa (hash: Adx+9mj7hvvMFLBS193scbpgC/haFVM6A5WGrKZ0rkc=)
                          2: RB3MCZgDbeMI6s-D2_JUTZ_rqbY.roa (hash: JrGHevSUwFCGVeEzLDEb8HtCJMbEOdcnxPcVOLqyOAc=)
                          3: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: 9L642UmP73OOXBip4W1XeZWhuvJHRABA68ME21FRE8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:86:27:0c:5a:7a:1e:33:fd:2b:5c:8e:ff:0c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
        Validity
            Not Before: Jul 29 02:00:58 2026 GMT
            Not After : Jul 30 02:00:58 2026 GMT
        Subject: CN=d5223235dc9a00aea567f4d252467c32812e82ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:49:f0:c7:38:3d:4a:a7:ea:5e:c8:c3:a6:
                    c7:c9:ed:fa:a2:b9:3d:d0:f6:5e:e5:c1:40:1e:68:
                    3e:25:7e:07:e3:22:0c:f9:8e:f5:d4:7b:86:29:b2:
                    03:34:1d:a7:b8:f1:d3:e5:f4:5f:ee:ba:0b:81:41:
                    74:6e:3b:d3:ad:a3:9b:b8:5e:4e:a2:dc:b1:81:be:
                    28:20:73:e4:a7:ab:60:4a:85:0b:e5:e7:e3:83:14:
                    f4:74:98:97:47:f4:39:08:3d:9d:cb:82:8b:86:1e:
                    78:c0:9c:ce:67:ed:ce:56:f8:f4:8f:49:7b:5f:ac:
                    7b:36:80:cd:11:17:57:99:da:3c:65:aa:c2:bc:63:
                    5f:65:f9:5a:31:98:cb:ca:4f:20:db:bd:c4:6b:72:
                    61:d1:9b:5a:2f:38:7e:9f:da:b3:aa:59:57:d6:96:
                    60:e4:36:e0:51:ca:46:b8:8d:42:5a:d2:a2:42:4b:
                    6c:f1:eb:49:64:ea:e3:92:68:2a:99:6b:1f:2a:ec:
                    cc:43:09:a3:02:a1:8e:54:01:77:a2:4f:80:67:21:
                    a2:63:e4:8f:ca:85:97:4b:60:9a:6e:13:15:2c:20:
                    4c:35:7f:2d:6d:a9:ac:49:b2:c7:e7:37:d7:be:a6:
                    89:34:6a:8d:28:f9:9f:37:7a:08:9e:2f:ba:81:cd:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:32:35:DC:9A:00:AE:A5:67:F4:D2:52:46:7C:32:81:2E:82:AC
            X509v3 Authority Key Identifier:
                keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:df:4d:cd:fe:8f:ca:9e:46:a4:c4:3f:e7:01:77:1d:e9:
         25:81:52:29:22:bb:46:1c:ae:79:6f:f4:55:bb:10:d6:48:c9:
         0a:d7:7b:f4:e9:c3:d0:18:ce:fd:45:55:9a:9c:dd:7b:1b:25:
         f9:e5:df:22:88:42:4f:44:61:42:50:73:b7:a3:bc:be:3a:8a:
         59:69:a2:8e:e6:d7:d4:4c:f4:84:c1:3f:1e:67:e6:2a:fb:53:
         b7:7a:5b:c5:9d:e0:9d:86:cd:15:f2:d0:fc:5a:a7:4f:66:61:
         5d:da:3a:f7:2e:3d:3e:fe:91:78:44:bd:ee:32:43:48:ee:75:
         70:99:b1:ff:0f:3d:87:09:d6:4f:cf:2b:82:02:3c:5e:e1:07:
         cb:c3:e1:a5:24:72:3c:9a:00:19:6e:59:b2:24:f8:a1:4a:74:
         94:1d:81:d6:77:fb:b4:e7:85:7d:bc:62:d7:bf:b4:13:73:19:
         b5:34:a5:ab:ab:fd:8e:81:a2:d2:b6:b7:94:9c:22:27:6b:d1:
         ba:29:77:77:fa:41:b2:df:91:c0:a0:ac:4a:f2:53:40:4e:91:
         32:df:4e:31:b3:da:e0:d0:f8:87:84:aa:16:7b:1d:21:97:85:
         65:01:91:85:39:39:c8:bf:81:5a:7f:76:e4:f2:00:54:73:fe:
         51:1d:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:18 2026 by rpki-client