Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File:                     GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier:          qmPFcOyLqKJ5+mclemjMttCOKDGATsr8ixxic8DOS8k=
Subject key identifier:   94:4D:01:BD:21:EB:4E:77:A2:FA:AE:68:43:3A:D3:1C:75:8E:F2:48
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer:       /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial:       019FAC76F8DA31F0BB0AF1D441A0A15FDF04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number:          14A2
Signing time:             Wed 29 Jul 2026 06:01:45 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:45 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:45 +0000
Files and hashes:         1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: dveK7URcCaL4Jbat9Y2mk2T4pZOjuBqZfv5IlN3u3HY=)
                          2: VF3A5uqK3baTRWsNVPe20tVkhMU.roa (hash: oCRuLVCgV+aXZr+hRj4Ct4VJ7B5cjA1VYigwMKDagmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:f8:da:31:f0:bb:0a:f1:d4:41:a0:a1:5f:df:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
        Validity
            Not Before: Jul 29 06:01:45 2026 GMT
            Not After : Jul 30 06:01:45 2026 GMT
        Subject: CN=944d01bd21eb4e77a2faae68433ad31c758ef248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:e4:c6:fa:8c:1a:31:3e:bf:f4:69:97:59:
                    54:35:c6:08:18:c0:e2:6e:78:98:6b:68:c6:05:92:
                    63:32:56:52:a0:02:86:f3:20:ba:0f:4b:12:cc:fa:
                    6c:91:07:fd:82:f8:45:0b:82:b1:d6:6d:bf:8c:38:
                    1f:b7:ab:3e:55:b1:3c:f8:b8:09:c9:d2:02:60:c9:
                    e9:b6:ba:87:cd:97:1e:09:80:d8:04:f0:47:08:bf:
                    26:a1:ba:8d:70:17:3a:1b:11:78:5b:06:78:8a:5d:
                    0e:92:e2:a8:fb:11:58:e1:c9:cb:ff:ec:c2:b8:6b:
                    5d:ce:49:49:f6:89:99:da:c5:ae:03:3b:56:a8:f7:
                    79:aa:60:e3:7c:a8:55:41:f6:22:a6:db:74:c2:55:
                    f8:0b:58:c7:59:5a:aa:e5:c4:02:14:ed:d5:cb:1d:
                    22:0c:ed:eb:ae:58:ac:ce:97:49:cf:0d:1d:af:2b:
                    8d:02:18:b4:8c:19:9b:cc:59:ef:38:c9:51:12:30:
                    2d:de:7e:4d:01:04:10:aa:00:f2:ae:ca:04:ff:22:
                    64:2b:ed:50:74:51:4f:42:3d:1b:25:68:18:91:89:
                    a3:d2:da:4d:3f:26:eb:ed:df:2b:de:a9:4a:c6:f1:
                    e2:73:0e:28:43:4d:94:bf:00:b7:69:a3:ff:a0:e5:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4D:01:BD:21:EB:4E:77:A2:FA:AE:68:43:3A:D3:1C:75:8E:F2:48
            X509v3 Authority Key Identifier:
                keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f1:7a:a2:80:ce:90:f1:cd:ab:58:36:57:44:66:23:3b:be:
         11:7d:c3:a8:6c:43:20:50:ee:83:0d:82:03:e7:94:2c:4b:05:
         72:0c:90:5d:a4:16:30:6c:eb:c0:a8:96:ab:36:11:74:6b:73:
         e3:bf:e4:80:8b:04:b1:04:05:1f:f5:74:96:22:33:88:10:47:
         8b:4f:10:72:66:75:8f:ce:45:67:e7:67:58:b0:2c:71:4b:24:
         ca:e1:68:66:8b:56:3e:b7:21:0f:f4:3b:be:70:e4:51:fb:2a:
         b2:ed:47:a2:cc:0d:c3:fe:20:be:ea:d5:84:81:b3:08:5f:81:
         9c:5e:09:76:e4:54:d8:25:15:4c:60:62:a8:df:9c:f3:51:3b:
         36:fa:09:0b:69:92:ed:cb:83:01:da:fe:1c:00:b8:57:d1:4b:
         46:9f:b1:fc:05:23:6c:21:6f:11:b0:24:03:64:9f:ee:56:8b:
         a0:91:b5:01:7f:85:a3:4c:33:09:83:7b:fc:73:3b:7c:92:66:
         f2:8b:a6:f6:b0:d9:17:be:17:c4:81:68:83:53:62:45:8c:8a:
         e4:06:57:c6:63:71:dc:11:5a:b0:65:53:f2:89:ea:30:95:d5:
         92:e7:27:4d:fb:84:9e:53:6e:04:4f:ef:bc:c8:73:cd:7c:7e:
         93:76:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:20 2026 by rpki-client