Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          MKC6mvzuOmdNuzRp9Ds7U2YkfhEdcvbYcHcg8386j6M=
Subject key identifier:   83:4D:71:F5:62:42:D6:CE:3D:3E:7E:D2:F5:A3:01:1E:ED:F1:11:43
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       019FACE45EAD9AB3A83A767459D60702348C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          19D9
Signing time:             Wed 29 Jul 2026 08:01:15 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:15 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:15 +0000
Files and hashes:         1: ATLOmeA5cf4AwJ9U-Q-N1ldTcPE.roa (hash: hnP5uN1NwwvHi/WK/M6S1b6bdfJWGxirQCx3zSYRXtM=)
                          2: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: E8ml9OtCZ8imt97MZgI5y+/64pjEHNk6DRWsXnGr6As=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:5e:ad:9a:b3:a8:3a:76:74:59:d6:07:02:34:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: Jul 29 08:01:15 2026 GMT
            Not After : Jul 30 08:01:15 2026 GMT
        Subject: CN=834d71f56242d6ce3d3e7ed2f5a3011eedf11143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:7b:af:61:a4:9c:28:dc:06:7a:76:07:db:
                    cc:24:46:5b:3a:dd:37:eb:f2:13:2a:b2:14:92:40:
                    62:01:c2:75:50:de:07:bd:19:23:81:09:42:46:38:
                    9d:d5:42:79:e4:f0:9e:7a:04:e7:2e:d7:72:ee:eb:
                    4e:27:2e:16:a1:4e:89:73:0e:ea:e5:e8:a2:5b:b2:
                    f5:1e:5c:2d:0f:6a:ae:e7:b0:fd:a8:0f:4e:2d:c2:
                    43:96:3e:f0:c2:df:1a:27:6c:8f:63:cb:33:4d:cd:
                    52:33:e5:fb:c3:ea:49:24:9f:06:8e:fc:c3:d0:bd:
                    94:c6:17:f5:2b:d9:ac:ef:45:c9:8f:2e:ed:15:c2:
                    75:62:00:e8:2e:15:10:d9:88:70:85:ae:63:43:37:
                    59:f4:a4:66:94:02:a9:58:3a:2f:76:d1:60:5d:ac:
                    1c:7f:46:dd:5d:74:a8:a6:4f:9e:f8:3c:48:0b:f8:
                    e9:1b:53:4d:72:bc:d8:d8:71:74:9c:e8:96:b3:f5:
                    5f:f1:a9:62:f0:20:b9:ea:8e:ea:92:51:c3:c8:39:
                    00:b1:cf:0f:a8:bf:d0:52:12:b3:1f:78:f3:c9:62:
                    22:41:18:3e:59:e8:0a:4a:55:d8:31:11:96:9b:17:
                    8d:54:33:f6:68:eb:25:bd:fd:0a:d2:f8:b2:c6:ce:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4D:71:F5:62:42:D6:CE:3D:3E:7E:D2:F5:A3:01:1E:ED:F1:11:43
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:64:c8:68:fe:d6:04:be:be:b5:58:0d:34:82:6b:61:64:b1:
         29:1b:21:55:ae:60:98:d0:a4:79:9f:05:d0:5f:43:a9:76:f8:
         66:6d:df:f5:3b:95:93:4a:83:62:64:b8:da:3b:e7:b3:4c:bc:
         3b:d7:94:42:16:90:12:3c:f3:7b:d9:92:dc:d3:3f:5e:17:64:
         92:db:38:92:ec:86:cc:26:ec:62:ee:11:7f:62:80:14:e1:31:
         34:74:00:32:af:cc:ec:62:93:d9:c5:e2:f4:f7:3f:b0:f3:07:
         04:79:b3:7e:70:17:25:16:60:ae:6e:64:7e:9c:98:1b:bd:35:
         7b:52:34:37:e7:74:53:96:05:56:d1:89:58:17:54:38:23:eb:
         3a:06:85:ca:6c:4c:09:64:02:6a:fa:e2:0c:50:fa:d3:24:71:
         b0:1f:d0:a3:8a:03:dc:21:de:ca:79:96:9e:e4:12:2b:c9:08:
         94:f7:a4:fa:8f:13:29:4d:49:dc:66:1e:70:b2:84:ff:bd:c5:
         13:f4:35:e4:31:87:50:15:32:09:d4:c2:c6:47:96:e3:fd:c2:
         2c:e8:dd:02:dd:f3:81:19:6c:f3:0d:6f:fa:92:36:2d:06:cd:
         a5:76:c8:28:55:51:c4:2b:9b:14:25:84:24:c1:ec:b3:4e:d5:
         d8:cc:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:06:08 2026 by rpki-client