Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          VzZVlSaaXYdTFmAWRX0wx5gEEMBwa7oHo5pT+b1MU4M=
Subject key identifier:   C0:D0:B7:E9:E8:BB:DF:DD:5D:5F:24:17:46:C0:D9:96:54:94:EB:60
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       019FA3AA5A2F8455FEDED7E154B792F4FF98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          1196
Signing time:             Mon 27 Jul 2026 13:01:18 +0000
Manifest this update:     Mon 27 Jul 2026 13:01:18 +0000
Manifest next update:     Tue 28 Jul 2026 13:01:18 +0000
Files and hashes:         1: 3P4cCBu38EJugxeCpjstaJhevzU.roa (hash: qPPAYChci1BjI8OFuTU/CsZA0DBvN2/vpi/SyKtNWw0=)
                          2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: wafTbKf89eFQ5Wgn6jgbGq8S1AHTSCfZHHw5LMW8F6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:aa:5a:2f:84:55:fe:de:d7:e1:54:b7:92:f4:ff:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Jul 27 13:01:18 2026 GMT
            Not After : Jul 28 13:01:18 2026 GMT
        Subject: CN=c0d0b7e9e8bbdfdd5d5f241746c0d9965494eb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:49:b8:a5:ef:de:62:6f:a8:af:47:29:6d:
                    42:df:42:99:81:bf:62:ba:11:80:4e:e6:25:04:d6:
                    f6:9c:87:ec:a6:26:fd:70:b5:ed:4d:af:18:1c:e1:
                    ae:a3:00:4e:59:e3:d0:b8:5a:e2:43:d2:40:9a:8b:
                    e2:70:5d:d6:76:dd:d4:24:6e:4b:8a:7c:9e:af:30:
                    68:91:a4:21:7d:bd:3b:1c:27:4e:c0:52:1a:74:07:
                    ef:75:77:87:a2:23:cd:7a:ee:5a:9f:00:6c:f2:39:
                    b5:ba:3c:58:50:ed:98:93:62:69:a6:e0:ef:35:89:
                    2d:07:80:0c:75:ae:39:91:6f:43:4c:52:19:2d:8a:
                    87:de:c3:49:bb:05:8f:a6:e7:59:98:3c:97:08:a5:
                    a4:a9:f9:4d:fc:93:a3:9f:7b:a6:1b:2e:69:c3:1e:
                    c9:d7:fa:1f:48:38:27:7c:53:ab:00:a9:42:58:33:
                    57:d5:8c:2b:43:73:00:15:c9:7f:52:72:99:27:5b:
                    ad:0b:4b:a2:66:42:8c:e2:74:9c:3a:3e:a8:93:33:
                    18:06:2b:01:5a:07:37:67:6f:21:2a:7b:94:0b:b2:
                    3a:e3:94:89:3a:8a:57:1c:ee:89:b9:d0:9f:a3:b0:
                    4a:c3:f7:9d:2c:c9:c0:ab:d0:f8:4e:97:67:92:49:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:B7:E9:E8:BB:DF:DD:5D:5F:24:17:46:C0:D9:96:54:94:EB:60
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:46:e9:96:5d:32:de:88:b5:d7:89:41:c8:c2:19:80:98:
         00:c2:94:55:34:9d:e5:b9:82:94:b4:cf:53:b0:aa:a4:f2:17:
         b8:20:9e:ff:b9:0e:b3:c0:62:59:8e:1a:a4:e8:73:eb:90:16:
         54:f9:6b:e0:e3:ff:d3:2f:ae:ab:5b:dd:f9:ee:0a:16:5b:9a:
         8b:fd:1b:52:85:94:c3:a6:08:dd:ed:4d:2e:f7:e6:90:88:87:
         ac:7a:52:28:b8:a9:42:e4:dc:3b:4a:4f:1f:b9:5e:1a:9a:6b:
         bf:a2:06:0f:38:0a:48:fd:9d:3e:a2:8b:b3:ff:72:a4:d2:b2:
         76:ce:33:72:29:df:53:5a:be:fd:c4:9e:b6:ca:0f:03:ad:31:
         f2:2f:97:2e:8c:ee:15:ba:ea:6a:f9:62:ae:83:4b:a9:1b:54:
         82:1f:07:67:5d:7d:0b:44:f7:bb:4e:95:ff:58:3a:3a:ab:9d:
         78:8f:bb:04:6d:31:fc:3a:93:cb:96:79:27:e1:49:5a:af:85:
         8f:fe:42:e0:67:e8:de:6e:f8:a0:55:c3:65:c8:c0:da:9d:26:
         b5:c0:25:77:f3:0a:fc:62:21:4d:65:71:49:ea:14:ad:8b:b7:
         3b:00:79:db:a8:03:ea:1b:ab:d5:6b:f3:25:c7:b9:f7:7d:15:
         67:ec:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:24:29 2026 by rpki-client