Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          qMJMYnnXWmuxfDS1vdYAuU/NP04Ak6aumFCkRHXpc6g=
Subject key identifier:   23:72:DB:D6:0A:E1:44:57:2B:96:BA:96:92:F2:6C:56:8F:2A:91:70
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       019FD384712DF27D36E56CFBC8FF5BA461EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          19EB
Signing time:             Wed 05 Aug 2026 20:01:39 +0000
Manifest this update:     Wed 05 Aug 2026 20:01:39 +0000
Manifest next update:     Thu 06 Aug 2026 20:01:39 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: aZlkd5McmAslBI0nOTAMM7rz3z2RG4/suly3QomJpto=)
                          2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 20:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d3:84:71:2d:f2:7d:36:e5:6c:fb:c8:ff:5b:a4:61:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: Aug  5 20:01:39 2026 GMT
            Not After : Aug  6 20:01:39 2026 GMT
        Subject: CN=2372dbd60ae144572b96ba9692f26c568f2a9170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:48:3b:d5:13:db:99:03:b8:c9:08:5d:d4:
                    c2:f8:bd:55:28:13:7c:b1:6f:e6:70:2c:90:64:cc:
                    7b:25:be:6a:6e:b7:81:ea:a2:aa:44:ae:61:bf:46:
                    04:83:22:43:d4:71:39:1a:59:c6:b4:5c:04:ce:6f:
                    80:0b:00:c0:69:6c:57:08:27:fe:17:cc:f9:a0:c1:
                    43:af:01:5b:8b:08:2f:08:4b:1c:35:b8:ce:f0:c1:
                    c9:d1:38:96:1b:8e:5b:62:1a:b6:0d:a8:de:a9:68:
                    10:74:2e:02:e6:82:3c:87:62:95:38:22:e1:02:a6:
                    b9:85:16:42:40:88:d7:9e:d0:06:2c:c2:76:da:46:
                    3c:da:19:a6:ce:a5:f1:07:c6:b9:6b:e1:a2:68:4a:
                    1f:a7:aa:c7:8b:2f:af:e9:4d:9f:9e:54:6d:45:4d:
                    20:49:45:58:f8:54:c7:20:cb:27:69:10:ef:21:fd:
                    a8:ff:44:dc:f2:53:a2:b5:61:59:80:31:f3:66:7a:
                    2c:e2:2b:6d:04:94:5a:22:fc:9e:6b:ce:b7:82:a3:
                    25:b4:13:6e:0f:fa:88:94:be:9f:22:ce:7a:b6:f5:
                    eb:ff:46:f7:9a:c9:45:87:41:83:37:39:bb:1d:f3:
                    94:75:63:e9:09:d3:58:44:36:73:1c:14:89:28:87:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:72:DB:D6:0A:E1:44:57:2B:96:BA:96:92:F2:6C:56:8F:2A:91:70
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:ff:fe:2a:a3:c2:0e:62:94:d2:77:68:14:c4:99:08:6d:
         5a:77:fb:5b:0e:2d:3e:49:91:4b:00:10:ef:28:3b:71:44:8e:
         43:cc:de:e5:31:ee:d3:c8:60:b7:58:31:7e:67:e9:0f:c0:d1:
         9e:45:91:e1:d1:8b:c4:d8:33:d6:bb:d4:45:a5:28:e5:6a:23:
         69:70:84:fa:fb:c5:be:5d:9c:4f:0d:f5:1b:41:22:e5:d3:62:
         0b:d6:03:d0:c8:18:ce:66:6f:1b:09:74:de:fe:15:bc:47:e4:
         62:91:ef:54:a6:9c:b9:ee:65:41:cf:c5:dd:cd:3a:84:2d:db:
         03:81:18:f5:8a:0d:a7:f0:db:51:1a:7d:eb:a2:a2:d3:d9:da:
         ee:6e:2c:52:6b:7f:6c:40:0d:b5:7a:fd:bf:17:61:f8:f4:f5:
         eb:c4:74:cf:3c:8f:e1:f0:f2:31:5b:ae:eb:f5:8c:41:30:5d:
         8d:3c:6e:8b:b6:95:98:8d:dc:2c:e7:bb:0f:35:ae:8a:b2:6e:
         6a:e9:de:9c:54:7e:33:48:e5:e2:5c:50:b2:a5:5c:13:77:5c:
         b6:ea:93:d5:57:62:13:4e:4f:23:7c:04:79:ca:09:53:75:80:
         1e:ee:ac:fa:1a:72:00:28:bf:03:a9:25:35:a5:82:0c:90:aa:
         8d:86:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 01:29:50 2026 by rpki-client