Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          mHnbUxjwkGx+jyW7ME/p2Pc7fCaIHqT6xMcTnpUEWcg=
Subject key identifier:   DA:C6:55:F6:8E:15:A4:1C:86:C3:D4:70:C1:20:C8:D2:AB:5F:62:DB
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       019FF97F40B464720471A61F49E3018491EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          0B43
Signing time:             Thu 13 Aug 2026 05:01:34 +0000
Manifest this update:     Thu 13 Aug 2026 05:01:34 +0000
Manifest next update:     Fri 14 Aug 2026 05:01:34 +0000
Files and hashes:         1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: ACntSCOIPE3FhUK4i43Vbu9sxa/opTGSGWjgs7MKPQ8=)
                          2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 05:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:7f:40:b4:64:72:04:71:a6:1f:49:e3:01:84:91:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Aug 13 05:01:34 2026 GMT
            Not After : Aug 14 05:01:34 2026 GMT
        Subject: CN=dac655f68e15a41c86c3d470c120c8d2ab5f62db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:04:5e:23:1b:03:8b:ab:b2:8d:1f:25:b0:
                    1a:8e:e0:f0:cc:f2:45:e9:46:38:e9:e3:21:11:14:
                    ba:55:4b:a7:d3:da:e2:a3:3f:91:0e:8d:fc:8a:54:
                    43:99:e8:bf:83:5b:0e:2a:02:57:30:f7:e2:5f:7e:
                    16:67:00:bb:31:2b:da:2a:97:93:e2:bf:e1:11:86:
                    8f:3e:35:1a:cf:8a:c1:65:84:9c:b9:80:9d:36:78:
                    07:e8:43:69:e2:df:b9:09:c3:99:b5:e3:64:ea:7c:
                    17:47:2d:ef:29:e4:b6:7c:4c:89:a1:97:fa:27:f5:
                    41:7a:6d:b2:1e:87:66:26:1d:32:28:14:f4:d4:23:
                    d7:cc:c9:32:ad:f7:b4:ef:75:1f:c5:21:76:77:0b:
                    40:53:2a:2c:b4:83:f9:1b:d4:c7:87:6d:4d:0f:ae:
                    16:e4:9f:38:b6:af:7f:05:00:a0:aa:bf:4a:f7:ff:
                    f1:42:8a:e1:40:77:85:09:1b:30:1c:9f:e3:82:5c:
                    5f:0c:9e:78:44:24:2a:00:1f:ba:56:b8:fc:17:81:
                    20:1e:cb:ac:71:54:5c:af:4b:86:83:03:93:84:72:
                    e5:71:44:3c:d6:53:c7:df:9a:c2:8f:87:f5:94:2f:
                    99:97:4c:df:20:fb:5f:41:45:41:60:f8:13:89:87:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:55:F6:8E:15:A4:1C:86:C3:D4:70:C1:20:C8:D2:AB:5F:62:DB
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:46:81:c7:a4:f1:61:aa:19:b3:b2:d3:5d:26:42:df:96:
         e9:8b:7a:16:e6:5d:b2:a7:01:1c:d7:ee:9d:89:65:19:0d:10:
         0f:ed:a7:86:b6:20:09:b2:d6:37:2c:98:bf:b9:ad:de:bf:2c:
         3e:7a:d7:c6:73:c6:c4:28:7a:67:c0:b2:3b:18:1a:82:41:55:
         6c:70:cd:44:a6:0a:e5:b2:32:05:66:91:26:eb:64:1b:1d:4f:
         2a:ce:58:ed:d6:af:f7:dd:5a:23:62:40:2d:23:c1:23:13:01:
         da:36:8c:71:c4:66:15:59:87:89:f5:22:9b:63:14:32:53:92:
         60:4a:e8:4d:68:2f:ff:ce:d5:33:a2:04:17:69:3a:82:c3:4d:
         8b:4f:01:bb:e0:d3:d9:16:bc:46:19:87:7e:6f:24:ca:2a:55:
         78:b3:5c:9f:75:8c:ae:2a:e8:74:e2:47:c2:ee:b5:2a:24:07:
         75:7d:d8:4e:3a:d2:1a:18:3e:b1:75:84:6b:05:be:43:f5:e0:
         cc:3d:ac:20:7b:99:c4:56:d4:31:69:4a:e4:ec:7a:9a:1f:f2:
         56:c9:82:eb:85:8f:f8:b4:fb:39:ca:3c:73:3d:c0:07:4b:35:
         d3:67:b7:61:b3:c7:1e:1a:10:15:5d:ea:e4:e2:71:ec:4b:0f:
         85:71:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:17:23 2026 by rpki-client