Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File:                     gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier:          5rDMOEUM+GWQskxrEI6rBOXc5bfR4v+HNFsJNQmiThA=
Subject key identifier:   8B:58:5E:D5:B6:51:D6:D5:3D:B5:75:2A:7C:AB:4F:0D:B1:E9:79:45
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer:       /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial:       019FA2CE7BC2D2C5421B564F6C91CE466B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number:          141F
Signing time:             Mon 27 Jul 2026 09:01:08 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:08 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:08 +0000
Files and hashes:         1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
                          2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
                          3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: 6znoZtV9NLQwOoErGQXkRynECVjGZRBQwfp+cN9A0co=)
                          4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:7b:c2:d2:c5:42:1b:56:4f:6c:91:ce:46:6b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
        Validity
            Not Before: Jul 27 09:01:08 2026 GMT
            Not After : Jul 28 09:01:08 2026 GMT
        Subject: CN=8b585ed5b651d6d53db5752a7cab4f0db1e97945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:cc:79:30:58:ec:39:37:83:90:69:ef:30:
                    86:63:d2:d9:ba:1d:bd:b3:be:f3:88:e9:b3:fb:3f:
                    22:50:45:f3:b4:03:71:12:f6:c9:57:aa:81:7d:61:
                    96:66:7a:8b:28:ef:fc:f8:c8:92:79:25:2a:09:8b:
                    4b:62:c0:19:f4:b8:98:78:41:60:53:ad:90:b8:6a:
                    1a:36:b6:e3:b0:e7:59:d7:9e:a3:1a:f1:ff:43:47:
                    46:e5:78:0e:ab:5c:0c:5c:3a:b0:83:11:9f:df:c5:
                    88:5c:5d:df:77:bd:3a:3e:80:95:a4:8e:07:45:e6:
                    3d:ac:c0:9d:f3:da:bf:1d:65:80:b6:1f:1d:b0:4c:
                    92:e0:db:77:2a:cb:9d:a5:32:e7:50:82:c2:48:68:
                    66:d4:db:a3:78:bb:67:6e:ca:54:48:74:38:38:67:
                    25:2d:bc:fb:7d:96:be:8f:8b:ab:78:1d:27:83:8b:
                    b0:07:aa:80:e5:ae:c2:81:64:9a:71:5e:a0:75:46:
                    11:fd:16:83:5b:79:6e:23:a2:04:1c:4c:c0:ee:51:
                    47:03:38:04:6a:d6:d6:b9:1a:dd:30:30:86:59:c8:
                    aa:2d:33:40:1f:a6:1e:88:79:49:4c:76:97:b5:0c:
                    98:57:5f:fa:87:60:1e:f5:8d:b6:46:7c:e0:a7:bc:
                    39:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:58:5E:D5:B6:51:D6:D5:3D:B5:75:2A:7C:AB:4F:0D:B1:E9:79:45
            X509v3 Authority Key Identifier:
                keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c8:8c:4a:51:0a:99:05:1c:4b:d2:ca:e2:7b:78:96:84:6f:
         61:43:64:61:9f:19:58:fe:42:34:f3:c3:58:60:e5:1c:66:02:
         db:b7:24:58:2a:01:23:4e:0f:8b:64:c8:97:a8:1f:41:ea:cc:
         46:17:3d:88:4d:40:01:9d:54:55:14:79:e8:de:6c:47:b6:0a:
         c1:bf:41:c4:23:43:25:25:03:10:f4:45:7b:dd:e9:cb:71:6f:
         ee:87:60:30:15:27:c0:e9:61:0e:09:e9:27:e5:55:a9:91:d6:
         bc:04:bb:a6:5e:91:3e:28:2f:ef:4b:36:b8:30:2d:68:0b:4e:
         2f:e8:1e:cc:80:13:af:8b:5c:50:24:44:af:cc:49:18:07:a9:
         b9:5c:b9:e2:b8:3e:ce:1c:bb:d6:54:4d:36:1d:d2:57:ea:51:
         5a:7a:5d:73:5c:69:e4:68:9a:30:6e:e7:3a:7c:e7:61:df:b1:
         3b:ac:a6:9d:79:c5:8e:ab:1a:57:86:9a:b0:4f:a1:a3:95:df:
         c7:90:d2:e8:50:39:f8:39:ad:ae:93:fb:e8:7f:ee:14:d5:a8:
         e8:66:bc:bc:7a:79:b2:c9:0b:fb:c4:3a:65:c2:b2:41:42:77:
         53:50:f3:b7:a3:bc:e2:eb:3e:df:b3:91:98:98:bc:eb:fd:b7:
         38:ec:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:47:43 2026 by rpki-client