Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
File:                     gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft (raw, json)
Hash identifier:          6MQBCiIX17XfeqLGIo8TYmLZUDolN3WP5vgOeJmYveI=
Subject key identifier:   E3:00:DF:04:1F:5E:A5:6C:BC:84:73:2C:45:A4:9F:54:8E:56:1F:97
Authority key identifier: 83:1A:9A:5C:62:7E:9C:EB:F6:C6:BB:D1:AB:22:93:6C:6F:AE:01:7E
Certificate issuer:       /CN=831a9a5c627e9cebf6c6bbd1ab22936c6fae017e
Certificate serial:       01A0016F4030B872BEBFA63FDB503A581368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:03 +0000
Files and hashes:         1: gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl (hash: fTMGQLNeqVG7+TfFCEGtri4LKueUePSlYBA2upMQEQY=)
                          2: v5Q8h0Frf_fkKX96wbZrroiiUgw.roa (hash: xazWsb2KBZG8oZXdC4uirJOWCgIYpdumcjOq7MINQ1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:40:30:b8:72:be:bf:a6:3f:db:50:3a:58:13:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=831a9a5c627e9cebf6c6bbd1ab22936c6fae017e
        Validity
            Not Before: Aug 14 18:01:03 2026 GMT
            Not After : Aug 15 18:01:03 2026 GMT
        Subject: CN=e300df041f5ea56cbc84732c45a49f548e561f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:c6:be:06:59:f2:36:36:2b:a3:6a:18:b7:
                    60:53:c3:42:80:1a:4b:2e:c1:27:6d:44:a9:57:3a:
                    4d:cc:3b:5a:d1:60:a5:ad:eb:10:6a:82:13:c6:df:
                    0f:a6:e3:71:a7:ee:f9:62:9f:91:a2:53:1d:c9:73:
                    0c:7d:26:34:19:96:28:00:c4:08:2f:ac:94:58:5d:
                    37:ca:dc:b7:50:6f:42:0e:bf:1b:9b:e9:2f:39:98:
                    20:ac:e3:96:3f:00:52:13:cb:2c:fa:2a:b3:4c:19:
                    b1:0b:22:d1:8c:2f:ff:68:91:3f:b2:bf:3b:d7:9b:
                    49:b8:f0:7f:27:fa:66:99:b9:e0:2b:92:f8:ec:89:
                    b1:cc:64:c6:cc:d9:f4:e3:17:87:65:2e:b0:ad:96:
                    8d:26:7c:2e:d0:1a:4b:68:eb:9f:83:43:2d:c1:69:
                    0c:99:67:86:64:9c:79:cf:02:1a:1d:db:e8:23:d5:
                    67:c6:97:c1:a0:79:7d:2c:6c:28:e4:49:d9:c6:fb:
                    08:4b:6c:22:3d:4a:26:a2:2e:2b:08:46:7a:cd:3a:
                    c2:af:0d:9c:40:c8:b9:c7:f0:07:de:ee:cf:c0:23:
                    ec:fa:30:23:f2:d4:37:df:ba:9c:25:46:a0:fb:bc:
                    e9:80:e2:28:28:02:c4:13:af:df:b5:f4:c1:fe:2e:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:DF:04:1F:5E:A5:6C:BC:84:73:2C:45:A4:9F:54:8E:56:1F:97
            X509v3 Authority Key Identifier:
                keyid:83:1A:9A:5C:62:7E:9C:EB:F6:C6:BB:D1:AB:22:93:6C:6F:AE:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c9:a5:79:ca:29:ff:af:3d:8b:0b:3c:f9:57:a6:a8:f6:a2:
         84:de:8a:98:9b:c6:50:07:e1:37:ae:e8:63:0b:04:ab:b8:be:
         9e:87:50:23:6f:6e:42:f0:e9:0b:99:19:4d:38:67:e5:b0:8d:
         3f:05:0e:03:c2:a6:a9:69:1c:7d:56:b3:e4:81:42:fb:b0:7e:
         e1:18:62:8e:4f:99:89:a2:26:8f:bd:0e:ab:4a:57:7a:49:02:
         36:19:f2:bc:6b:33:35:8c:d3:80:25:1e:13:7b:b0:9a:1a:4b:
         76:4f:01:aa:63:ee:5a:67:54:e4:7b:e8:1a:6f:7d:3d:19:e9:
         e8:f3:34:da:72:0b:2d:f6:69:6c:71:57:91:82:15:ce:ce:32:
         8a:84:c7:a4:2a:ba:4d:4c:2e:8d:a7:11:ce:d2:40:5d:b6:39:
         1b:6c:2b:04:53:9d:d8:60:d6:fe:e5:11:93:e6:3a:90:14:64:
         09:8f:08:1b:95:fe:e6:95:20:d0:01:73:58:26:83:f3:56:53:
         98:b2:db:1b:90:ba:db:4b:7a:b7:e6:24:82:33:fc:ee:8b:25:
         20:29:fb:32:f3:85:44:c1:47:22:ac:82:dc:6e:03:17:75:8f:
         fb:75:27:98:a3:d0:c8:a7:28:14:2b:ba:9b:56:5e:1d:51:c5:
         dd:df:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:28 2026 by rpki-client