Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File:                     GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier:          qTHWX5ZjFHXDxEzykZiYIdwG/M1U6VZyJSzQqPIN5M0=
Subject key identifier:   C7:76:B8:6C:C3:49:10:BB:05:CE:01:AD:DA:54:49:2C:3E:94:D0:4A
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer:       /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial:       019F1265127CDB81117D088FECA2EE600BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number:          05BD
Signing time:             Mon 29 Jun 2026 08:00:41 +0000
Manifest this update:     Mon 29 Jun 2026 08:00:41 +0000
Manifest next update:     Tue 30 Jun 2026 08:00:41 +0000
Files and hashes:         1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: CRrDb/V3ejS1++Al5m4g0J3SW08JdpWZpzmssoEuUlk=)
                          2: WKAggwW4-2Bg4MeY0gX0Cx4LA4U.roa (hash: /G/TygfNsNBDAG6vbAPSrcTJMAI8N6hE5YMA8pkrvnA=)
                          3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:12:7c:db:81:11:7d:08:8f:ec:a2:ee:60:0b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
        Validity
            Not Before: Jun 29 08:00:41 2026 GMT
            Not After : Jun 30 08:00:41 2026 GMT
        Subject: CN=c776b86cc34910bb05ce01adda54492c3e94d04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:4f:cb:fc:13:7e:39:7b:b5:e9:db:3d:47:
                    f3:48:81:29:57:78:c0:99:2c:14:9f:3d:fe:bd:3e:
                    f0:9a:e2:24:c0:72:81:3f:9b:4e:41:2f:9e:93:25:
                    4a:18:e4:3d:53:ab:52:6c:71:32:34:0a:6c:85:2e:
                    c1:1d:1c:af:84:e3:b5:71:f5:d2:b7:8b:2b:db:9e:
                    c5:e9:a6:8f:5f:4b:ce:02:6a:c5:10:ac:dc:6b:de:
                    c3:a5:62:52:4b:ba:ed:53:56:e8:54:db:bb:b5:c9:
                    93:75:d5:01:a3:e6:e0:d6:cb:61:f5:70:85:20:fe:
                    4e:69:14:74:ad:18:d0:eb:ee:d8:19:f0:08:dc:b3:
                    96:64:f0:24:2d:3c:38:db:0e:aa:eb:f5:89:da:4b:
                    5d:f2:40:f5:1f:7b:4e:45:3e:4f:37:90:19:ee:93:
                    b2:c0:d4:18:55:b7:a3:26:21:e3:5d:1d:00:76:33:
                    32:2b:17:01:58:f7:80:d4:bc:12:c2:7d:7b:c7:91:
                    2b:51:85:a6:8a:c8:85:43:0d:55:5b:ac:2f:e9:f4:
                    ba:32:35:6d:8c:23:47:30:d3:a3:ec:d6:f2:ac:18:
                    ca:61:21:9d:02:4e:1d:ba:49:1c:dd:14:5c:05:fd:
                    13:e5:88:41:33:2e:44:5c:99:c2:52:3c:7c:e2:7f:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:76:B8:6C:C3:49:10:BB:05:CE:01:AD:DA:54:49:2C:3E:94:D0:4A
            X509v3 Authority Key Identifier:
                keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:6a:2e:69:6a:71:1c:0e:b8:a6:87:a6:e9:9d:b9:ca:82:
         12:3c:fb:b6:6f:3a:46:70:c5:9a:d0:12:cf:9f:b2:0d:d2:4e:
         f6:e5:e3:21:2c:f1:5c:b4:ed:13:10:8f:35:57:a9:31:78:a1:
         0a:51:0d:c3:d4:da:be:75:50:8a:bd:60:0e:56:3e:ff:af:4e:
         13:94:af:29:fe:dc:ad:ee:70:fa:29:af:fe:d2:87:12:40:e0:
         e5:49:b0:69:d1:e7:25:44:b6:76:58:7d:9e:bc:8d:a1:9c:eb:
         5e:aa:be:e7:8d:c8:11:62:4f:a3:ce:b8:19:0b:84:71:43:f5:
         9b:e8:99:0a:1c:fe:75:54:02:d8:e2:a0:ec:66:b1:53:d5:5c:
         93:0e:7c:a1:b3:ec:e6:2d:30:f7:13:6e:13:11:de:64:07:e2:
         8f:a4:c3:4c:5b:99:01:d7:5f:1e:13:55:02:e9:b9:81:53:f4:
         f1:21:83:8a:02:ae:f9:25:3b:57:9f:b9:a0:6a:1f:6c:2b:cf:
         2d:a1:e1:1d:56:a1:6a:e3:98:69:6c:ba:d1:ca:e9:fb:db:25:
         75:4f:82:af:6b:f2:92:a9:55:b3:b3:1c:d6:c9:d9:9f:1f:a2:
         4f:ff:6a:4c:18:34:34:9c:b1:a7:f0:47:32:65:25:f0:3f:a8:
         70:74:fc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:34 2026 by rpki-client