Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File:                     GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier:          uwNHZKBa7idFmd9kqowEWeWdGTSS7EDXd5RFyppL+EA=
Subject key identifier:   18:77:E5:1F:07:D7:0B:E3:6E:D4:7B:12:F0:48:96:94:23:8D:AD:47
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer:       /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial:       01A040F2BC92FB4E58A622FB907E9F084BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number:          191F
Signing time:             Thu 27 Aug 2026 02:00:44 +0000
Manifest this update:     Thu 27 Aug 2026 02:00:44 +0000
Manifest next update:     Fri 28 Aug 2026 02:00:44 +0000
Files and hashes:         1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: S0rJyJU6h3DPM81MpnwJwzFMzq3BuWRezO5fNO9en2Q=)
                          2: Z0_zAV1Qro2ldozAcdxyKQi0OQU.roa (hash: xEsTqLQfCCv7FY6OZ8FW4GDtw57riHCFBltpmR9h+Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f2:bc:92:fb:4e:58:a6:22:fb:90:7e:9f:08:4b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
        Validity
            Not Before: Aug 27 02:00:44 2026 GMT
            Not After : Aug 28 02:00:44 2026 GMT
        Subject: CN=1877e51f07d70be36ed47b12f0489694238dad47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:8e:8a:86:15:3e:8e:bb:03:8c:cd:13:23:
                    14:fd:92:98:89:60:ec:d2:a8:44:0a:65:5a:61:23:
                    b8:42:28:2f:b4:be:da:14:ed:59:be:2a:f3:20:2d:
                    4c:82:b3:32:38:9e:90:a3:9d:0e:b3:23:de:1a:78:
                    72:2b:04:3e:68:1c:ae:2e:98:03:53:e3:2e:75:5d:
                    c6:3b:f6:31:b4:0f:f8:7b:94:21:30:24:14:c2:0c:
                    4a:fe:93:81:97:76:81:4a:b9:fb:39:17:f8:91:53:
                    38:18:5a:91:6c:62:ce:cb:b6:60:79:31:4e:9e:3a:
                    3c:56:fb:35:4a:ac:ee:19:91:bb:9a:9a:bd:e9:fd:
                    fb:cb:25:aa:5f:e6:76:5b:bf:d2:89:51:32:71:ac:
                    28:29:9f:35:dd:35:51:67:fc:d6:b4:fc:00:3d:b1:
                    59:7a:c4:12:3b:6b:4d:46:c3:98:d6:9f:c8:50:f3:
                    52:69:39:b3:20:76:e6:4b:65:78:b7:9b:a0:57:55:
                    f9:38:2f:ab:d2:ed:9f:80:e5:32:d1:77:1d:83:e3:
                    91:12:3d:e2:c4:60:86:fb:61:80:45:e0:ae:2d:62:
                    7d:d3:1e:8b:96:e2:09:c4:fe:ac:7f:b7:97:91:24:
                    73:0e:31:31:4b:c3:30:ac:0f:71:33:6e:b2:c4:21:
                    f0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:77:E5:1F:07:D7:0B:E3:6E:D4:7B:12:F0:48:96:94:23:8D:AD:47
            X509v3 Authority Key Identifier:
                keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:47:a9:81:cd:0c:55:f3:19:7c:1d:41:5c:a8:8a:77:45:a7:
         22:08:2e:6d:da:64:2d:ad:9c:27:e5:30:69:79:b0:ce:89:ab:
         c8:dd:76:72:28:2a:92:4d:16:71:e0:52:84:28:79:8c:7d:1f:
         30:3e:80:d1:d5:83:96:b7:22:2d:8f:17:c3:b7:f1:fe:c0:4a:
         88:e2:bc:bc:c9:8f:24:49:53:b0:81:23:00:af:75:95:72:50:
         dc:90:eb:ce:ab:07:2f:bd:54:46:f7:b8:61:5d:b3:aa:2f:c6:
         e9:e0:2b:3d:31:19:99:0c:5e:73:b7:d7:17:4c:4d:75:df:a8:
         5c:77:67:b6:7a:73:7c:4a:01:e0:77:94:f3:94:dd:28:56:4d:
         a8:6e:7d:eb:b8:43:cd:1a:fb:8f:bf:50:52:e8:00:e1:38:13:
         fa:94:02:8a:ad:c1:07:ce:26:e0:14:87:9f:b8:e3:1f:d8:03:
         9d:60:e7:85:b2:2f:a3:9b:ce:91:45:4f:1a:2f:0e:59:19:ea:
         cf:0a:14:0e:f5:34:4d:ff:da:29:9e:fd:38:3e:4c:d7:eb:41:
         90:b8:cb:f7:e1:e3:c1:f9:a6:08:e7:27:d5:a1:99:99:27:6a:
         19:c9:93:33:e4:c0:02:35:bf:84:b7:9a:fe:0c:21:60:3e:c1:
         3a:0b:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:15:29 2026 by rpki-client