Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File:                     GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier:          vkZH/VnVNMjfC6aodpLiga9lnkJESjhYCaYjAiKXqqA=
Subject key identifier:   CD:A0:78:F8:29:B2:EF:A1:5A:E1:87:C9:1C:70:F7:78:68:37:33:59
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer:       /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial:       01A0201E5A3AEA57C7832F787F89D9B534FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number:          1A18
Signing time:             Thu 20 Aug 2026 17:00:55 +0000
Manifest this update:     Thu 20 Aug 2026 17:00:55 +0000
Manifest next update:     Fri 21 Aug 2026 17:00:55 +0000
Files and hashes:         1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: gN5bjF2szrqQZ9nAFMS7r0wPNHqF/PxCRqcVQAIijwI=)
                          2: cXNWLJ-fheZVPTHqnxKr5qEyQiI.roa (hash: X4rdPWY18bogslRUxkmtUVkAapWRBduOj/tJgoCH118=)
                          3: hwehb2jiu3a77T6FcjmviTy6QbQ.roa (hash: /bg0v2TYmrbSPAxogweq6+6+Nt4ijd19YXkzkd2haPo=)
                          4: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:1e:5a:3a:ea:57:c7:83:2f:78:7f:89:d9:b5:34:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
        Validity
            Not Before: Aug 20 17:00:55 2026 GMT
            Not After : Aug 21 17:00:55 2026 GMT
        Subject: CN=cda078f829b2efa15ae187c91c70f77868373359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:2e:2e:0b:c5:d2:03:52:35:8f:7c:b3:53:
                    d5:03:ff:6f:d1:ae:11:d4:3d:2d:e2:04:d6:fc:84:
                    b2:7e:0d:7f:19:2f:55:b1:8a:07:3e:63:bf:bd:8d:
                    67:d1:36:c6:24:02:a8:83:53:ce:a8:83:07:db:d0:
                    bc:70:ae:c4:29:f3:1d:23:67:f7:c1:5c:27:05:9d:
                    83:89:73:3f:65:a3:41:9b:66:8c:34:4c:c2:a5:fd:
                    c4:d0:ac:07:ea:09:b3:0e:a6:f4:9b:81:64:a7:6c:
                    5f:cd:f6:3c:2e:00:49:5e:47:49:07:8e:4f:a0:8d:
                    75:d5:a5:85:0b:fa:82:aa:06:ca:77:fa:af:7d:b4:
                    9b:3c:76:ee:8f:ec:7f:b7:d6:dc:4c:e2:0b:f1:40:
                    80:14:93:36:fc:8b:f2:61:65:b1:2a:94:e1:c7:ce:
                    42:e6:3e:ab:a0:e2:01:f3:35:0a:08:1d:5a:22:ad:
                    2c:b8:59:52:c0:2a:e5:1f:41:61:07:27:88:30:cb:
                    07:2c:d7:68:17:d3:25:bb:10:a0:5e:9e:e6:0f:c0:
                    4f:b3:aa:54:db:72:c9:f3:28:9c:a2:95:ee:91:70:
                    d0:fc:72:bb:c4:85:9e:c8:47:4d:40:9c:d8:f7:2c:
                    4a:78:23:89:8a:14:8b:27:34:2d:ee:39:06:73:70:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A0:78:F8:29:B2:EF:A1:5A:E1:87:C9:1C:70:F7:78:68:37:33:59
            X509v3 Authority Key Identifier:
                keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8b:48:83:15:e6:b3:e7:c9:f7:b8:1c:26:c8:35:36:51:79:
         1f:06:13:4a:c9:2a:d0:e1:ce:dc:e8:0f:72:30:f7:ea:2f:46:
         1c:42:4e:22:7b:17:d2:ee:6d:32:dc:85:b6:a6:27:38:51:92:
         3b:26:bc:45:32:e0:bb:65:3f:ee:46:25:5c:55:a5:63:20:8d:
         f4:6e:ae:e4:eb:6d:71:ef:a4:7d:4b:3d:b0:3d:33:1f:ac:73:
         4c:3f:5e:3a:18:f9:60:bd:77:2a:86:77:da:a5:57:2e:1e:db:
         77:d2:17:ae:ac:c1:c9:05:37:bc:6d:7d:d7:b2:a0:af:43:d3:
         37:1b:d3:d7:e5:cd:0a:7e:0c:ec:dd:e5:29:4a:e1:d5:46:74:
         f0:84:37:a1:b0:66:09:5a:b0:c2:10:7e:d6:15:df:f5:2e:64:
         db:c6:83:e2:9c:cf:c5:0d:76:58:db:05:72:c5:50:02:4e:d7:
         d9:06:24:f4:ff:90:5f:06:9c:a6:c3:41:46:6b:69:af:bd:1e:
         70:6b:68:64:59:f4:5c:de:aa:cd:ed:a1:cb:4b:be:8b:f6:31:
         8b:4e:27:b4:74:5c:2b:86:7b:ac:c6:30:a0:f2:b3:61:fc:17:
         eb:8a:0c:ee:95:f9:88:fa:47:f6:a2:b2:16:22:6b:e9:54:41:
         8c:70:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:55 2026 by rpki-client