Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File:                     Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier:          VcfJEKRTVquujrqR0GifOwjpgh1CNW3myGwFxm84VGY=
Subject key identifier:   99:AD:E7:8D:55:3F:B6:80:D1:17:8A:36:4B:42:E5:20:37:1E:9D:2A
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer:       /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial:       019FA3E066E3441714A42333FC8FDF0C9138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 14:00:20 +0000
Manifest this update:     Mon 27 Jul 2026 14:00:20 +0000
Manifest next update:     Tue 28 Jul 2026 14:00:20 +0000
Files and hashes:         1: 9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa (hash: Ew3sgvXIFSVbIaXejNH5mh4KuqPNbuNRT+236zCj8P8=)
                          2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: z0IhTjb0xBs40EDq8z9x4nDEXdq+SH3VsdK8kgEHW+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:e0:66:e3:44:17:14:a4:23:33:fc:8f:df:0c:91:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
        Validity
            Not Before: Jul 27 14:00:20 2026 GMT
            Not After : Jul 28 14:00:20 2026 GMT
        Subject: CN=99ade78d553fb680d1178a364b42e520371e9d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:7a:d5:80:77:23:93:9e:bb:57:24:92:2b:
                    02:d8:75:dd:91:a2:91:91:35:23:28:94:e1:e5:82:
                    99:68:31:6f:e1:81:c0:ce:e6:f8:99:5b:a7:81:dd:
                    26:da:3b:c9:4d:cc:df:77:46:9b:d4:25:79:3f:e8:
                    e1:3c:d6:17:7a:fb:a4:65:93:58:04:34:77:00:68:
                    86:52:ac:ca:2b:b9:b2:5d:ab:4f:ad:f0:ad:55:3c:
                    b2:0c:26:19:4a:5c:ad:f8:80:44:61:e2:0a:8d:c5:
                    37:b0:9c:bc:e3:0d:bd:48:95:97:24:b0:25:c2:b3:
                    37:98:ec:5c:04:5d:c2:24:42:6e:5b:2a:62:5b:fb:
                    dc:96:0f:6c:63:e8:fc:40:73:b7:1d:c3:e0:19:d8:
                    0c:32:df:d1:62:34:12:a0:0b:2e:7b:3c:d2:3c:6a:
                    27:4c:fc:da:0f:88:77:a6:a2:c3:73:2a:47:25:5c:
                    a2:d8:a3:88:cf:02:cd:6e:46:37:17:49:5a:e1:4d:
                    68:a8:88:ec:ea:47:89:f5:e2:cd:22:b1:cd:27:11:
                    e8:4b:d5:a5:f5:fd:7b:33:bc:5c:d2:79:51:e1:df:
                    0c:61:7c:e9:11:38:17:dd:71:cc:b6:08:d5:5f:1a:
                    41:88:f6:25:e1:f1:fc:2f:3a:1e:60:48:2e:ec:aa:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:E7:8D:55:3F:B6:80:D1:17:8A:36:4B:42:E5:20:37:1E:9D:2A
            X509v3 Authority Key Identifier:
                keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:25:f1:90:3f:13:14:62:45:ed:af:0e:ae:23:ae:5f:e9:c5:
         38:2c:a0:a4:44:bb:46:85:10:12:f7:ec:cc:c2:60:70:cd:6e:
         85:14:1e:f4:ec:4e:55:db:32:b3:8d:75:71:95:a7:f2:9e:e2:
         8f:fe:ee:d8:3f:74:ff:49:cb:88:92:87:e3:a3:5a:07:b3:73:
         fb:b8:6f:ad:3a:a6:1f:89:61:d0:0a:39:7c:38:14:9d:a9:eb:
         c6:71:d3:71:6e:39:fd:43:f0:4f:40:43:5c:fc:cd:c5:c4:71:
         d0:b7:2d:e8:42:e8:b4:6f:bb:55:4f:4d:fb:b0:45:f5:7f:f2:
         62:d5:44:88:36:a7:37:0e:6b:a4:c0:e0:63:08:7a:9e:b2:9b:
         10:08:b1:e2:2c:a8:82:f8:0c:2c:5e:34:f3:64:d0:d7:26:ed:
         b8:57:c2:de:c1:d9:cf:dd:4c:90:22:22:5a:9b:d4:fa:4e:b9:
         8c:9b:72:c8:d7:34:2c:f0:dc:43:10:69:9b:21:2f:0e:5a:94:
         dd:da:ef:a6:bd:12:cf:37:ad:84:6c:97:5e:f8:c3:bc:14:c8:
         43:64:fb:0c:ef:d3:6d:fb:7a:24:74:2a:38:45:5e:d0:2e:4a:
         43:25:02:e7:f2:3f:61:5e:93:85:eb:75:5d:80:4c:b8:ac:06:
         8d:4b:3f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:46 2026 by rpki-client