Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File:                     GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier:          KrZiKwaNWg1u8FQWmLWcJ4bUr6BHBqhnvs3EFYLKx8Q=
Subject key identifier:   9A:7A:03:5D:EC:A6:A2:15:AD:24:01:3A:7D:18:52:51:69:5D:56:7E
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer:       /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial:       01A00439BB1E49137CE0D8D83B82578B0364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number:          0B80
Signing time:             Sat 15 Aug 2026 07:01:27 +0000
Manifest this update:     Sat 15 Aug 2026 07:01:27 +0000
Manifest next update:     Sun 16 Aug 2026 07:01:27 +0000
Files and hashes:         1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: otBqqYe+yneCVX/t+XzrO5/mnPzJ1n67WcD1s1yTKkY=)
                          2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
                          3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:39:bb:1e:49:13:7c:e0:d8:d8:3b:82:57:8b:03:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
        Validity
            Not Before: Aug 15 07:01:27 2026 GMT
            Not After : Aug 16 07:01:27 2026 GMT
        Subject: CN=9a7a035deca6a215ad24013a7d185251695d567e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:b3:28:ae:77:98:7b:ad:d4:3c:f7:23:e4:
                    ee:03:a9:7a:94:86:db:ab:f9:9a:6a:f8:bf:ce:4c:
                    4b:28:34:61:e1:dc:3d:4c:75:39:89:f9:f7:1a:c8:
                    4e:37:2e:03:a2:3b:16:71:67:9e:26:1a:bd:a3:a5:
                    9c:43:7d:76:2d:ef:6f:0e:60:0a:c0:88:44:17:d8:
                    f6:e6:1b:dd:52:82:bb:32:42:5a:48:03:ef:56:05:
                    bb:62:b1:3a:d4:27:e5:7c:e0:c7:86:fa:80:89:6d:
                    82:61:27:14:bc:65:e9:6a:c1:11:c3:26:1e:6e:20:
                    97:54:79:b3:16:90:dc:7e:de:58:70:49:f5:ba:9d:
                    81:3d:cb:27:7e:e0:7b:20:fb:2b:47:b6:02:0c:98:
                    26:6e:3a:dd:c2:f9:75:e6:b2:5a:87:7c:bf:97:60:
                    6d:75:7b:cd:c4:0b:06:09:78:02:13:a2:b3:4e:2a:
                    17:65:01:bf:93:41:a0:89:05:a5:49:4e:26:29:75:
                    f2:49:3f:f2:74:e3:a3:0e:cb:75:32:24:50:e9:59:
                    f0:a4:54:17:b8:c9:fc:a1:58:cc:84:30:35:c2:50:
                    ab:78:3b:08:56:eb:90:d9:52:28:06:7c:11:47:2d:
                    6f:5d:70:ce:6c:7d:0f:5b:06:e4:1d:f1:2e:02:c3:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:03:5D:EC:A6:A2:15:AD:24:01:3A:7D:18:52:51:69:5D:56:7E
            X509v3 Authority Key Identifier:
                keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:be:bc:81:a2:c3:db:23:33:5d:cc:c0:4a:63:4d:0e:14:bb:
         a9:10:c7:ac:5f:be:96:2e:ea:87:fb:50:3b:b3:04:44:93:ae:
         5a:27:76:9b:f0:e8:5b:05:33:96:90:21:4e:b6:18:90:39:3f:
         a2:bd:de:c6:aa:ca:4d:58:4f:49:dc:a6:9b:10:8c:f7:c2:a8:
         5f:d7:1e:72:44:0a:37:9b:5f:2d:79:42:a8:43:17:14:1b:ec:
         4d:74:21:24:1c:3c:bf:54:07:15:07:07:f0:f5:28:0a:aa:97:
         c8:74:92:13:ef:d5:6d:e2:15:2b:ad:7a:df:83:bd:59:18:4a:
         b4:c7:be:2a:c9:92:77:f8:7d:67:82:e7:03:3a:25:fe:4f:39:
         2b:b6:94:e1:00:64:8d:1c:2f:3b:d0:e8:bc:0f:50:ca:10:71:
         73:92:2e:6b:aa:f0:dd:37:83:92:ea:2f:dd:07:2e:7b:14:7d:
         2a:fd:1b:df:4b:6f:ca:48:69:95:81:28:c7:db:02:9d:2f:8a:
         fa:dc:b4:18:96:15:aa:2b:bd:47:94:c4:df:46:db:e1:03:e8:
         b0:7b:c7:46:c8:49:ef:e9:fc:d2:a5:92:ee:f6:e1:68:e3:76:
         ed:f6:1a:84:20:54:26:e9:d3:77:d9:7d:57:51:00:85:1e:3f:
         0a:e1:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:35:54 2026 by rpki-client