Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File:                     gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier:          9vJkoAn1ngp7URA1qZY3++zWJTEcsmM1KtasenBdDA0=
Subject key identifier:   8F:53:68:9E:31:04:27:AE:EE:D2:75:6D:CF:29:D2:C1:E5:0F:56:03
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       019FA0A8CA3A47FAD33B9B8536206F1B076C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number:          19CF
Signing time:             Sun 26 Jul 2026 23:00:44 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:44 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:44 +0000
Files and hashes:         1: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: oC/cRiw450BMxwMZj6HqhnMfnudA6K2f50E/zWzNXTI=)
                          2: pA1ePqI7SD5ojrPp_XCatoiq2zo.roa (hash: CAWXsP1JZ/KW0NUUE6ss0n5HsqgH1Gk+g+22Bws1Rqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:ca:3a:47:fa:d3:3b:9b:85:36:20:6f:1b:07:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Jul 26 23:00:44 2026 GMT
            Not After : Jul 27 23:00:44 2026 GMT
        Subject: CN=8f53689e310427aeeed2756dcf29d2c1e50f5603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:54:bf:3a:b5:b6:93:c8:a0:b5:85:6c:cb:
                    5b:0b:03:5f:03:8e:73:be:b9:79:5d:76:a2:51:39:
                    d4:be:b4:74:75:9e:54:52:9d:3a:76:e1:08:89:75:
                    c8:47:47:d6:a1:27:b9:a6:6f:b3:c5:c5:f0:b0:af:
                    a0:59:16:aa:5f:b3:08:24:b1:7d:21:f6:e2:a8:28:
                    2b:b8:fc:2c:b3:7f:aa:56:11:d3:ee:5a:94:ac:5d:
                    c3:11:c1:5d:4b:67:20:09:f3:a4:3c:2e:da:8e:60:
                    4b:45:f9:f1:d4:b6:0e:6b:68:cc:8a:cd:fc:89:dc:
                    2f:62:8f:81:7c:69:cc:15:52:f3:25:2d:aa:37:f3:
                    db:6e:50:fb:d7:6f:5d:31:59:4e:a0:af:5f:5e:00:
                    bc:80:bd:21:89:1c:4b:29:c6:03:46:98:07:5a:79:
                    4a:0b:5a:b4:7c:ef:1c:87:dc:7f:57:72:5e:79:41:
                    11:da:28:cf:30:8b:b4:9b:4f:99:82:3f:58:9f:1b:
                    63:46:09:bd:95:98:32:a8:ee:14:4c:a9:9e:1b:61:
                    7b:8d:42:f3:c9:11:f8:b5:b8:4d:c7:c2:cf:11:15:
                    07:ca:af:63:bc:8f:23:4e:0a:6d:82:bf:5c:d4:b1:
                    47:60:23:44:f7:b0:f7:8e:3d:ea:f2:a4:93:3b:f1:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:53:68:9E:31:04:27:AE:EE:D2:75:6D:CF:29:D2:C1:E5:0F:56:03
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:96:0b:ab:8e:2d:9d:44:bd:45:ca:14:52:42:bb:a4:a5:
         99:e8:a4:1b:15:d4:11:ab:90:52:99:17:4b:39:f2:36:7b:19:
         48:7e:7e:90:c8:9b:00:87:75:96:38:b3:5d:12:42:8d:0b:74:
         84:18:e0:42:3b:e6:a6:99:40:49:59:87:a9:52:95:ba:3e:78:
         c6:25:14:c2:1a:60:3b:3f:52:41:ff:6f:5c:18:cd:84:ff:52:
         ec:83:60:2c:31:2f:da:18:2d:55:89:f0:ce:ee:09:6c:ec:d1:
         7f:d0:26:e9:40:ef:d7:c3:84:ae:94:3c:d1:5c:d4:4a:8d:c2:
         35:2b:e8:e2:5c:cf:29:3b:77:3c:72:c1:aa:1c:6a:d7:20:4b:
         f9:3b:05:69:ca:71:ec:a2:e9:24:44:68:43:fe:6e:68:d7:2a:
         e0:6c:5b:a0:3c:c1:0e:b9:38:f1:23:3f:0f:28:6f:5d:01:df:
         f0:6d:73:c9:89:40:e4:95:ae:53:8b:fa:4d:04:f3:64:77:e5:
         5d:21:b6:95:a7:3d:79:a1:e4:17:1d:fe:ab:7c:ce:a8:48:3b:
         7e:28:d6:8e:9a:e0:61:c8:b6:64:c3:7f:37:bf:ca:17:d4:6a:
         c5:b4:81:19:ba:0c:9f:65:f1:dc:3e:0b:16:2b:8a:43:51:b8:
         ac:5d:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:08:21 2026 by rpki-client