Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
File:                     GbiQW6xTUBxccgHgYY3w9F8RSnU.mft (raw, json)
Hash identifier:          4m6FKT+4t4z7We86MnwYyfd3FYSbfW5COnkRxgiUvM0=
Subject key identifier:   59:4A:15:DB:42:C7:2D:D4:3F:3E:27:0E:0A:DF:3B:35:72:18:1B:E9
Authority key identifier: 19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
Certificate issuer:       /CN=19b8905bac53501c5c7201e0618df0f45f114a75
Certificate serial:       019F86B1EF33029FF7D444614A8ECFDF08C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
Manifest number:          0107
Signing time:             Tue 21 Jul 2026 22:00:35 +0000
Manifest this update:     Tue 21 Jul 2026 22:00:35 +0000
Manifest next update:     Wed 22 Jul 2026 22:00:35 +0000
Files and hashes:         1: 48mZdI5GwAnLSURvpyliOOqttMQ.roa (hash: 31skaXcRsPZrgu8cTQ5ajy3MoKvly3qp6UXzeLtlo7w=)
                          2: GbiQW6xTUBxccgHgYY3w9F8RSnU.crl (hash: yo3yiI4PJ6Zgrj/R0OI0s0z+NvqCAWX3FNL/jIrqM9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b1:ef:33:02:9f:f7:d4:44:61:4a:8e:cf:df:08:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b8905bac53501c5c7201e0618df0f45f114a75
        Validity
            Not Before: Jul 21 22:00:35 2026 GMT
            Not After : Jul 22 22:00:35 2026 GMT
        Subject: CN=594a15db42c72dd43f3e270e0adf3b3572181be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:42:27:b3:71:45:43:23:2f:5a:39:1c:d4:
                    60:7f:cc:86:ad:93:06:13:76:aa:f7:bf:6f:d6:12:
                    63:cd:4f:4b:5a:fe:04:cd:95:9c:c7:6f:0c:52:8d:
                    c6:44:f5:29:0a:a3:52:bb:dc:bf:3d:79:20:aa:1c:
                    54:09:cc:e3:25:a0:26:8b:64:2c:ad:35:67:a4:7c:
                    2e:48:2f:cb:40:8d:5a:ed:8c:fa:2c:55:14:30:d9:
                    d7:e6:4c:a4:51:ff:97:f7:a9:60:3f:5e:e8:12:06:
                    de:24:5f:1c:a9:0c:6a:82:47:40:2c:16:2f:4d:cf:
                    d2:85:a6:ba:74:e2:25:2d:2b:c1:48:58:37:09:9d:
                    50:20:97:0e:ea:ac:70:f3:cb:d1:2e:8e:00:94:8d:
                    24:f3:62:ef:9f:5c:1c:02:c9:22:96:74:eb:b5:2a:
                    a4:8a:d5:3c:70:c8:47:24:b9:5e:31:d5:e4:b9:1c:
                    b2:54:c2:7b:5e:c8:5a:c0:94:0d:d3:fd:e8:20:b3:
                    90:ee:34:30:57:06:09:c1:85:16:99:94:5b:29:cb:
                    06:84:23:69:36:48:42:5d:d1:fe:60:2d:a2:72:fe:
                    19:26:67:0e:5a:68:11:da:a2:10:07:33:12:7b:96:
                    c1:c0:43:3c:ce:29:8d:ab:f1:a6:13:45:b5:b8:e4:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4A:15:DB:42:C7:2D:D4:3F:3E:27:0E:0A:DF:3B:35:72:18:1B:E9
            X509v3 Authority Key Identifier:
                keyid:19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:65:4d:4c:7f:ae:d5:a4:70:ca:88:b8:da:2b:19:8f:68:79:
         ab:c1:68:5c:e5:9d:9b:60:5f:32:dd:8c:bc:27:4a:6d:6a:53:
         ab:7d:c6:7e:86:4a:c8:b0:74:65:45:6d:e8:83:a7:e6:b4:a6:
         e5:d8:66:6c:7d:52:84:ee:3c:7d:06:0e:36:ff:a4:2b:3c:f1:
         cc:d0:f8:d3:2a:2f:6e:49:24:64:d6:96:7c:83:0b:d4:59:19:
         56:08:0c:53:01:1e:7d:65:dc:58:86:a8:55:23:22:90:38:3d:
         a9:3f:fd:de:28:b6:6a:7e:6d:3e:64:d4:a7:6f:9e:12:ff:2b:
         af:6a:e3:d8:85:a8:b8:3c:e1:d9:13:fc:0b:4c:4f:9b:11:54:
         d5:fb:65:39:ac:43:bc:4e:37:cb:59:f1:16:1a:a9:d0:f9:9c:
         0a:59:11:bf:7e:17:0a:98:30:a0:d1:e9:60:d6:47:60:0b:05:
         3e:a4:0f:f3:5d:31:67:60:ca:40:80:f5:54:93:50:75:95:e3:
         b8:e3:b5:94:3f:ce:da:13:5b:07:19:46:ef:0e:35:80:71:b9:
         94:79:3f:5f:62:ef:8b:9f:cb:f6:d3:03:a0:57:5f:5a:a5:7c:
         28:11:23:e8:0f:b5:71:d2:83:d2:93:2e:25:5b:d6:28:6d:27:
         2d:e3:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:40:28 2026 by rpki-client