Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File:                     Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier:          akAMBRKxsuO77S7sVYY5wH6wNSgrB7l0gQ6NEye4A+0=
Subject key identifier:   E2:2D:61:D8:69:36:1F:88:AD:0A:3A:32:50:ED:97:02:FC:F7:76:1F
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer:       /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial:       019FA1BBFC3D090F9C130BC271B0E0D051FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number:          0754
Signing time:             Mon 27 Jul 2026 04:01:19 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:19 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:19 +0000
Files and hashes:         1: 14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa (hash: weE6FiUWFJlgjSn45t8SYEOqGWgUP2W1fkEVmJ8kNgo=)
                          2: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: gew5FbLKI4nzG3zwFZUYLNokDGphImnebvNY/zV0FwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:fc:3d:09:0f:9c:13:0b:c2:71:b0:e0:d0:51:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
        Validity
            Not Before: Jul 27 04:01:19 2026 GMT
            Not After : Jul 28 04:01:19 2026 GMT
        Subject: CN=e22d61d869361f88ad0a3a3250ed9702fcf7761f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3c:8e:58:0a:9c:7a:8c:d4:7e:cd:44:67:63:
                    66:4f:a9:2b:ce:b2:4d:79:a8:0e:39:c1:f1:e2:ce:
                    e2:d1:22:bb:9f:05:c8:48:b6:d9:47:88:15:83:48:
                    72:33:36:c5:e6:b1:2d:13:81:62:28:f0:21:8e:e9:
                    e8:65:e3:b3:16:c8:79:a5:38:78:77:e1:2e:0a:e8:
                    51:f5:38:e3:51:40:04:b8:7d:23:67:22:01:8d:43:
                    2a:e2:72:df:b8:b4:23:dc:a9:7c:50:73:f7:fb:f7:
                    f5:ea:0a:df:29:f9:4c:1a:47:78:21:b1:ef:99:2f:
                    25:2d:7c:90:52:72:ad:f3:31:a8:62:d2:53:f5:57:
                    18:4d:7f:c3:48:a7:81:a0:b3:5e:18:2b:75:9f:53:
                    6c:ef:0d:7b:fb:38:00:74:c7:91:6a:b6:6c:38:33:
                    15:11:e7:fe:40:b8:89:25:19:4d:aa:8c:11:b4:44:
                    02:10:9a:c0:45:5b:59:b2:10:58:9f:7b:5b:18:bd:
                    61:1b:00:43:62:fc:27:66:ee:31:bd:61:24:46:7b:
                    3a:d3:b6:31:b9:37:5f:aa:9c:29:f6:13:3d:e1:a1:
                    e4:8e:1e:94:bd:0c:31:17:55:bc:11:a2:19:9b:71:
                    36:e7:68:8e:89:e8:c0:7f:2d:44:5e:e6:82:12:7c:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2D:61:D8:69:36:1F:88:AD:0A:3A:32:50:ED:97:02:FC:F7:76:1F
            X509v3 Authority Key Identifier:
                keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d3:7a:8c:d7:fa:ae:6c:09:63:5c:25:09:8b:84:ba:3d:90:
         33:b0:0e:2a:cc:86:de:f4:d0:e3:b8:06:57:f2:b3:b0:5f:d7:
         fa:b3:42:e6:67:cf:e0:bb:71:e9:85:1b:bb:91:30:ac:00:2b:
         25:a5:e1:fc:59:9e:22:bc:b2:7f:aa:9b:41:f2:34:23:2c:db:
         52:6c:72:a7:66:9f:e3:ba:8f:2e:d4:9b:f4:29:d0:c4:d7:fc:
         47:66:8c:00:3a:89:63:95:bc:be:de:93:c9:0c:ae:99:d5:d8:
         b6:60:09:fe:52:9e:9b:5f:c5:92:19:12:09:17:bb:ac:00:95:
         5a:36:36:56:41:43:49:ea:f5:f3:00:83:c5:2a:0d:b0:50:6e:
         d7:ba:cd:37:ca:45:66:a8:fb:3f:a0:09:d2:3c:97:69:46:df:
         77:02:c5:6c:78:0b:44:de:20:85:93:e8:cc:12:06:6a:d3:59:
         97:87:b4:c1:e7:51:47:a9:40:72:d4:e6:44:5f:4b:4e:d7:20:
         77:5d:c6:4f:f4:60:f8:a1:ad:e7:49:a2:ad:97:d5:f3:b2:22:
         b7:fa:b0:37:05:27:92:43:f2:ba:f7:51:1a:bc:95:0c:e6:8e:
         4f:e9:1b:ec:d5:33:b2:1f:1b:64:04:c6:ed:c0:fb:e6:e2:9f:
         4d:b0:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:48:10 2026 by rpki-client