Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File:                     G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier:          JJ1BdIhqIl4caIkjSSlaRH9ZE/omcJ5wWJg2UiMKgDk=
Subject key identifier:   91:A7:8F:BC:9E:46:41:F7:D0:79:68:16:22:84:CE:52:45:FB:C3:FE
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer:       /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial:       019FA1843B6347A2F60345D566CF2F77B23C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number:          146F
Signing time:             Mon 27 Jul 2026 03:00:25 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:25 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:25 +0000
Files and hashes:         1: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: SN8jQFOfHTT1oUj5SyM7sb9mxrUdMPS0oI+KpH+2e+0=)
                          2: MxK8xpLc65l6jq47Ix7DiO_bItw.roa (hash: j3Cx4avg2XiA5F+u98NaEufXT6dtcTEAI2lje/Zb/S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:3b:63:47:a2:f6:03:45:d5:66:cf:2f:77:b2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
        Validity
            Not Before: Jul 27 03:00:25 2026 GMT
            Not After : Jul 28 03:00:25 2026 GMT
        Subject: CN=91a78fbc9e4641f7d07968162284ce5245fbc3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:0f:a3:68:12:85:94:07:56:52:81:eb:95:
                    aa:5c:37:8a:47:c4:33:ab:26:28:2c:5d:14:3b:fe:
                    85:6e:59:e6:9a:18:1f:75:26:1a:41:e0:f8:65:0b:
                    13:f8:ed:85:f2:e7:a7:85:78:4a:2d:ef:83:82:72:
                    71:61:aa:94:eb:9b:b5:0a:c0:b1:8e:80:08:3d:ed:
                    70:cb:f5:04:19:80:44:41:cd:11:31:bf:bc:6e:08:
                    5d:61:27:b0:02:ae:73:d6:27:f9:f2:01:9a:cd:b2:
                    4f:41:15:18:c4:b9:33:a1:c2:ae:58:62:f9:e5:18:
                    f1:85:05:a2:00:cd:03:44:52:58:d4:61:29:ff:51:
                    e6:81:f4:b7:e5:88:dc:c8:0c:8e:56:2a:3e:80:b1:
                    2a:69:a5:82:7f:49:fb:c8:f2:16:24:03:fa:ee:06:
                    02:f2:73:37:9f:f0:e2:13:b8:01:f3:6b:a6:98:c9:
                    42:ad:28:b1:88:71:f6:08:ad:5c:f4:c7:71:42:06:
                    f2:3b:9b:87:43:0c:2f:20:92:69:a3:69:5b:af:04:
                    74:fc:d8:7c:1c:d9:1e:5b:64:1a:2d:11:b5:15:b6:
                    e9:57:89:06:8c:13:78:c9:a1:bd:15:e5:26:51:80:
                    63:a2:35:85:36:f0:95:df:3b:4a:02:8b:98:2e:fe:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A7:8F:BC:9E:46:41:F7:D0:79:68:16:22:84:CE:52:45:FB:C3:FE
            X509v3 Authority Key Identifier:
                keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:54:b9:06:81:8c:82:33:f6:70:72:72:b6:b7:83:54:10:60:
         03:96:73:ff:b0:a0:33:c3:6b:5a:e1:07:c6:11:53:a0:de:0d:
         ea:49:b4:75:2e:1f:11:e8:02:70:eb:d9:4e:de:24:b6:bd:ff:
         8e:9b:07:ff:aa:f4:5d:1a:43:35:2d:79:dc:1d:c3:07:a8:44:
         bd:9d:da:b1:a5:e1:ab:52:7b:33:c9:5d:15:88:df:ec:74:4e:
         a2:73:3a:df:74:7d:d2:ab:30:5b:aa:92:a7:28:c7:fe:91:4a:
         cf:b2:50:26:da:7c:8d:86:ba:34:08:54:19:1f:eb:47:0b:f1:
         7d:a6:05:84:42:c3:ac:ee:40:7d:60:d8:35:34:91:e3:0f:6f:
         7a:1c:16:1c:84:29:24:1c:5b:c5:81:3a:83:fe:9f:e6:f6:d0:
         9b:85:bb:6f:f9:44:5e:c1:d8:04:8d:de:54:38:fe:0d:96:fb:
         7f:ca:04:5d:47:1b:17:31:c3:43:b1:fd:43:2b:1f:cb:fa:20:
         7c:fd:c6:29:0b:08:ff:a0:31:2f:0c:2f:53:fa:8f:54:48:83:
         58:92:dc:62:c1:5b:b3:9f:3d:ce:0e:f3:00:f0:77:49:5f:49:
         36:1c:2e:c6:5b:40:5d:f7:48:ea:4f:1a:7e:a3:2c:18:7a:88:
         66:7b:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:18:29 2026 by rpki-client