Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File:                     Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier:          kIJ1csJyhSQOiqOfFknTAGJUEPR+m+1OD9O67qWcHBI=
Subject key identifier:   B8:39:86:13:3E:C3:FA:76:A1:9F:39:7E:E5:09:05:CF:86:A9:C3:25
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer:       /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial:       019FA0A89227FF98ED85E5514E7AED689D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number:          1087
Signing time:             Sun 26 Jul 2026 23:00:29 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:29 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:29 +0000
Files and hashes:         1: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: Hp/Yb9KNVPZhsSD0mROUyuPyU4jYUyKvxhpvz82mgbg=)
                          2: sp-Kqf98KN1iyLF2W6AhnnuykzA.roa (hash: qPT9DHFhN6PJl4gV8TB/JKAE/xFcxdHvLjxUuJyemNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:92:27:ff:98:ed:85:e5:51:4e:7a:ed:68:9d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
        Validity
            Not Before: Jul 26 23:00:29 2026 GMT
            Not After : Jul 27 23:00:29 2026 GMT
        Subject: CN=b83986133ec3fa76a19f397ee50905cf86a9c325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:fd:70:a9:06:17:bb:ce:57:17:b1:90:d8:
                    06:83:a8:70:58:aa:bc:82:d5:4a:d9:8f:b2:35:a7:
                    3d:7b:7d:16:47:44:d8:13:dc:a3:4e:d1:a8:15:36:
                    d7:ba:58:5b:c9:b5:28:cb:38:7e:38:8a:6b:ac:b3:
                    9e:9d:3b:8b:08:27:b8:e8:5f:9b:0c:b6:01:eb:f6:
                    3e:c4:ee:57:37:4d:27:0d:ef:10:a4:2b:e8:d3:7b:
                    37:5b:aa:4c:ff:b8:c6:93:1d:dd:ef:17:12:6c:0c:
                    b8:a7:99:52:b7:63:25:50:1a:f0:c9:b4:3a:8e:bf:
                    34:02:ec:9e:45:2f:b7:32:7b:ea:83:ce:41:4c:9c:
                    30:96:d4:8e:df:77:9f:08:8c:af:ad:20:e8:7a:17:
                    a3:ed:eb:a0:e6:61:8a:d7:8a:2c:99:fc:1e:11:a4:
                    5e:97:f2:72:d4:32:ce:37:60:90:c8:ce:90:9f:51:
                    08:ab:33:7a:1b:2b:dc:b3:bc:24:5a:ac:ea:97:5c:
                    d2:ed:6f:c3:46:0c:5e:6f:0d:11:ca:b8:1c:b0:c6:
                    c9:21:a4:12:99:0c:3f:08:55:4e:a8:e3:0c:a1:4d:
                    79:1e:b1:37:fa:a6:04:ca:6a:c4:4b:a3:a6:1e:b9:
                    6a:1f:be:3b:09:03:ed:c9:24:0c:1e:12:90:27:3b:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:39:86:13:3E:C3:FA:76:A1:9F:39:7E:E5:09:05:CF:86:A9:C3:25
            X509v3 Authority Key Identifier:
                keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:37:12:df:e8:a8:0d:eb:3a:94:0b:38:1f:ec:11:a0:bf:
         45:33:1e:5b:88:59:13:e4:b3:d1:6f:52:d3:41:69:35:ca:94:
         4c:c6:0d:79:c7:8a:2e:0b:38:66:9d:49:b8:63:b7:e8:50:cc:
         3b:16:2b:36:30:4d:81:9a:fe:a7:00:c5:14:93:03:d1:60:81:
         78:a3:91:c9:4c:0b:8b:2a:7d:bb:36:40:b1:e0:6b:75:d8:5f:
         df:a4:5e:0f:86:01:9f:1d:c1:6d:4a:d0:cb:e0:0a:5c:e4:14:
         be:70:33:84:6a:b6:e4:80:93:84:e7:f5:6e:bd:9e:22:a0:d4:
         d1:b7:5d:f0:bd:7e:c6:30:56:32:67:fe:b6:c1:22:9f:96:83:
         c6:48:30:eb:ba:54:65:7c:81:6a:ab:d6:c2:b1:01:a8:24:d7:
         c2:e7:76:83:be:70:35:2e:bb:d7:2c:89:85:ed:f2:9a:d4:07:
         31:1a:2a:7b:8e:fb:42:1d:6e:94:fc:f1:25:cd:fd:f2:4c:ea:
         24:b2:fd:d2:ab:1e:ae:f5:8d:25:fb:30:f0:c6:84:ff:2b:06:
         ba:da:2c:1f:e1:f3:33:5e:9a:64:b4:22:4c:46:66:82:db:6e:
         c4:82:65:9c:36:47:56:2b:65:b1:41:bf:c0:79:64:b3:68:c9:
         99:8d:c9:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqJIn/5jtheVRTnrtaJ2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2RkODIwNmMxZTM1MmM1MDY1ZTQ4MTc5N2VmNzdhZjBj
M2RlOGQwHhcNMjYwNzI2MjMwMDI5WhcNMjYwNzI3MjMwMDI5WjAzMTEwLwYDVQQD
EyhiODM5ODYxMzNlYzNmYTc2YTE5ZjM5N2VlNTA5MDVjZjg2YTljMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdr9cKkGF7vOVxexkNgGg6hwWKq8
gtVK2Y+yNac9e30WR0TYE9yjTtGoFTbXulhbybUoyzh+OIprrLOenTuLCCe46F+b
DLYB6/Y+xO5XN00nDe8QpCvo03s3W6pM/7jGkx3d7xcSbAy4p5lSt2MlUBrwybQ6
jr80AuyeRS+3Mnvqg85BTJwwltSO33efCIyvrSDoehej7eug5mGK14osmfweEaRe
l/Jy1DLON2CQyM6Qn1EIqzN6Gyvcs7wkWqzql1zS7W/DRgxebw0RyrgcsMbJIaQS
mQw/CFVOqOMMoU15HrE3+qYEymrES6OmHrlqH747CQPtySQMHhKQJzuniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg5hhM+w/p2oZ85fuUJBc+GqcMlMB8GA1UdIwQY
MBaAFBnN2CBsHjUsUGXkgXl+93rww96NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQt
N2IxNzc4ZGRmN2E5LzEvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQtN2IxNzc4ZGRmN2E5
LzEvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPb43Et/o
qA3rOpQLOB/sEaC/RTMeW4hZE+Sz0W9S00FpNcqUTMYNeceKLgs4Zp1JuGO36FDM
OxYrNjBNgZr+pwDFFJMD0WCBeKORyUwLiyp9uzZAseBrddhf36ReD4YBnx3BbUrQ
y+AKXOQUvnAzhGq25ICThOf1br2eIqDU0bdd8L1+xjBWMmf+tsEin5aDxkgw67pU
ZXyBaqvWwrEBqCTXwud2g75wNS671yyJhe3ymtQHMRoqe477Qh1ulPzxJc398kzq
JLL90qservWNJfsw8MaE/ysGutosH+HzM16aZLQiTEZmgttuxIJlnDZHVitlsUG/
wHlks2jJmY3JqQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:37:56 2026 by rpki-client