Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
File:                     GoJXc-kkMy6e5aRPyry6avE1yvA.mft (raw, json)
Hash identifier:          xZbzndZlfB1QYbbDGxgqCuXmNFD4AcEd/GSHNCjex6k=
Subject key identifier:   D6:A1:96:F9:56:FD:E9:51:6E:E5:77:BD:06:EB:DF:0E:54:8C:2C:E4
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Certificate issuer:       /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial:       01A020FA6F6328FDCE261749374CF932D601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
Manifest number:          79
Signing time:             Thu 20 Aug 2026 21:01:18 +0000
Manifest this update:     Thu 20 Aug 2026 21:01:18 +0000
Manifest next update:     Fri 21 Aug 2026 21:01:18 +0000
Files and hashes:         1: GoJXc-kkMy6e5aRPyry6avE1yvA.crl (hash: RMdPlrbExokBUyJDWxPi6MyvIIVaPp/T0RTsftKDFsY=)
                          2: caspFMJZJD-i0t3tee0YjZ1lkAI.roa (hash: gASmiMFvSfOAn2nz4guY4aoPVKVMWp+u918PhFSqz48=)
                          3: ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa (hash: lr9SiZAxytRoSZDzBrTYj7nLRcvRM5Ct8mwl/09v1jc=)
                          4: iULSu1XOMW528tmeTQYP8c_wAb8.roa (hash: RURInJ6+YkolxYt5T8//7OYPXS8SUDD30iDV+JQ/+4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:fa:6f:63:28:fd:ce:26:17:49:37:4c:f9:32:d6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
        Validity
            Not Before: Aug 20 21:01:18 2026 GMT
            Not After : Aug 21 21:01:18 2026 GMT
        Subject: CN=d6a196f956fde9516ee577bd06ebdf0e548c2ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:f8:05:9c:27:7a:82:cb:e6:e8:f2:05:50:
                    d6:84:fa:8f:e4:b2:ad:4c:0e:e7:f3:29:6b:07:24:
                    68:25:19:17:52:29:28:b5:4d:05:8c:a7:86:eb:71:
                    3b:49:47:5f:83:13:b8:81:f3:2c:54:6c:58:ed:9c:
                    c9:56:0d:7e:6a:7c:21:3c:c4:e0:11:89:4f:29:6f:
                    a1:05:e4:ba:c5:b5:c5:4c:73:17:9f:77:32:74:22:
                    09:6d:78:d5:8d:04:03:e9:09:ff:f2:d5:9d:e2:23:
                    e6:96:56:bb:76:d9:f7:fc:53:17:a6:9f:9e:dc:24:
                    2d:fb:02:1c:25:c9:23:82:60:48:89:a6:35:b5:d3:
                    82:9c:1f:5c:e8:a3:73:4e:0f:5d:45:a1:79:bb:31:
                    68:b6:31:85:68:b8:6c:fc:cb:59:98:ea:6b:6b:44:
                    63:4d:68:7c:90:7c:63:d4:18:cf:ea:3f:c8:20:ff:
                    8b:00:51:cc:67:32:66:0b:10:13:cf:38:72:44:b1:
                    62:c5:76:12:8f:d4:b4:65:28:0b:1b:8a:90:58:2b:
                    e2:4b:2c:45:b9:ae:9f:dd:6f:85:05:d3:a6:bb:cd:
                    0c:81:b2:61:b6:f4:6b:e1:50:96:28:e3:b0:97:5a:
                    0c:5c:e4:c4:7a:4f:43:11:e5:af:84:01:1c:88:07:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A1:96:F9:56:FD:E9:51:6E:E5:77:BD:06:EB:DF:0E:54:8C:2C:E4
            X509v3 Authority Key Identifier:
                keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:18:5d:f6:7d:2a:fc:9a:5f:ce:3d:9b:4c:fb:24:09:ff:4c:
         02:0c:a5:61:5d:10:66:23:b2:8a:45:77:b1:18:f0:e2:18:1d:
         ae:30:5f:2c:50:d2:6b:b7:e0:06:3b:91:42:8f:ff:fd:a4:de:
         2b:cc:24:6a:e2:6a:f9:42:8c:14:6a:5c:bc:2c:ec:12:af:66:
         84:1e:0e:62:47:e6:28:e1:39:a7:cb:0a:db:54:62:7e:ef:9c:
         a1:9a:c1:fc:77:b1:02:0d:96:d6:b4:16:29:5a:20:51:e4:cd:
         03:08:3e:1a:7c:f8:e1:39:ba:e8:a2:0a:1a:4d:8b:12:8c:43:
         6b:e2:48:8f:06:ec:e9:97:9f:9a:8f:ac:df:fe:6a:35:d2:7f:
         e5:11:36:3c:f6:c4:0e:dd:96:61:e7:15:42:1d:55:88:41:2a:
         e0:f7:79:53:44:5f:4f:79:15:1a:53:46:80:df:92:1e:13:3f:
         45:e2:6b:84:c6:97:80:f1:4f:3f:be:10:3d:d9:55:d6:e9:3a:
         89:fd:df:99:f2:b2:0c:e9:0a:05:d0:0b:4f:ea:9e:15:d7:20:
         20:86:68:16:16:ce:e2:51:1d:c9:07:65:f4:70:02:96:e5:51:
         84:3b:53:94:db:82:91:54:89:77:73:7a:0c:7b:d8:a3:f4:19:
         4e:14:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:31:21 2026 by rpki-client