Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File:                     gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier:          UpkCPDZiECDzwJPRv+JT+YuY312FzCHcBJfIa61gFPs=
Subject key identifier:   35:41:A8:45:C2:9C:61:BA:3D:28:C8:D9:71:27:9B:A9:C9:CD:C6:DC
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer:       /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial:       019EFC16498D36920CF60034DEA4295980EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number:          1984
Signing time:             Thu 25 Jun 2026 00:02:59 +0000
Manifest this update:     Thu 25 Jun 2026 00:02:59 +0000
Manifest next update:     Fri 26 Jun 2026 00:02:59 +0000
Files and hashes:         1: DqhpFnPCBC-nXiqoo22t2JOTosc.roa (hash: ajs/QjIOGij7SJQTsZozQDpENdvgepWfCERRvK8a2WE=)
                          2: HxVorLXm0yTMdgmPOzs8OYBM6LM.roa (hash: z2JydnrSsQ2VCjSLoL2TGZXu5BWrRoEvvg+D8RtBoMk=)
                          3: bPvHroswcwAkdBw_epDr6gouAwg.asa (hash: bY+XhEE+AaYgV3V8EVL7hrM7XjVUTKeRjopiuQFPAQE=)
                          4: dNKhuGOoBSmUX8gdSXBPbNyrIHI.roa (hash: 7Y16xJEdb4Me5YuoYupB+Yr4hsFnykSVxLvgMaBpgUU=)
                          5: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: FIBCW/4L/pO7+p/UybOWeFUIyXdwBfTG6zpm2mK9c1c=)
                          6: nn_1VMvKIWzw2XUgpRSRQ0YbCXA.roa (hash: CAV1aicJa1xV33pauRJjVUr2k+nxSkItYvLJyPNkTTs=)
                          7: sQ-8x48Ep1WS3twqy1J4_OTWMmY.roa (hash: l3jPEDwSn0P6BHcza22rairxFhC7gu9uXyzjbUobCl8=)
                          8: uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa (hash: V59RDlnWRRn+EdVBUc5GRnaFwy5JZDP/rY0LRZhUhmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:16:49:8d:36:92:0c:f6:00:34:de:a4:29:59:80:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
        Validity
            Not Before: Jun 25 00:02:59 2026 GMT
            Not After : Jun 26 00:02:59 2026 GMT
        Subject: CN=3541a845c29c61ba3d28c8d971279ba9c9cdc6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:b6:b7:b1:a9:3e:44:02:1c:1b:19:fb:c1:
                    fc:fd:e7:8b:53:c8:e9:bd:81:89:83:88:dd:a5:7a:
                    b1:72:ef:7b:54:53:e9:4c:4d:fb:bd:f7:03:44:3e:
                    8d:bb:93:61:9e:49:b2:2e:bd:63:de:58:95:8f:48:
                    2e:3d:db:a2:c9:22:67:f6:c2:71:c7:0c:44:3a:26:
                    c2:96:40:aa:c8:bb:4b:a2:c0:3f:9c:f9:ae:b1:7f:
                    fd:e4:9a:b0:3a:6a:6d:57:3f:b4:1b:8b:be:28:c0:
                    5f:74:d5:60:38:20:73:40:f2:60:72:a0:a6:ab:d3:
                    ee:db:4b:7a:d1:56:97:3c:34:92:56:da:fc:ec:40:
                    c0:43:36:08:bb:56:d2:34:e0:5a:fb:31:79:34:e2:
                    3a:af:79:f8:49:5d:12:94:5a:3e:5e:c9:c6:02:7f:
                    9d:93:b1:06:61:70:89:7b:53:21:9a:f8:b8:55:06:
                    ca:db:25:72:e0:39:be:bc:03:23:f9:b0:62:dd:ba:
                    b3:27:df:ef:6c:a0:45:4b:36:75:20:f4:c1:2a:29:
                    d7:4a:a9:5c:0f:7f:78:a7:aa:04:48:aa:a4:32:c7:
                    17:60:90:dd:d5:47:6a:21:d8:8e:8c:3e:06:00:5d:
                    df:ea:fe:c0:4b:67:3a:90:17:2b:47:15:47:6a:d1:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:A8:45:C2:9C:61:BA:3D:28:C8:D9:71:27:9B:A9:C9:CD:C6:DC
            X509v3 Authority Key Identifier:
                keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:56:b8:db:a3:6f:f2:16:6c:40:ec:8b:a2:8c:0f:45:4b:
         c4:11:75:69:ac:f9:4c:ca:29:dc:ea:1b:79:45:90:6c:05:9c:
         96:c5:d2:04:6f:04:5c:92:22:41:00:11:e7:49:5f:df:9e:0d:
         f2:92:7f:8e:47:8e:36:3a:06:61:d1:25:a5:c5:35:84:1d:cf:
         c2:4e:ed:cd:77:64:f1:45:68:4c:8a:e6:4f:15:b1:9b:24:0d:
         72:d7:ee:a2:76:d5:1f:09:ac:40:3d:8a:47:db:23:03:55:6b:
         c0:19:7f:97:ea:91:82:7c:f7:88:46:04:a8:94:0f:33:9d:51:
         9c:b1:61:a4:85:f7:af:34:6b:d1:46:0d:40:60:47:2f:92:5d:
         97:91:89:08:8b:07:f1:70:b4:d3:dd:66:5f:c0:d1:52:c7:92:
         ce:57:e7:43:a7:d0:ad:46:71:f6:2d:ba:02:54:1e:1d:cb:3b:
         ed:2d:fe:20:91:68:54:44:1c:12:49:3a:78:cc:c6:25:34:98:
         bb:48:b2:c5:38:f5:32:0d:9f:4e:0e:f8:24:00:6b:cb:b3:da:
         f7:82:1f:75:f6:4e:f5:20:75:2d:8f:03:8b:cb:19:f1:f2:ca:
         cb:6d:c4:5f:ea:ea:63:8e:33:cb:67:73:25:11:df:20:b2:80:
         23:26:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:23 2026 by rpki-client