Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File:                     GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier:          vb9lizYnslcGaTlVmHqfgZ940BmEIdMoXVfa5uZHlK4=
Subject key identifier:   FF:FB:22:59:22:41:0A:00:BD:6E:66:5C:3A:D4:AA:09:F3:34:19:BF
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer:       /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial:       019F190D17814FBD9D6407DACD9AB6610ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number:          198C
Signing time:             Tue 30 Jun 2026 15:01:55 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:55 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:55 +0000
Files and hashes:         1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: QlHz3QmzQY8sKi4RON6Hb+jMoR4FyiDgiWARtLw2QOA=)
                          2: cKcEH95-xZkMRq9n8qxJQ8taC0I.roa (hash: 5CGu3gKojPJu4bccEdLgCE4zbwffs6jrhAuLccKD0VM=)
                          3: qOGZnmJn9twBLNZ-YPGtBuaarUA.roa (hash: 8dGXa2ecQGk4C5r7XMrelqu+XdDeVoRN8xB6oD32Evs=)
                          4: r7k-qYwu_gVhVP_qzP1I3k06xN8.roa (hash: Qmj2gAagugrdnVz/mHy0g80G5C8fPaZdzMVSJwy2cLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:17:81:4f:bd:9d:64:07:da:cd:9a:b6:61:0a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
        Validity
            Not Before: Jun 30 15:01:55 2026 GMT
            Not After : Jul  1 15:01:55 2026 GMT
        Subject: CN=fffb225922410a00bd6e665c3ad4aa09f33419bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:57:bb:2d:a9:b8:f4:45:9c:49:81:9c:9d:
                    1d:d7:e0:c9:cd:55:75:49:c0:e3:38:d8:f6:27:85:
                    f4:e8:ff:a8:2c:27:e5:ff:57:eb:98:38:ee:20:21:
                    33:e3:ca:27:33:6e:31:38:e9:d6:da:2d:a6:de:57:
                    43:51:e5:bf:1e:37:92:d0:21:69:af:87:63:cd:ee:
                    a1:ee:6a:19:a3:a8:92:b4:a1:63:45:dd:ac:8a:32:
                    81:6f:b3:db:e6:e3:e8:f3:6e:72:62:01:77:46:5b:
                    d0:18:6c:ee:ef:50:85:78:cc:fc:10:a4:cc:1e:68:
                    c8:e4:8f:d0:dc:0e:bd:78:36:22:d2:fc:a4:d5:5f:
                    61:8d:ec:81:a2:b4:4c:3a:28:57:4c:83:06:98:b6:
                    f6:7b:f6:fb:dc:6b:9e:95:e9:7b:14:44:c2:2a:50:
                    0d:1d:39:1d:23:f3:8c:c7:05:4d:e2:d2:35:46:99:
                    38:53:7c:1f:45:46:62:aa:1f:fc:de:a7:c9:d1:f6:
                    66:4e:57:fb:bb:8e:09:b9:e7:23:e9:f6:05:2d:90:
                    bb:d1:09:88:d0:4c:8d:49:b3:0a:08:20:11:21:41:
                    ad:e7:84:94:7c:06:33:c9:df:04:96:e2:08:27:6c:
                    de:46:32:08:59:48:68:4a:41:e5:e1:63:6b:aa:72:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FB:22:59:22:41:0A:00:BD:6E:66:5C:3A:D4:AA:09:F3:34:19:BF
            X509v3 Authority Key Identifier:
                keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:1e:d6:eb:e7:66:7d:53:e0:38:1b:e4:f6:49:6f:a6:54:
         a7:b5:8d:68:99:92:b9:54:b0:ca:23:b5:04:d8:b0:0a:65:a9:
         14:54:7b:04:88:1a:63:fb:b1:c1:b6:52:a9:3e:e0:0e:aa:d2:
         d3:58:76:23:18:16:47:e4:04:53:3d:cc:5d:92:ca:f2:5e:cf:
         3d:51:fb:a1:d9:5e:3a:1b:02:e6:ee:50:1e:c9:17:0a:d5:b2:
         0d:40:ed:17:7f:05:6c:58:a3:53:9a:92:bc:04:2b:ed:3a:b7:
         41:94:6b:c4:f3:60:fa:c7:3a:b0:97:35:9d:16:86:8f:d7:31:
         c4:9c:c0:59:ff:73:d3:30:7b:32:e9:5e:32:68:56:93:11:3a:
         07:0f:d0:eb:55:9c:a2:b2:54:28:58:5d:ba:65:58:8d:bf:9e:
         2b:9b:4d:31:25:21:4a:ba:91:7d:10:a6:67:66:d3:10:c1:5e:
         14:de:64:33:a5:2c:23:33:a1:90:6c:62:35:21:94:45:f5:7b:
         e1:6e:30:aa:2d:27:c0:a5:ea:c9:f4:00:d7:ed:92:5c:15:c6:
         47:04:05:02:8c:e4:32:ba:2b:da:38:20:e5:2b:e3:9a:cc:a0:
         d5:87:09:19:41:4c:fc:0a:e2:9d:b4:64:22:11:a3:16:e9:b6:
         92:a8:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:44 2026 by rpki-client