Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft
File:                     GGuOJPwv4Hjs43e2QHhahyV3108.mft (raw, json)
Hash identifier:          dtef/fVkrMFCaQFmBuKQsWNsqRQs6ks/p7fCQmYTM0g=
Subject key identifier:   06:0B:BF:24:18:66:52:81:A7:EA:D5:34:F7:71:62:25:4C:14:FD:94
Authority key identifier: 18:6B:8E:24:FC:2F:E0:78:EC:E3:77:B6:40:78:5A:87:25:77:D7:4F
Certificate issuer:       /CN=186b8e24fc2fe078ece377b640785a872577d74f
Certificate serial:       019FA2CF31069B1AC9BE6C5636D07B6F144D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 09:01:55 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:55 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:55 +0000
Files and hashes:         1: GGuOJPwv4Hjs43e2QHhahyV3108.crl (hash: j1J9eJvefLvZAixmr40AnMcg6pYhfpydIA/rsyD4wG4=)
                          2: P-ygUlow62dRgj3KwI1qyzkMeOA.roa (hash: O8MOfZwhLY2ZIpxWmwXD5U4weem+XHHwGlte/rosmFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cf:31:06:9b:1a:c9:be:6c:56:36:d0:7b:6f:14:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186b8e24fc2fe078ece377b640785a872577d74f
        Validity
            Not Before: Jul 27 09:01:55 2026 GMT
            Not After : Jul 28 09:01:55 2026 GMT
        Subject: CN=060bbf2418665281a7ead534f77162254c14fd94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:e5:6f:e2:2d:1b:42:4d:cd:ee:69:20:b0:
                    eb:40:2a:3e:e0:c2:e0:cf:af:ec:de:79:c0:de:6e:
                    22:0c:a9:2f:43:80:87:b4:96:a1:5d:de:47:14:0e:
                    e3:d8:9b:6e:39:9c:4c:8f:77:3d:b2:89:23:1d:1b:
                    b0:0e:43:80:5c:6a:9d:36:1d:82:63:a8:28:3c:37:
                    bf:85:56:3e:b6:f3:60:69:9d:86:66:f3:94:7a:ae:
                    39:ca:21:e4:60:9a:69:eb:57:b2:9d:cb:0c:c0:c8:
                    52:50:8c:30:af:e2:48:6a:eb:7f:7a:42:23:25:de:
                    18:17:41:d5:fc:36:2d:74:64:b8:51:73:7a:b6:b1:
                    be:00:d0:8f:7b:4e:3e:15:78:0b:f6:2b:f8:3c:ec:
                    e7:46:10:70:96:f3:79:63:98:f5:e0:7b:ea:14:20:
                    b7:db:35:ce:d1:c3:e2:c4:84:5f:e7:a1:50:35:84:
                    e2:02:13:56:5f:6c:72:20:24:d9:ff:f2:51:81:92:
                    45:85:3f:b7:48:d0:39:42:60:09:6f:22:d1:65:1d:
                    a3:3d:30:28:1f:93:e5:c7:ad:10:8d:a1:35:30:7d:
                    93:51:17:ce:ea:9f:ee:ca:dd:dc:d7:5e:d4:7e:51:
                    a7:eb:5d:22:c6:79:7c:e8:46:4d:21:96:68:93:0f:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0B:BF:24:18:66:52:81:A7:EA:D5:34:F7:71:62:25:4C:14:FD:94
            X509v3 Authority Key Identifier:
                keyid:18:6B:8E:24:FC:2F:E0:78:EC:E3:77:B6:40:78:5A:87:25:77:D7:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:76:7e:b5:d9:79:40:cc:a9:b4:a1:34:31:5f:d5:02:5a:
         cd:a1:cb:44:31:82:e2:12:0c:72:4a:ea:40:ee:4b:9e:72:47:
         9b:84:89:4b:9f:92:42:64:43:f4:bc:f4:4c:6c:d1:fc:93:24:
         3a:e0:96:83:67:23:b4:87:37:0a:6b:33:32:ff:16:8c:ad:af:
         c2:1f:da:8e:4d:06:db:93:5c:0c:9e:fe:07:80:c3:0a:4a:45:
         68:c1:4a:1e:1b:dc:03:84:2a:4c:a2:58:c2:91:05:a3:4f:60:
         30:3d:54:d6:26:52:b2:fc:37:0c:b4:0f:e4:ba:07:37:7f:06:
         99:4b:24:fe:0e:c1:ad:36:05:58:e1:2a:ce:fd:00:18:32:2b:
         9e:49:c9:71:1d:f4:f7:33:26:4a:1e:d7:23:8e:8d:b9:e2:b4:
         04:a6:c4:02:02:a8:0f:7b:86:72:b4:64:4a:1f:44:08:bf:00:
         53:86:76:09:dc:ac:8c:d1:02:49:ef:89:96:12:86:ad:39:3b:
         3d:e4:3a:1c:eb:97:7f:d3:d2:5a:ab:8c:9a:97:f6:86:c3:37:
         61:d6:a2:98:33:72:ba:63:9f:9f:ce:7e:50:7f:ea:f3:63:d8:
         71:74:2a:a7:5c:db:bd:55:e5:6a:83:5d:23:e5:52:84:b0:e0:
         31:46:93:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izzEGmxrJvmxWNtB7bxRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NmI4ZTI0ZmMyZmUwNzhlY2UzNzdiNjQwNzg1YTg3MjU3
N2Q3NGYwHhcNMjYwNzI3MDkwMTU1WhcNMjYwNzI4MDkwMTU1WjAzMTEwLwYDVQQD
EygwNjBiYmYyNDE4NjY1MjgxYTdlYWQ1MzRmNzcxNjIyNTRjMTRmZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx/lb+ItG0JNze5pILDrQCo+4MLg
z6/s3nnA3m4iDKkvQ4CHtJahXd5HFA7j2JtuOZxMj3c9sokjHRuwDkOAXGqdNh2C
Y6goPDe/hVY+tvNgaZ2GZvOUeq45yiHkYJpp61eyncsMwMhSUIwwr+JIaut/ekIj
Jd4YF0HV/DYtdGS4UXN6trG+ANCPe04+FXgL9iv4POznRhBwlvN5Y5j14HvqFCC3
2zXO0cPixIRf56FQNYTiAhNWX2xyICTZ//JRgZJFhT+3SNA5QmAJbyLRZR2jPTAo
H5Plx60QjaE1MH2TURfO6p/uyt3c117UflGn610ixnl86EZNIZZokw/vMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYLvyQYZlKBp+rVNPdxYiVMFP2UMB8GA1UdIwQY
MBaAFBhrjiT8L+B47ON3tkB4Wocld9dPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0d1T0pQd3Y0SGpzNDNlMlFIaGFoeVYzMTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt
NjczNjQwMjMzNjY1LzEvR0d1T0pQd3Y0SGpzNDNlMlFIaGFoeVYzMTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1
LzEvR0d1T0pQd3Y0SGpzNDNlMlFIaGFoeVYzMTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbZ2frXZ
eUDMqbShNDFf1QJazaHLRDGC4hIMckrqQO5LnnJHm4SJS5+SQmRD9Lz0TGzR/JMk
OuCWg2cjtIc3CmszMv8WjK2vwh/ajk0G25NcDJ7+B4DDCkpFaMFKHhvcA4QqTKJY
wpEFo09gMD1U1iZSsvw3DLQP5LoHN38GmUsk/g7BrTYFWOEqzv0AGDIrnknJcR30
9zMmSh7XI46NueK0BKbEAgKoD3uGcrRkSh9ECL8AU4Z2CdysjNECSe+JlhKGrTk7
PeQ6HOuXf9PSWquMmpf2hsM3YdaimDNyumOfn85+UH/q82PYcXQqp1zbvVXlaoNd
I+VShLDgMUaTbA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:42 2026 by rpki-client