Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
File:                     gGcKCuUZoyz9hbowc3yOPQfEvM4.mft (raw, json)
Hash identifier:          7muu+PrxKgRYxRruCmhxV81biBiIH3pm/Xmap7J+6zk=
Subject key identifier:   1F:98:83:4E:5C:73:06:78:51:D4:F3:AA:A8:A8:80:0C:04:3B:85:C0
Authority key identifier: 80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
Certificate issuer:       /CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Certificate serial:       019FA2CECFB6AA6F1476F5D38C1F4F75C039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 09:01:30 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:30 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:30 +0000
Files and hashes:         1: 4bGr-yXBWayGcjl1qM4F7v2Bc2M.roa (hash: eCKqYMCveD4+cT5IE20UBn+5fdkZH3p4iIVGa8fR06o=)
                          2: 7KMei89cF5bMU_4TaRPp6g42s1E.roa (hash: NRXPLOV3OLAB5gs1dIMy5Wr/b2KoynjrFtKRrh8XYUo=)
                          3: 8oTK3TC0D2Jp0RoOQfL5lALHOb0.roa (hash: bDWj0S7zTHlaNQd9wpyLKfimVq/tWXy8hbrpF7M3lP8=)
                          4: GYKQ0334-OMW8rJhiyMdFoDF1bA.asa (hash: YAXSLUp33H5lCmvEZdnmSsgUIL8C1t9c3ekAGHDBNDg=)
                          5: MkOrn3cx2BQqm02t_vueOKsFKPk.asa (hash: 8g1RjrvQ79n3k/tOZkjWDSSi6fzCwbwd+67DGegC7ZY=)
                          6: gGcKCuUZoyz9hbowc3yOPQfEvM4.crl (hash: xvITDmvOi58/R89kYcWZ/eDfw3nbn+8CmhwWAn2i0Jw=)
                          7: o-m7cT62SUN3tXUWb6144IEDJko.roa (hash: GUeFgCZSQLXdFp7pq8g4v2HhOf5ueahzNXG4APOlM3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:cf:b6:aa:6f:14:76:f5:d3:8c:1f:4f:75:c0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
        Validity
            Not Before: Jul 27 09:01:30 2026 GMT
            Not After : Jul 28 09:01:30 2026 GMT
        Subject: CN=1f98834e5c73067851d4f3aaa8a8800c043b85c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:b9:1f:56:5c:44:31:b5:9b:18:d3:f4:55:
                    93:17:87:34:24:46:1c:65:ed:c7:0d:e4:5e:97:16:
                    57:96:08:5c:80:fe:bd:46:68:57:38:f6:34:be:2e:
                    7c:09:65:d0:66:ae:ee:c2:9e:43:20:6f:cb:c2:f9:
                    e3:cd:d1:67:1b:9c:82:27:cb:94:ee:31:f7:b6:07:
                    20:4e:e3:e5:38:24:6c:01:d9:32:ef:e6:e2:b9:69:
                    4b:f1:94:0d:d3:63:af:21:1a:c5:31:cf:58:0a:5c:
                    d3:c0:ef:01:55:0d:a9:81:c0:1a:f4:f8:09:47:4f:
                    ce:8b:c5:de:01:a2:53:53:53:2f:ed:ce:a6:a0:c2:
                    91:d5:1b:c2:7b:0c:5c:c6:d1:93:e5:54:02:35:58:
                    dd:1b:c3:cf:c6:5e:35:01:b0:cc:c0:9d:4e:9a:cc:
                    8e:0c:14:00:1a:65:7a:ee:d8:0b:85:56:ef:05:8b:
                    b8:f2:0b:e7:a5:4f:08:2b:73:8d:24:e3:28:28:f9:
                    93:13:e2:d4:7d:08:63:6f:85:3f:93:9c:8a:fc:29:
                    52:6c:ef:a9:b9:42:74:0f:05:3f:f3:b6:2b:cf:44:
                    79:d1:02:01:ac:60:f4:15:51:57:84:60:42:27:51:
                    44:14:09:5c:61:da:5c:f1:33:e7:12:b2:3d:98:ae:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:98:83:4E:5C:73:06:78:51:D4:F3:AA:A8:A8:80:0C:04:3B:85:C0
            X509v3 Authority Key Identifier:
                keyid:80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:b6:09:26:5f:59:69:5b:62:9b:c1:b1:e7:9d:e1:2e:26:
         e5:7a:07:fa:75:ca:12:32:2e:22:e7:37:1f:20:3f:cb:9f:1a:
         0c:7d:4a:42:5a:69:02:48:f3:53:4d:52:8a:00:8f:d4:2f:a9:
         61:c0:18:09:89:49:fa:4f:9a:85:05:28:ab:9a:53:a4:53:c9:
         36:b6:ce:76:f6:14:f8:12:dd:ee:e7:62:21:12:fc:e2:14:ab:
         e4:dd:7b:f2:05:5c:ef:96:30:98:47:ad:38:25:27:af:66:9e:
         7a:75:da:3d:12:1c:a6:e6:19:d3:d7:71:fe:ce:b0:74:e2:a4:
         99:1a:07:42:74:28:57:dd:2b:dc:b9:e5:8f:14:5c:69:b1:0b:
         a6:fd:b1:08:9f:bc:55:fc:04:a9:20:a7:22:39:73:3c:76:ef:
         72:bb:17:42:b3:5a:08:4d:fc:33:5a:c8:9d:e5:5b:9f:37:47:
         71:92:ce:78:85:a3:8a:7f:07:a7:a7:a1:30:10:4d:4a:9f:89:
         55:de:97:d8:40:65:59:32:31:50:eb:b5:f8:d7:58:8a:76:45:
         ca:37:82:5f:9b:e8:4e:6e:c7:e0:09:62:62:7c:b7:13:70:9b:
         6f:86:94:15:0b:99:c4:ff:44:16:04:c9:b3:4f:f4:75:6c:7c:
         62:dd:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:09:04 2026 by rpki-client