Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File:                     GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier:          PfjAI6IfH159yfPEQvp5ktbz0rcb2iUDnnaCCOlUns8=
Subject key identifier:   46:81:EF:9C:81:2D:78:B8:3D:30:2E:DC:52:C4:E8:E3:1B:A2:11:D9
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer:       /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial:       01A0024B51AFF29BB6A86A261EFBEA49142D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number:          0EAC
Signing time:             Fri 14 Aug 2026 22:01:25 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:25 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:25 +0000
Files and hashes:         1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: 6JiTmY7ZUH8SZ51/cq1ZapS+jpvI99GtiRQB8SSgopE=)
                          2: bsIvknt5fmmAnWdhXsBu-Ue2-v0.roa (hash: n3XIzhJt5VMAiTGqI1g3v5Vdsn00DFS2DY6O4jjQGxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:51:af:f2:9b:b6:a8:6a:26:1e:fb:ea:49:14:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
        Validity
            Not Before: Aug 14 22:01:25 2026 GMT
            Not After : Aug 15 22:01:25 2026 GMT
        Subject: CN=4681ef9c812d78b83d302edc52c4e8e31ba211d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:79:7d:27:03:ed:c6:50:dd:e1:0b:3e:86:
                    bd:43:1a:39:cc:c6:ae:41:a7:b8:b7:44:8f:50:dd:
                    cb:1d:1c:4e:51:20:aa:fb:f2:e7:15:46:67:cc:1e:
                    ea:4f:7f:47:f7:ba:07:9e:fa:7f:23:ba:12:1c:5c:
                    42:a3:be:ae:bc:0a:9c:e6:fe:4b:dd:5b:2c:d0:8d:
                    0d:1d:f5:4d:e0:92:b9:56:23:32:fa:62:57:fe:c4:
                    fa:ee:05:c7:ce:f2:36:ce:12:ab:2b:1a:8f:f9:20:
                    f9:c4:19:8c:9a:7d:7a:1f:d0:b9:2b:47:a9:9d:9c:
                    a9:2b:a4:4d:5a:df:70:1e:ad:6a:d6:0d:39:3d:71:
                    90:06:ca:1e:12:68:ef:fe:91:cd:a9:1e:0b:8d:66:
                    9c:59:a3:e3:ec:7e:ba:87:84:25:c4:41:a5:a0:a6:
                    aa:07:5e:fd:b7:0b:f8:71:19:46:58:da:05:d0:43:
                    c7:02:47:ef:31:2e:7e:83:fa:9e:cb:0f:8a:54:c9:
                    da:f3:06:9b:c2:05:0d:e8:eb:54:92:e5:3b:70:2b:
                    89:5f:ca:f7:19:a4:4e:2c:1c:f1:14:e1:f7:89:fe:
                    a6:b7:16:8a:2e:4f:1e:62:20:b1:7e:e7:05:e1:fd:
                    16:ab:1a:c6:2f:92:97:68:f5:a3:70:cc:cc:7d:19:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:81:EF:9C:81:2D:78:B8:3D:30:2E:DC:52:C4:E8:E3:1B:A2:11:D9
            X509v3 Authority Key Identifier:
                keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:77:41:20:04:03:39:3e:f2:b1:60:c3:ce:b7:b0:da:1c:ec:
         ac:3a:07:89:cd:82:e1:d3:1d:8a:cf:7f:dc:58:b1:cf:74:47:
         ee:d7:da:46:d9:e3:43:b3:ef:55:7d:9d:79:6a:bc:7e:71:7d:
         aa:f5:07:02:f0:58:e7:f7:c7:99:cd:83:ab:46:8f:ce:0f:ce:
         1d:41:e0:f3:26:3e:2a:54:d7:14:cb:a1:c6:3a:fe:9c:dc:3a:
         39:20:49:47:1d:3f:de:bc:85:fd:5c:34:8f:86:86:45:3f:09:
         34:94:41:87:43:fe:93:56:89:ee:12:b1:59:e3:72:4c:2c:42:
         33:eb:b8:0b:06:ea:eb:6e:d1:dd:98:75:a5:11:d1:dc:13:e2:
         d7:dd:9f:3b:05:43:94:d9:4c:b3:f5:6e:4a:07:7b:50:7b:bc:
         d9:0f:e3:f4:9e:0c:f5:02:a2:27:86:94:7d:e9:b6:e2:52:3a:
         21:eb:f5:8c:1e:20:a3:e0:d1:0b:26:0f:ba:99:ad:ba:20:56:
         b0:74:83:cd:b6:6c:66:fc:01:10:e1:75:7b:59:fa:66:c6:de:
         6d:df:38:03:4c:d9:58:9e:5a:33:38:3b:41:56:70:6e:83:46:
         d2:f9:f5:39:76:7b:f0:b1:8d:48:34:7a:f3:ef:ec:83:fa:f7:
         ca:1a:cf:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACS1Gv8pu2qGomHvvqSRQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YzFiYjNmYjEzNmFiZjQwN2EwYTUxYTRhMDc2NTE3NGZm
ZGY0NzQwHhcNMjYwODE0MjIwMTI1WhcNMjYwODE1MjIwMTI1WjAzMTEwLwYDVQQD
Eyg0NjgxZWY5YzgxMmQ3OGI4M2QzMDJlZGM1MmM0ZThlMzFiYTIxMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAl5fScD7cZQ3eELPoa9Qxo5zMau
Qae4t0SPUN3LHRxOUSCq+/LnFUZnzB7qT39H97oHnvp/I7oSHFxCo76uvAqc5v5L
3Vss0I0NHfVN4JK5ViMy+mJX/sT67gXHzvI2zhKrKxqP+SD5xBmMmn16H9C5K0ep
nZypK6RNWt9wHq1q1g05PXGQBsoeEmjv/pHNqR4LjWacWaPj7H66h4QlxEGloKaq
B179twv4cRlGWNoF0EPHAkfvMS5+g/qeyw+KVMna8wabwgUN6OtUkuU7cCuJX8r3
GaROLBzxFOH3if6mtxaKLk8eYiCxfucF4f0WqxrGL5KXaPWjcMzMfRlk8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaB75yBLXi4PTAu3FLE6OMbohHZMB8GA1UdIwQY
MBaAFBnBuz+xNqv0B6ClGkoHZRdP/fR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEt
ZGFkMThkNWIyYTNjLzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEtZGFkMThkNWIyYTNj
LzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgndBIAQD
OT7ysWDDzrew2hzsrDoHic2C4dMdis9/3Fixz3RH7tfaRtnjQ7PvVX2deWq8fnF9
qvUHAvBY5/fHmc2Dq0aPzg/OHUHg8yY+KlTXFMuhxjr+nNw6OSBJRx0/3ryF/Vw0
j4aGRT8JNJRBh0P+k1aJ7hKxWeNyTCxCM+u4Cwbq627R3Zh1pRHR3BPi192fOwVD
lNlMs/VuSgd7UHu82Q/j9J4M9QKiJ4aUfem24lI6Iev1jB4go+DRCyYPupmtuiBW
sHSDzbZsZvwBEOF1e1n6Zsbebd84A0zZWJ5aMzg7QVZwboNG0vn1OXZ78LGNSDR6
8+/sg/r3yhrP9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:45 2026 by rpki-client