Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File:                     gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier:          AQIORhxVeJzYrenOBVT2CMR+mMAvCm8bEzlYSgrZSZU=
Subject key identifier:   1F:44:E4:B7:99:A8:B6:18:DF:98:C4:2A:BF:72:17:22:F3:1D:48:B5
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer:       /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial:       019FA184342F371C4EADA34F947488C57496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number:          13C9
Signing time:             Mon 27 Jul 2026 03:00:23 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:23 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:23 +0000
Files and hashes:         1: _znAllcUhDUk5vaonzcpuUajgfo.roa (hash: qYtkv42oHHUxBFtOZdOaS3DV/fsi8LFPD+D7XK8B1uc=)
                          2: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: 9y4d+1IezT+a1UtgNrq1xp5k+AtD4rVIzd4G5Kf3NUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:34:2f:37:1c:4e:ad:a3:4f:94:74:88:c5:74:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
        Validity
            Not Before: Jul 27 03:00:23 2026 GMT
            Not After : Jul 28 03:00:23 2026 GMT
        Subject: CN=1f44e4b799a8b618df98c42abf721722f31d48b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:69:6c:b7:94:0b:f1:e0:78:71:a4:82:78:
                    28:84:05:61:8e:63:06:fb:32:be:69:6f:86:1e:07:
                    3f:23:06:23:0f:67:53:ca:09:2e:39:0d:7d:cb:9b:
                    c5:34:e2:05:fa:1f:f4:bb:00:ea:80:18:0f:a1:de:
                    09:bd:c2:e3:c5:e9:24:09:cc:c3:67:ec:b4:2f:0a:
                    d4:68:d4:ed:c5:72:70:aa:d4:f8:98:f7:04:98:f2:
                    37:ba:df:f2:2c:17:cc:d4:4d:73:bf:c1:29:f7:7d:
                    dc:b1:f8:3b:29:49:78:ce:a3:72:6f:94:26:7c:ab:
                    3f:0e:1d:13:7e:6c:92:e4:e9:d7:dc:6a:4d:87:78:
                    4b:48:65:f9:64:ce:85:f7:ca:7d:9e:53:13:bf:ec:
                    8e:eb:62:92:79:55:4f:d7:9f:5e:0c:7a:3b:7b:1a:
                    27:fd:65:c9:1d:1d:5f:f0:0e:1c:e2:55:2d:5b:0f:
                    6d:75:5b:f2:7e:64:ae:8e:04:54:49:11:61:ba:bf:
                    40:45:50:83:d4:6b:50:bc:0d:15:5e:9b:58:af:20:
                    46:ff:c7:46:bd:95:44:e7:87:6a:88:d8:db:59:c5:
                    09:47:aa:ae:27:b1:5e:5c:b9:94:ae:ab:60:c0:a1:
                    7a:0c:1a:dd:e4:e0:c6:d2:82:d2:b7:ed:18:d4:00:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:44:E4:B7:99:A8:B6:18:DF:98:C4:2A:BF:72:17:22:F3:1D:48:B5
            X509v3 Authority Key Identifier:
                keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a5:3f:4d:21:2b:31:10:88:e5:bf:74:ef:50:8a:3e:80:d2:
         8f:35:3d:2e:c0:ac:34:81:36:d1:ad:50:fe:1b:46:70:5e:ad:
         2c:c6:db:cf:43:30:43:f9:28:63:b7:e4:5b:9e:11:09:c5:ee:
         cb:5e:2e:d2:82:5e:a0:6c:59:1a:12:ce:3b:b5:9f:62:2a:a4:
         37:e1:73:ee:c4:38:cc:95:10:c6:52:55:81:04:53:dc:40:4d:
         b0:8c:25:aa:cf:3e:9b:03:67:c3:50:e4:7b:e3:bc:79:50:dd:
         ab:99:d6:ae:a1:31:04:77:10:02:f1:a8:d5:d5:65:bc:88:67:
         f7:9f:7c:93:56:87:f3:d4:43:b4:25:d8:80:ec:6d:01:81:bd:
         4b:8c:6c:cf:d7:54:ec:6d:b0:b2:19:f6:e6:49:2c:ff:46:19:
         34:82:32:73:e4:29:1a:48:bc:f8:21:aa:a8:28:89:da:3b:79:
         cc:98:23:d9:97:49:3f:5f:3e:78:72:d1:04:b8:7a:59:ea:63:
         ad:bd:e1:24:f4:06:e9:eb:29:2d:6f:18:17:85:26:ab:32:77:
         97:33:6b:5a:7e:98:bd:37:b0:30:df:ae:43:f6:20:ef:54:b6:
         99:5e:77:ca:31:0a:4e:00:b6:e1:5f:fb:6f:73:9f:0d:19:9a:
         5c:d4:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:49:18 2026 by rpki-client