Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          Jkn2vQlr0u3NBhmyoarkafLeagyXuTzEe4atzsX/XuE=
Subject key identifier:   BF:12:90:AB:70:0B:C0:53:53:67:39:CA:B4:7E:D1:1B:9B:70:DD:7D
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       019F43F6A3FDE622183196696F9489FE87FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0CC3
Signing time:             Wed 08 Jul 2026 23:01:05 +0000
Manifest this update:     Wed 08 Jul 2026 23:01:05 +0000
Manifest next update:     Thu 09 Jul 2026 23:01:05 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: RJw09OlweXtGwsEbUum90ceOkQSXewQGjEx2dW6p6xs=)
                          2: HMpfD8yWZ0j1ouvG1EDM2ZSSE8c.roa (hash: SGGQvvIcUh55SsmT9zcE0INbCSKqRJfWxR5dRHBgMA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 23:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:43:f6:a3:fd:e6:22:18:31:96:69:6f:94:89:fe:87:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Jul  8 23:01:05 2026 GMT
            Not After : Jul  9 23:01:05 2026 GMT
        Subject: CN=bf1290ab700bc053536739cab47ed11b9b70dd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:40:17:ea:33:9c:4d:e2:9e:21:46:db:f9:
                    3c:05:aa:c4:5e:e7:f2:10:bb:1c:8d:27:2d:d1:6f:
                    08:4f:c4:af:d0:42:3c:c9:57:e9:fd:ce:32:61:41:
                    da:d0:f8:9a:58:61:9c:b5:eb:c8:ee:4d:a3:cc:83:
                    1f:9e:e6:28:76:b5:1c:d2:75:4a:f0:2b:39:62:2b:
                    de:06:a0:ea:29:76:d5:8e:be:d3:19:f4:02:ab:37:
                    d3:2a:79:33:f5:12:89:a4:e2:7a:df:36:3b:78:02:
                    4c:5c:e9:79:ad:f8:8d:a8:f9:dd:58:99:31:30:b8:
                    43:7c:5c:1c:c6:28:9d:a9:53:9d:c2:a1:14:81:97:
                    bb:00:e5:2e:e9:2f:da:0c:f3:65:53:27:68:fc:c9:
                    2f:74:3e:ea:12:c2:1b:50:be:de:64:6b:56:e6:02:
                    39:32:24:91:1c:a2:48:c1:d4:f9:c7:01:78:66:ed:
                    32:6d:bc:1b:36:6c:c1:a1:48:c8:43:e9:b4:18:cc:
                    4d:b1:18:fd:8d:6e:7b:7e:68:1c:04:e7:13:b2:f4:
                    b1:83:30:46:20:b4:4b:7d:fe:5d:ce:22:03:cc:8b:
                    51:7b:ae:36:40:09:5e:37:03:e2:fb:be:d3:ae:89:
                    b2:8b:61:f6:f3:aa:7a:ed:e2:d6:88:8a:50:45:43:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:12:90:AB:70:0B:C0:53:53:67:39:CA:B4:7E:D1:1B:9B:70:DD:7D
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:44:9d:74:9e:b1:e5:c8:dd:92:85:d2:2f:7f:ef:da:7b:8f:
         31:b0:f2:06:9a:7e:98:fb:36:1e:58:36:f2:d2:4b:ab:ee:b7:
         92:53:54:fa:fa:f1:c6:20:21:b4:71:21:e2:a6:6b:12:ec:17:
         0a:9a:e8:94:5a:05:b1:d0:a8:74:7d:41:64:aa:dd:df:ea:82:
         e2:34:19:7b:4c:a3:58:c6:4a:f3:2e:b0:12:46:0e:55:39:b5:
         01:a6:44:07:5b:5f:73:38:c5:98:d0:fd:4d:3e:2c:a0:e4:30:
         13:ee:68:9c:39:eb:b8:fc:30:58:12:f6:86:48:36:9c:2f:e2:
         2c:75:4d:a3:93:fe:67:17:a7:76:a0:a0:31:50:aa:4a:20:2b:
         93:6d:86:93:3e:22:0f:40:ad:4a:3a:38:a1:52:8a:ca:5f:ed:
         c1:9f:4f:0a:b7:7e:dc:fc:cd:09:19:7e:be:24:f7:22:77:97:
         ad:8c:23:1e:52:72:e9:ed:d8:5f:7b:bf:35:ef:dc:60:d8:6d:
         fa:88:b0:97:cb:27:f2:3d:cc:db:93:0a:7f:0e:a6:09:8e:7c:
         6f:df:f6:25:2d:ed:30:be:ac:ec:43:d1:ac:f8:74:e4:f5:d7:
         89:06:23:d3:ad:a4:72:06:5d:f8:7b:f8:68:5d:68:37:b1:90:
         03:6f:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 08:19:49 2026 by rpki-client