Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File:                     GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier:          +V1SuToTtfnZkF6j6c/ggUXbJU3tJPl9diFGEe+qpDQ=
Subject key identifier:   EB:7E:DA:AD:B5:5B:B7:F2:08:AB:8E:0A:AD:B6:5E:E8:8E:21:1B:93
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer:       /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial:       01A055554D87132C33EB3F27A58F00CAB99B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number:          19BF
Signing time:             Mon 31 Aug 2026 01:00:48 +0000
Manifest this update:     Mon 31 Aug 2026 01:00:48 +0000
Manifest next update:     Tue 01 Sep 2026 01:00:48 +0000
Files and hashes:         1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: yLOm2DE4R/nqXvIEOv3P2undbNPQlKWj/SVMDxtlqEk=)
                          2: Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa (hash: B5IjyWOTGquDtIk33USdJO3jmFl66T5rjOlw+iwqVn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:55:55:4d:87:13:2c:33:eb:3f:27:a5:8f:00:ca:b9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
        Validity
            Not Before: Aug 31 01:00:48 2026 GMT
            Not After : Sep  1 01:00:48 2026 GMT
        Subject: CN=eb7edaadb55bb7f208ab8e0aadb65ee88e211b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:a4:db:7a:89:ab:1d:19:e6:27:2e:12:cd:
                    46:c5:df:2d:c8:54:e8:d6:23:df:c2:59:0a:7b:95:
                    35:b8:30:bc:72:4a:8a:78:59:52:f4:fb:90:19:8a:
                    23:56:79:92:eb:66:f2:83:8c:82:68:26:40:9a:1d:
                    de:e1:09:e1:65:4a:b7:3d:7b:5d:eb:80:2f:9c:72:
                    64:55:6b:2b:48:98:f2:d5:dd:6f:ff:c5:ee:1d:4e:
                    e7:aa:12:d1:7a:22:60:eb:71:58:03:38:d2:5c:26:
                    8d:c7:64:9b:e3:2f:48:92:28:f2:21:ef:80:23:f0:
                    6b:03:2b:83:7e:c4:83:f5:e7:d6:8b:a2:0e:d4:1e:
                    da:2c:64:09:bd:49:00:34:35:54:e8:35:8a:8e:39:
                    f5:c2:98:87:1e:84:f6:16:ce:d9:62:10:82:83:77:
                    2d:04:bc:55:24:f6:7f:ec:a5:a6:ed:15:e4:00:22:
                    cf:c4:a1:a6:97:3c:ed:a0:45:10:32:67:39:c5:a8:
                    5c:fa:72:77:e0:c4:7f:37:8e:7a:a2:45:b9:d5:8a:
                    3b:bf:4e:e2:47:08:3c:9f:89:aa:17:68:54:08:ba:
                    63:3a:27:90:42:c8:a0:79:03:0d:46:44:20:a6:00:
                    36:15:02:d2:3f:a1:1b:73:5a:be:42:22:22:16:6b:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:DA:AD:B5:5B:B7:F2:08:AB:8E:0A:AD:B6:5E:E8:8E:21:1B:93
            X509v3 Authority Key Identifier:
                keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:ba:a0:c2:51:f7:3a:20:b8:97:44:a4:da:76:66:64:61:
         be:a8:6b:53:68:78:82:aa:40:c5:25:49:e6:c7:04:61:9d:1e:
         fd:30:e4:e4:00:91:23:54:66:00:3f:8a:85:9b:b9:b2:b7:a2:
         e7:58:4e:04:50:32:64:db:30:07:24:2d:a4:bb:7d:a7:32:27:
         56:51:52:f9:11:60:3b:d3:05:f0:12:d1:61:b5:b8:f3:dd:c3:
         c5:d5:78:75:33:62:36:df:c2:70:16:1e:c2:d4:d5:60:43:2e:
         0c:c6:d5:cc:e9:ea:2c:48:18:e7:c6:7e:3f:8e:c1:55:c1:aa:
         a2:ed:b7:58:0e:a7:e3:52:37:db:31:b6:49:6a:f1:23:b0:a4:
         58:0e:e9:18:ed:a0:7b:c4:c1:a1:f8:70:bc:cb:97:be:c1:9d:
         2a:3c:19:df:da:90:50:f1:ec:86:06:ad:bf:7a:29:90:bc:fb:
         6f:06:78:32:60:b2:3d:b3:c4:f1:4c:cc:40:c3:e4:32:91:50:
         91:14:c4:c0:05:5e:f3:93:49:62:69:20:64:72:5b:8b:06:2a:
         a6:62:b7:e8:94:f6:a2:39:3f:32:39:fd:a5:ce:69:77:0b:28:
         89:d0:c7:34:64:82:9e:00:12:c6:7d:c6:06:c7:56:09:eb:a6:
         64:10:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:09:53 2026 by rpki-client