Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File:                     GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier:          l7bbKBpRtNO76MwZdG3Xkm8pIQroOX8lleu3sEkR0kw=
Subject key identifier:   32:5E:DA:8E:D5:40:8D:21:80:CE:27:49:1A:4A:2C:9B:8A:D0:74:46
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer:       /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial:       019F31B97706E7F1A149897C2AF177237F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number:          1928
Signing time:             Sun 05 Jul 2026 10:01:05 +0000
Manifest this update:     Sun 05 Jul 2026 10:01:05 +0000
Manifest next update:     Mon 06 Jul 2026 10:01:05 +0000
Files and hashes:         1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: BWeY2naIiedYP2AeaR8jP7NikY2gj0lE4tdo83cBK0U=)
                          2: Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa (hash: B5IjyWOTGquDtIk33USdJO3jmFl66T5rjOlw+iwqVn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 07:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:31:b9:77:06:e7:f1:a1:49:89:7c:2a:f1:77:23:7f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
        Validity
            Not Before: Jul  5 10:01:05 2026 GMT
            Not After : Jul  6 10:01:05 2026 GMT
        Subject: CN=325eda8ed5408d2180ce27491a4a2c9b8ad07446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:27:71:c9:c1:68:b9:e4:42:01:20:bb:9e:
                    64:68:0e:d5:15:6b:aa:15:6d:82:be:52:a1:dc:7f:
                    37:70:2c:5d:d8:6a:7f:d9:59:49:e9:8c:e2:4d:60:
                    6d:47:b4:3b:2c:0d:40:e8:b9:dd:da:01:5e:f0:62:
                    11:f4:84:ee:7b:a4:4b:9a:25:52:17:6c:7d:01:c3:
                    21:4e:5f:53:03:8d:5f:f0:62:df:92:c4:00:8c:9d:
                    8c:90:0a:20:f6:36:35:9a:6f:2b:fd:57:f6:a0:5b:
                    a8:53:ef:39:a4:41:a2:3f:45:a7:01:45:87:7a:3b:
                    af:5b:b7:08:42:7d:19:ad:a4:50:08:f3:13:12:f2:
                    01:00:b9:38:76:49:79:ff:06:57:7e:54:24:a0:ba:
                    cc:04:61:de:96:c9:75:dd:a3:32:9f:a0:ec:b7:58:
                    99:03:97:72:d4:39:e0:7c:30:bf:33:62:3d:95:74:
                    bc:8c:8d:c8:6e:c1:34:d3:81:1c:96:73:e0:80:6e:
                    84:a2:5a:61:52:30:19:68:34:fa:6d:a5:93:2d:e7:
                    0b:2b:8f:40:a9:b1:2e:fb:b1:85:ee:6e:d9:bb:41:
                    19:f2:2e:ee:1d:46:1d:24:eb:46:08:16:93:b5:83:
                    e1:7a:df:cc:a2:a8:db:32:d0:6b:10:45:6f:31:b2:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5E:DA:8E:D5:40:8D:21:80:CE:27:49:1A:4A:2C:9B:8A:D0:74:46
            X509v3 Authority Key Identifier:
                keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:f5:c2:9e:95:c4:90:e1:6c:df:4d:df:05:e9:51:65:d4:
         e0:64:db:fa:66:55:8a:36:8b:42:e4:45:9f:99:b4:5a:ff:c7:
         36:ac:f7:df:3c:a6:9c:5d:8e:b7:af:31:5e:d4:f7:9c:98:48:
         db:a0:da:00:7a:3f:93:f0:5a:ff:19:22:54:41:1c:db:f3:61:
         0e:50:6b:a0:a8:5b:af:13:b1:97:f3:a9:e0:3d:0d:7e:3a:d0:
         72:74:4f:af:27:ac:15:8a:a4:ab:3e:32:25:36:3a:ae:cd:dc:
         18:84:17:b2:5c:c8:d9:38:70:4e:e1:04:a4:a6:2c:87:ff:94:
         d7:1e:7f:09:06:24:2d:8c:15:1b:4b:89:a2:79:c0:b3:a5:d5:
         23:a0:60:64:50:58:ff:4b:73:f1:fb:27:bd:f6:f4:0b:d9:49:
         08:36:ba:e5:f8:ea:bf:b3:62:7a:ca:1f:07:db:41:6f:82:33:
         df:46:1b:8b:8f:09:c1:68:c2:81:19:76:40:8d:0f:51:71:65:
         9c:26:d1:fb:c2:2d:31:57:f1:5f:0b:3b:a3:cf:96:83:e6:03:
         f1:fc:5a:a7:b0:63:ee:4c:6b:86:4c:bc:79:0c:9b:ad:8b:4d:
         93:79:2d:cc:ac:44:df:85:05:e5:81:1b:51:ca:7b:7a:c2:22:
         7d:b3:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:33:54 2026 by rpki-client