Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File:                     Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier:          zGmfnyclbXH/Ao/pk8pAw16fDEw8g2htqUv7aNQeZMk=
Subject key identifier:   61:F9:00:82:D6:11:71:F9:BB:34:DA:00:8C:CA:53:CD:79:EE:1D:2E
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer:       /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial:       019FF18EA40053712533A038F0BB74A79E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number:          1A0D
Signing time:             Tue 11 Aug 2026 16:01:24 +0000
Manifest this update:     Tue 11 Aug 2026 16:01:24 +0000
Manifest next update:     Wed 12 Aug 2026 16:01:24 +0000
Files and hashes:         1: BCTCosehzN-IVujDky1DFPEPdk8.roa (hash: dD51Omff3fmTkuQoAW0zLyIe0HD79k7wegGUmnwdJ5U=)
                          2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: ygwdnfmCpHYHcEYpI5GpWzGqhJQuJvBtjHQUyfrbgok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f1:8e:a4:00:53:71:25:33:a0:38:f0:bb:74:a7:9e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
        Validity
            Not Before: Aug 11 16:01:24 2026 GMT
            Not After : Aug 12 16:01:24 2026 GMT
        Subject: CN=61f90082d61171f9bb34da008cca53cd79ee1d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:25:74:82:e8:22:38:87:55:bf:79:07:c3:
                    c2:c3:30:1e:14:f1:0f:ac:0f:0a:d9:8c:66:0b:79:
                    9a:a1:e9:c6:11:d8:09:ae:59:4e:72:dc:86:14:c5:
                    0d:08:e7:95:2e:5b:d7:45:00:1f:56:b7:49:2d:d0:
                    16:cf:a6:97:a7:2f:66:8a:76:44:79:a7:c4:ff:b1:
                    cf:09:5e:f7:14:ac:f9:7f:83:de:1a:fa:3b:92:e4:
                    19:45:da:23:f9:a4:7b:00:a5:6a:65:35:0a:c1:d1:
                    f3:4f:1f:f6:d1:2a:62:29:54:6b:46:df:cd:7c:7b:
                    6f:7c:81:15:38:72:27:c9:94:f2:60:7f:06:76:4c:
                    9c:cd:fa:5f:a1:e4:69:3e:2d:0a:6a:2e:26:9e:dd:
                    44:27:77:b7:66:f8:a4:61:0a:2e:b6:cc:d9:a1:69:
                    21:d0:65:96:c7:68:c5:65:87:cc:df:a9:51:17:a8:
                    61:28:27:3a:99:fc:05:0e:aa:55:ce:97:f7:08:10:
                    b6:7a:78:e5:12:54:78:e8:25:ea:33:a5:e5:75:d8:
                    e0:f9:1a:1c:bb:23:b4:81:a4:f4:a0:af:ee:d0:4c:
                    8e:48:2f:7e:27:4c:60:01:60:21:aa:e6:f2:24:12:
                    5f:b2:b7:ff:88:37:5d:6f:59:91:ba:3e:19:0a:6b:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F9:00:82:D6:11:71:F9:BB:34:DA:00:8C:CA:53:CD:79:EE:1D:2E
            X509v3 Authority Key Identifier:
                keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:52:5a:7f:64:ae:5a:ac:0b:6b:cf:fc:4b:7c:02:33:e2:
         15:76:aa:50:83:1d:8e:22:dc:9c:78:41:35:68:c3:2b:0c:29:
         7e:56:b6:44:41:cc:52:6c:99:ba:a6:1a:e7:0e:36:f6:8b:75:
         7a:21:03:51:18:62:b8:a3:43:5a:ea:33:b6:a4:3b:e2:ac:df:
         30:37:c5:df:cf:28:2c:17:54:82:0f:de:2a:94:54:3c:4d:d8:
         a0:d6:d7:3b:3c:6b:ab:62:42:82:3a:33:f1:5a:6b:5b:69:9a:
         84:84:db:43:56:ab:ed:62:49:27:d8:92:60:97:be:09:6a:e6:
         b1:5e:a5:e2:66:66:3c:e0:d1:e1:f7:93:93:d3:ee:74:4c:62:
         cd:db:70:1b:f3:4c:ba:b3:5a:1d:8e:10:3c:76:ef:6c:fb:24:
         0c:5d:37:e0:06:cc:66:0f:85:54:d3:7b:26:18:be:b4:91:c7:
         b5:5b:a4:ba:e0:ab:b9:f7:51:13:84:98:20:23:19:04:ae:c0:
         9c:ff:c3:9d:e2:61:70:3b:42:71:5e:2e:84:4c:e3:74:62:4c:
         9c:10:82:36:45:b8:93:37:2e:a7:eb:c8:e0:f3:d2:c9:2d:43:
         d3:af:de:01:68:17:0b:a7:ad:90:14:87:3f:67:05:70:cb:e6:
         d0:25:4a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 00:42:22 2026 by rpki-client