Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File:                     GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier:          7fP/6kHXl8eiZaXdh50QiU1nPKdJrFnmSxE6jUnSmlE=
Subject key identifier:   3A:C6:91:B3:9F:69:CF:47:8B:12:47:F6:2B:C3:17:E1:37:31:9E:81
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer:       /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial:       019FFC7FB3035C6F54E5A138E8838D2CC255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number:          19FE
Signing time:             Thu 13 Aug 2026 19:00:55 +0000
Manifest this update:     Thu 13 Aug 2026 19:00:55 +0000
Manifest next update:     Fri 14 Aug 2026 19:00:55 +0000
Files and hashes:         1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: XNexxjS1hRATcJ/dN1n9jknGdA5lzRfpcQ+8oGEh/Wk=)
                          2: H00Omd7RPitereQtVkcKdJ7rvQE.roa (hash: P3INZZ+wxZ5iAVG5bG8aZrx0nXJci1wMPc5cl04gndw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fc:7f:b3:03:5c:6f:54:e5:a1:38:e8:83:8d:2c:c2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
        Validity
            Not Before: Aug 13 19:00:55 2026 GMT
            Not After : Aug 14 19:00:55 2026 GMT
        Subject: CN=3ac691b39f69cf478b1247f62bc317e137319e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:65:39:7a:93:90:cf:ec:00:77:dd:1b:e2:
                    71:fb:2e:02:ba:aa:f5:8c:54:35:4f:63:fd:37:e3:
                    9f:4a:41:aa:d5:50:81:00:b3:e5:00:dd:ff:7b:16:
                    e8:ae:06:2b:d8:d4:15:1a:d3:5c:e4:e7:74:8f:14:
                    2b:df:11:69:bd:42:67:c9:76:92:40:e5:88:ac:3d:
                    0c:45:af:53:84:dd:b4:a5:27:21:13:ac:54:bf:32:
                    b6:6a:c2:83:b7:a3:80:d8:4c:19:1a:7d:bf:5a:31:
                    65:1e:99:b5:e1:50:7d:db:97:3f:6b:37:63:b7:df:
                    8a:f9:f6:f2:ff:25:73:ea:ef:ec:43:40:a6:6c:bf:
                    9c:a6:3b:51:de:1d:d9:c5:8e:3e:d1:58:e8:a5:c5:
                    b6:39:48:46:02:cc:4c:a1:e8:84:bc:c0:0f:37:68:
                    08:16:cb:77:e1:5b:b4:41:e4:23:6a:d8:a1:73:ea:
                    1b:d3:e3:73:80:fe:25:6e:07:58:3e:da:86:a7:d9:
                    95:62:50:0f:d3:35:f5:ea:ec:b4:17:dc:21:3b:be:
                    20:72:0d:ce:df:9a:8a:ea:bc:73:80:99:84:90:71:
                    09:3d:04:db:1f:29:52:47:50:b2:de:f6:6b:ef:1e:
                    9c:77:c0:8c:9c:ce:08:7d:b1:9d:f6:b5:21:71:78:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:91:B3:9F:69:CF:47:8B:12:47:F6:2B:C3:17:E1:37:31:9E:81
            X509v3 Authority Key Identifier:
                keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f8:bf:5a:39:52:6a:ba:27:f6:9b:4a:62:93:af:91:3e:18:
         ee:28:2c:1c:82:d9:34:09:e2:c9:ab:62:f7:16:9a:4b:a2:d8:
         71:e5:e2:e9:37:9c:63:f8:80:0c:6f:0b:a1:a4:a4:3a:46:b9:
         5d:8f:54:6b:1d:7a:17:f2:61:be:c6:2c:1f:fe:74:87:76:cb:
         b1:8d:18:3c:28:c3:00:94:37:f0:f9:56:24:34:6d:23:62:a0:
         e0:74:ec:c0:b4:73:38:0d:8b:62:8f:71:4e:a8:4b:1c:2f:b6:
         0e:40:87:4c:7b:0b:c3:32:a3:d3:98:1b:9c:74:5f:37:71:e2:
         c5:72:61:ea:a6:96:9d:a8:93:f9:39:f3:4a:7a:f3:bc:4c:37:
         cd:3e:b9:2e:01:bb:21:c7:1b:6e:e5:c3:4b:18:34:92:b5:d7:
         2d:3b:21:50:f1:07:51:ff:9a:09:2e:9a:44:5f:45:52:13:40:
         88:1e:74:cb:06:b4:86:1c:a0:82:8e:fb:48:39:1b:d5:f3:c7:
         4b:86:82:16:ed:2e:ba:60:77:ff:96:45:45:d8:dc:4e:49:13:
         db:b9:1a:66:8f:92:06:3e:e3:90:b9:77:8b:7d:b1:a5:f6:e3:
         b3:99:e9:f1:67:50:22:33:6b:5a:9d:8c:cb:1f:c6:2f:b3:8a:
         6e:df:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:39:52 2026 by rpki-client