Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File:                     GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier:          qCvR4ptT5W5KhJsXG+ao4HeA585OsbDV0HnbErSybZI=
Subject key identifier:   7C:2B:7A:6F:B6:3D:ED:D2:E2:33:EA:C9:8C:DA:3D:AF:48:1B:4C:0A
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer:       /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial:       019F38976396EA97CAA6DB7251F05FF21CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number:          091C
Signing time:             Mon 06 Jul 2026 18:01:13 +0000
Manifest this update:     Mon 06 Jul 2026 18:01:13 +0000
Manifest next update:     Tue 07 Jul 2026 18:01:13 +0000
Files and hashes:         1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: wwYKwnKLT4WskXxWLMHCwjfHosUpDlVFabVaG1eblDo=)
                          2: dyUespYQq3mAO5ciQOI9W33sub4.roa (hash: f5ONEWQltft9lq7xj2n38xNWDCpMGTw5GICFFgsknX0=)
                          3: fSqawDgohGpuSmZo75yc0WkYeBQ.roa (hash: 8OxkTboICrI/6VG3FG9kRuzUoZMlBkjPOzPS7xwaWEU=)
                          4: nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa (hash: edmkHUr1mlIvRQnZS+9H+p7B//zDt6WSlQ6S+qA/Trg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:97:63:96:ea:97:ca:a6:db:72:51:f0:5f:f2:1c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
        Validity
            Not Before: Jul  6 18:01:13 2026 GMT
            Not After : Jul  7 18:01:13 2026 GMT
        Subject: CN=7c2b7a6fb63dedd2e233eac98cda3daf481b4c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:04:da:0a:0c:28:9c:f6:ad:74:60:45:54:
                    ed:57:c5:89:da:17:27:db:3c:4f:82:d2:7e:a1:e1:
                    2d:1c:a5:77:c3:59:ca:cb:4f:97:12:bb:16:68:e7:
                    88:46:77:0c:72:83:1d:42:10:a0:09:da:1c:39:7f:
                    0c:42:87:98:46:94:cd:98:8f:5a:35:c1:0c:62:e2:
                    81:f6:98:e2:56:37:6d:18:d7:8b:92:9c:47:1c:7d:
                    f0:91:a9:c6:36:ef:94:82:88:ac:5a:a9:7c:71:45:
                    9a:55:b0:b6:f4:e2:8f:8e:f9:93:95:d7:e4:cd:37:
                    9e:f7:8a:05:c1:fd:c9:d3:44:77:60:ff:90:04:ff:
                    42:b2:c6:4c:6f:6a:d9:10:7e:3f:d1:63:9e:60:b6:
                    97:f1:f9:cf:ce:27:3d:04:58:33:86:a5:ba:3d:c1:
                    bd:02:53:20:fb:45:98:fa:58:32:44:ad:1b:70:a7:
                    d6:5c:b9:cd:9b:9b:05:69:fc:1d:87:a0:5d:b5:8e:
                    9f:4f:28:bb:41:57:d1:52:ab:c6:7c:dd:4d:94:3d:
                    4d:b8:57:e8:20:78:50:ff:9d:37:d2:45:59:d9:d1:
                    2e:6d:2f:64:f2:1f:5a:6f:45:3d:83:a9:63:b4:40:
                    b3:6d:5b:19:49:4f:17:fc:58:d7:00:2e:88:33:ba:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2B:7A:6F:B6:3D:ED:D2:E2:33:EA:C9:8C:DA:3D:AF:48:1B:4C:0A
            X509v3 Authority Key Identifier:
                keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f4:04:fa:d5:d2:9b:9f:c2:35:d1:e0:e2:19:0b:bd:db:9a:
         3d:b5:b7:08:2e:39:9a:71:f7:e2:7e:6c:0b:54:fd:08:df:c8:
         8a:fa:e9:84:3f:9a:65:ed:d6:d8:a3:1d:f2:8b:db:6b:7e:1e:
         26:ca:95:f0:e6:fb:af:6d:0c:e7:cb:2d:65:89:21:46:a6:30:
         55:b3:62:6d:1d:11:ee:b2:46:df:6b:05:4d:8d:61:61:a5:09:
         07:f6:c8:84:5c:a2:54:66:dd:57:de:67:e0:ed:3b:82:4a:95:
         aa:bc:6d:7b:c7:fc:fe:9c:89:93:6d:64:54:f7:18:ca:cb:a0:
         9a:ff:40:b7:7d:fd:bf:37:35:2c:a8:92:f8:65:47:a3:e5:c6:
         d1:18:02:1e:fa:ab:d7:72:0a:92:6b:d1:45:4d:df:67:07:ae:
         a5:7f:9e:2b:0c:04:5b:c8:80:06:1d:56:9e:c6:83:d5:a2:02:
         89:cb:db:f2:d1:2d:53:59:2d:71:cc:ac:2b:30:68:0b:e0:7d:
         d9:86:76:5c:08:78:eb:c5:94:1e:11:5b:21:d6:e1:38:65:74:
         33:8d:95:ee:68:15:a6:2c:84:49:50:34:db:18:26:6b:ab:d4:
         b7:eb:db:3f:a1:c1:69:5b:67:e3:25:71:25:80:e6:7b:28:48:
         08:c1:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:46 2026 by rpki-client