Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          e/q8cJrKllOAR+4MivbhN6mwpK5s44AabcjJEXRxnpU=
Subject key identifier:   6F:13:1F:0A:36:8D:82:CF:9D:3C:B1:83:BF:95:16:A7:AF:BE:FB:7A
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       019FA26072F492AD4CC02A84558F2E997DA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          1962
Signing time:             Mon 27 Jul 2026 07:00:57 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:57 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:57 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: XMq4J+snXE14FHdl5oaO35de2nri5xVIj1Ug432T2tg=)
                          2: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (hash: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:72:f4:92:ad:4c:c0:2a:84:55:8f:2e:99:7d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Jul 27 07:00:57 2026 GMT
            Not After : Jul 28 07:00:57 2026 GMT
        Subject: CN=6f131f0a368d82cf9d3cb183bf9516a7afbefb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:14:7f:65:a1:3c:04:e6:83:dd:b6:6a:c4:
                    70:33:ee:9c:96:cf:66:4d:0b:1b:6d:02:02:25:14:
                    71:7c:0a:0a:24:4a:fb:76:36:cc:6c:99:9b:a0:dd:
                    bd:c7:cd:bb:7f:a5:04:1c:37:99:68:51:e1:af:23:
                    e2:c7:f6:0f:2c:21:7c:bd:b7:11:ee:f8:64:bc:7f:
                    5b:8c:a0:3e:3a:d8:f1:7c:19:88:73:48:e8:8b:c2:
                    c5:4b:da:80:c7:ba:80:ff:66:4d:2b:a5:d4:e7:d7:
                    90:7d:8c:03:e0:e4:6d:9f:9c:63:92:c7:96:0a:1b:
                    82:0f:55:fc:a7:28:cd:49:4f:fd:2e:fc:6f:43:51:
                    08:25:0c:ab:96:d5:6d:0d:8e:b0:b9:00:ef:9c:bd:
                    8c:ad:aa:e7:0f:a5:17:5d:4d:79:3c:99:75:a4:14:
                    4d:3c:34:43:38:2e:cd:4c:df:b0:23:6c:da:b9:8a:
                    5c:2b:22:43:d3:4a:08:af:95:f8:99:0c:41:27:d9:
                    ad:05:f1:d6:ce:15:c8:b6:a4:fd:0c:d2:b0:a6:cd:
                    1f:1b:bd:d7:db:66:21:8e:2c:81:b1:21:c2:e8:b5:
                    f5:5f:a6:59:15:f5:b4:4e:81:5c:0b:d2:c0:c2:47:
                    9e:89:40:86:60:ef:7c:00:dd:f9:31:c8:c8:94:8c:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:13:1F:0A:36:8D:82:CF:9D:3C:B1:83:BF:95:16:A7:AF:BE:FB:7A
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:d6:7f:cf:75:44:95:1b:53:37:43:d6:46:35:4a:9a:85:
         df:e4:6e:bf:fa:5c:f4:1e:da:57:0f:35:53:ef:78:fd:c8:dd:
         fd:f3:e9:a4:7e:5b:fa:ed:76:c6:6c:d8:56:94:39:42:57:e9:
         6b:4a:60:db:fc:45:79:80:54:18:b3:d5:48:d9:ca:09:a4:2e:
         77:f1:f9:95:41:10:af:6d:94:a9:cc:3a:54:22:d6:bc:cf:60:
         24:9d:48:a9:83:e1:cb:50:ee:e3:9d:cb:c3:c3:82:51:73:60:
         d1:ae:d2:53:c0:75:c7:71:a0:55:17:3a:9d:f0:9a:24:18:10:
         a7:9c:27:a8:fb:ce:1e:3c:25:47:56:2c:68:da:5c:a5:0a:7b:
         bf:dd:d0:d5:89:0a:f4:63:c2:0a:34:ac:76:4b:79:d9:cc:a1:
         fe:00:32:f8:26:9f:6b:e7:0f:6a:df:e3:50:43:f6:67:07:91:
         ff:f3:5b:6b:c8:c6:07:c5:fa:f7:11:1e:1b:b5:e7:5e:95:40:
         4e:5b:0e:ae:73:86:84:67:1c:44:8e:af:bc:93:b6:81:1d:5b:
         90:f4:32:67:c2:63:59:7e:18:97:20:f1:32:4d:1d:b9:a4:65:
         3a:21:e6:22:9b:4a:5f:89:65:6d:94:ea:28:5b:3f:76:96:7a:
         3a:49:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:19 2026 by rpki-client