Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
File:                     guRyorh_8WgtNi8N3kGOkxGsBGQ.mft (raw, json)
Hash identifier:          g/fgXungy9tV8GTghnpd61bqztG0gxLLaFgiTVousbY=
Subject key identifier:   E5:66:EB:7D:65:D2:C4:EA:3F:37:D5:3A:AF:D0:5D:31:06:1E:8F:AE
Authority key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64
Certificate issuer:       /CN=82e472a2b87ff1682d362f0dde418e9311ac0464
Certificate serial:       019F11C0F258A0FA159717F3742699D5FDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
Manifest number:          1873
Signing time:             Mon 29 Jun 2026 05:01:25 +0000
Manifest this update:     Mon 29 Jun 2026 05:01:25 +0000
Manifest next update:     Tue 30 Jun 2026 05:01:25 +0000
Files and hashes:         1: D-e6wU5zP6uZWWi2AkuLUGao4UQ.roa (hash: bKkOhrhuCYI3o+vWiMDxNRSf5d5NZPCfEgFdiqMVbac=)
                          2: guRyorh_8WgtNi8N3kGOkxGsBGQ.crl (hash: DmdC7bLLNBJEL2n4iPo+CqLTdpkpqdnA0k2hxLM4U58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:f2:58:a0:fa:15:97:17:f3:74:26:99:d5:fd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e472a2b87ff1682d362f0dde418e9311ac0464
        Validity
            Not Before: Jun 29 05:01:25 2026 GMT
            Not After : Jun 30 05:01:25 2026 GMT
        Subject: CN=e566eb7d65d2c4ea3f37d53aafd05d31061e8fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:df:e6:82:42:b2:8b:09:01:f7:0c:e3:f2:
                    ad:ff:1d:87:f0:27:3d:37:e1:d7:de:33:a9:86:84:
                    8a:cd:58:03:b4:d9:2b:d1:fc:4e:9c:51:3a:23:25:
                    9d:81:5f:49:73:71:4a:1e:0a:d8:89:fa:0b:84:6f:
                    ed:e5:d6:d9:35:42:a1:05:9b:78:c4:5a:84:a1:79:
                    6f:42:a1:18:a5:d4:77:36:3d:a2:d8:b5:a5:72:e5:
                    f6:2b:9a:26:ce:a4:f5:20:4f:66:9b:5f:63:9d:c0:
                    f2:35:78:10:42:1a:79:bd:8d:45:9f:de:4e:73:ea:
                    7b:c0:7d:c0:50:0a:30:f1:5b:7b:87:6f:29:24:71:
                    d1:da:20:87:13:5a:66:ab:22:68:48:1e:d5:2f:85:
                    9d:3a:90:9a:ac:16:bb:15:8f:64:8b:c9:f4:34:de:
                    72:f8:5b:f9:c4:e6:46:92:58:27:14:52:a7:0c:b4:
                    db:30:0b:1c:98:19:6f:21:27:9e:d6:95:c4:03:ab:
                    1c:fc:b0:67:86:a3:6b:84:c3:13:c7:b9:d5:ce:f1:
                    15:85:a5:3a:61:24:11:d4:7c:89:54:a1:28:0c:2a:
                    52:21:57:6f:ca:36:dc:52:e0:68:89:1c:26:90:21:
                    d3:55:97:51:72:6a:32:79:5b:44:27:2f:82:d1:e6:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:66:EB:7D:65:D2:C4:EA:3F:37:D5:3A:AF:D0:5D:31:06:1E:8F:AE
            X509v3 Authority Key Identifier:
                keyid:82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:b0:70:3a:2c:bc:15:66:7a:05:5f:fc:d9:87:30:72:06:
         73:07:fb:f5:0f:39:a2:51:f4:29:77:a8:09:c4:ff:e8:1d:67:
         be:89:85:d7:61:4d:b6:cd:e1:84:81:1e:49:18:75:6d:99:1c:
         08:f5:d5:3e:62:23:4e:55:b0:10:e2:36:1c:06:0e:a7:d2:24:
         b8:1f:4b:7d:2b:36:2c:c0:d4:3d:a8:0d:a7:e8:4e:9a:cf:d4:
         a7:57:c2:f5:d7:75:86:76:8c:f1:5b:29:7f:fd:75:3a:67:6e:
         34:16:86:23:3b:af:c8:e9:91:c8:b3:f8:6f:f1:63:96:29:1a:
         64:1a:d4:9f:e0:5f:8c:f4:ec:57:52:0e:f8:22:6d:8a:a7:f6:
         71:f0:4d:f7:27:fa:b7:a6:d3:52:ed:9e:c0:c4:4b:8a:4b:b4:
         cc:84:6d:34:4a:c9:d8:cb:68:5b:ad:21:01:60:a2:2c:d1:9f:
         d5:13:51:9d:e8:90:d8:27:d3:1a:80:d7:cb:aa:ad:07:a8:c8:
         a9:92:aa:0f:2b:46:c5:79:1f:c1:85:df:23:0c:2a:91:5a:3e:
         9c:a0:65:77:5b:01:3b:69:1e:35:f2:68:b5:f0:05:14:3a:8a:
         ec:fa:ca:4c:15:c8:65:53:d8:ba:ca:6e:98:9c:fd:54:b0:db:
         55:ed:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:44:42 2026 by rpki-client