Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          do7Z2fF+iv0P3xxvErbl81mk13l+KjXkZdUXCgwybmE=
Subject key identifier:   4C:90:EB:55:B8:92:59:07:5B:9C:FD:69:8A:AA:59:C9:EE:5D:55:30
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       019F93921C690ACCF6430AC1FD02D3DEE96A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          08A4
Signing time:             Fri 24 Jul 2026 10:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:53 +0000
Files and hashes:         1: FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa (hash: Zs2NR7v6cxcECJIbaIPTJM9/Q7GTHlESDly+5o8OUyM=)
                          2: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: ZahCkDjwLUATtFej77DT9QnH/2tElrUExAhe9yJNf/g=)
                          3: aCTYERjrsgQgd2eNcJ-xT6iLuVA.roa (hash: FSNpstLHIA+MgvTMObqgBgedN4krH4ykjVcUB8HPSAs=)
                          4: geaRxoLVhDcZBVyhdeOs-L3dqH8.roa (hash: v/gk2RC/o7m5zSWvAzxtnnzxEOoHq+kiZCoASoCUoYs=)
                          5: n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa (hash: tTwofU2ePVTBmlzrQLu6MXi58L90+r8cW89IO3vj7uk=)
                          6: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=)
                          7: vGG_tLkKXFgbXJfTRyLCvmDQxbE.roa (hash: WShGMkUZgE0y2ZoQYvE7mjCYcDN54oRSnCg5kaDhPTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:1c:69:0a:cc:f6:43:0a:c1:fd:02:d3:de:e9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: Jul 24 10:00:53 2026 GMT
            Not After : Jul 25 10:00:53 2026 GMT
        Subject: CN=4c90eb55b89259075b9cfd698aaa59c9ee5d5530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:9a:92:58:90:de:8b:4e:ed:7d:59:d1:b0:
                    2d:c8:76:be:1f:10:1f:46:5a:46:81:fe:ad:ef:99:
                    70:13:da:3f:60:f2:75:a4:37:3a:aa:2c:fc:f2:7c:
                    e6:9d:47:40:ae:fd:84:cd:0d:c3:4a:bd:59:23:4a:
                    69:6d:9d:7a:0f:ed:45:4d:21:f2:36:53:64:6c:05:
                    ac:53:e0:45:11:8a:39:e2:57:8a:13:56:d5:70:41:
                    c1:33:46:dc:68:7f:fb:c0:98:21:fa:0c:b3:8e:a4:
                    81:5e:39:c7:7f:d3:d2:f1:97:1b:bd:07:1c:61:7d:
                    3c:0e:07:9a:f7:b0:2b:fb:7d:f5:c5:4a:f9:c2:73:
                    56:dd:f8:9f:93:c2:da:70:58:1d:6d:f2:69:51:6d:
                    4a:0d:f5:77:6c:03:c9:32:d8:1d:bf:4b:a2:e2:bd:
                    8f:7f:ea:43:f8:d7:a7:5a:26:e4:e3:1b:2f:d1:35:
                    05:9e:6c:f3:93:a7:63:5b:40:bf:07:e2:44:14:7f:
                    28:fc:a6:92:1e:70:6a:57:37:78:de:e6:8f:9a:58:
                    6e:20:a1:3b:b9:77:b5:9a:e0:dc:9e:67:79:fa:ca:
                    a5:82:3e:e3:2c:7a:2e:ce:19:bd:6d:bf:2f:e7:84:
                    b3:54:17:3e:ca:d6:83:d0:92:dc:bb:a7:94:c3:c7:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:EB:55:B8:92:59:07:5B:9C:FD:69:8A:AA:59:C9:EE:5D:55:30
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:94:ea:05:fc:2a:e9:5e:fe:d0:37:b9:79:6a:e2:75:8a:24:
         84:67:24:eb:53:72:96:96:55:64:37:6c:60:bb:d3:f2:3b:5a:
         e6:47:08:f2:51:e6:80:99:03:01:af:e3:a7:25:42:9e:d8:5c:
         31:21:d0:2f:9a:6b:ca:7b:ea:31:16:87:37:66:c7:cb:0a:3d:
         de:db:c5:5c:d8:34:0a:26:75:63:72:92:76:17:4b:be:9f:50:
         c8:8e:6c:10:32:cf:c6:31:a7:57:15:c7:28:57:8e:26:7e:69:
         df:02:e3:41:3d:86:e7:d7:8a:f3:ac:82:77:4f:f5:af:ad:e1:
         19:77:a0:73:30:f1:4e:8a:31:6f:43:41:7c:6c:15:79:ae:dd:
         b3:58:c0:ba:16:65:f5:b4:a7:b5:4e:2e:02:2e:c8:70:01:9d:
         25:32:31:3e:ab:e5:ea:76:0c:d7:34:f1:fa:81:81:97:9d:30:
         c2:b5:04:73:9b:bd:72:40:a7:ef:17:dd:bd:9e:d8:af:41:6a:
         cd:a3:62:e9:94:ef:a3:b4:84:9c:0d:a3:f8:cc:07:ed:cc:44:
         5d:dc:41:0b:26:6d:29:b4:8b:41:8a:b7:af:d7:e9:0b:eb:b8:
         e3:6c:4c:01:e9:65:34:d6:a7:95:8f:bb:b9:55:39:42:25:0f:
         73:18:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:37:31 2026 by rpki-client