Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File:                     gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier:          3yGneriiXpHXPVg4U2Txpq1vzq9Quf8gSeGrySIidS4=
Subject key identifier:   B1:3A:AF:AA:73:91:F9:D7:EE:C6:6E:E1:5B:04:72:38:53:B6:45:33
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer:       /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial:       019F9090E845881A90F4BB3D1B7A56A4409C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 20:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:43 +0000
Files and hashes:         1: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (hash: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=)
                          2: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (hash: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc=)
                          3: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (hash: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek=)
                          4: Z81lv8qaADBtEGYsx0-brJvvQeg.roa (hash: r6SobeHV+YoGbEJkji/z1sNc1KoSoCEgvZU8Lt5eYac=)
                          5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: hN0lAJCOv6igGZSqO0/8OjhkNzAbxYAwoUBM5+QTE2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:e8:45:88:1a:90:f4:bb:3d:1b:7a:56:a4:40:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
        Validity
            Not Before: Jul 23 20:00:43 2026 GMT
            Not After : Jul 24 20:00:43 2026 GMT
        Subject: CN=b13aafaa7391f9d7eec66ee15b04723853b64533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:49:42:ee:6b:60:e0:23:41:24:5c:08:94:
                    91:ce:0c:e1:3e:15:24:a0:14:ab:2e:29:8f:b3:40:
                    a6:92:0c:09:c3:bd:ea:9e:ab:46:2a:5f:55:75:89:
                    cc:e8:d1:db:2f:49:32:33:53:ad:73:20:9f:0d:58:
                    28:6c:ab:08:fb:21:4c:68:05:df:42:02:3d:27:c5:
                    8a:53:bc:ee:4b:09:71:8c:83:fa:7c:fd:0c:3c:a7:
                    4c:86:cf:ae:0a:ec:5c:18:2c:41:05:36:23:db:4b:
                    74:b0:f5:d8:eb:0e:d1:dd:bb:b4:17:ba:1b:1e:86:
                    a2:90:88:04:ad:8c:6b:c1:2b:2e:6b:28:69:8c:5f:
                    c3:fd:07:8c:08:74:5d:92:ce:9c:81:9d:59:d7:28:
                    81:f2:f6:6f:c7:c2:f4:e0:63:cb:ea:42:54:73:04:
                    b6:ab:54:86:9f:6f:c1:b3:9b:bc:d1:dd:fd:3b:1c:
                    ed:54:3b:f7:c9:0d:1f:4a:30:75:b3:83:5a:45:49:
                    58:63:75:fe:58:a3:84:90:7f:a6:29:4d:b1:27:b7:
                    8d:39:33:f6:ae:80:94:6e:93:78:29:ab:47:28:bd:
                    21:ca:69:fe:f1:38:3c:97:93:9b:8f:6c:62:ef:55:
                    f2:ac:e0:f7:d2:33:39:6d:8f:7c:dd:9a:31:9a:9f:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3A:AF:AA:73:91:F9:D7:EE:C6:6E:E1:5B:04:72:38:53:B6:45:33
            X509v3 Authority Key Identifier:
                keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:03:ab:7c:07:6b:35:8b:c2:c7:0e:05:f5:ee:3c:f7:c8:
         1e:12:ad:7d:64:78:b5:d4:46:1c:96:53:4f:e6:9a:f1:57:7f:
         a1:9c:2c:c1:dd:a2:19:d6:fb:02:c5:9d:0b:f4:fc:aa:02:b9:
         01:84:9c:a8:d0:a0:34:61:f6:59:68:09:fd:60:ec:05:f7:89:
         49:a7:d5:a3:6c:4e:dd:3c:4b:03:aa:4b:25:75:f0:c5:4c:49:
         2c:b7:55:06:99:6f:30:78:38:7a:d4:e0:31:46:04:c2:01:28:
         98:03:5a:39:89:10:8a:20:82:81:17:86:17:43:fa:81:51:35:
         0f:6f:a5:62:44:1a:c5:f0:13:5a:97:ec:cc:2a:6c:37:3a:6f:
         eb:b3:d3:92:ae:02:31:20:eb:35:ef:3d:2a:64:d4:08:f2:9b:
         a7:88:0a:4b:9f:18:98:ca:d8:81:fd:f7:06:d8:fc:3a:5b:a6:
         9b:2a:2e:2a:18:01:3e:98:9a:22:79:22:86:fd:3a:9d:57:cf:
         31:6e:90:8c:77:d2:40:1c:7a:48:db:44:51:07:af:97:a0:bc:
         b5:09:08:f8:88:e5:9c:07:3f:ed:d0:6f:40:f6:4e:02:13:1b:
         35:1a:d1:3c:f4:83:85:83:5d:72:e2:16:43:be:74:fd:cf:ab:
         e2:fb:1a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkOhFiBqQ9Ls9G3pWpECcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3
NjM1ZTAwHhcNMjYwNzIzMjAwMDQzWhcNMjYwNzI0MjAwMDQzWjAzMTEwLwYDVQQD
EyhiMTNhYWZhYTczOTFmOWQ3ZWVjNjZlZTE1YjA0NzIzODUzYjY0NTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbFJQu5rYOAjQSRcCJSRzgzhPhUk
oBSrLimPs0CmkgwJw73qnqtGKl9VdYnM6NHbL0kyM1OtcyCfDVgobKsI+yFMaAXf
QgI9J8WKU7zuSwlxjIP6fP0MPKdMhs+uCuxcGCxBBTYj20t0sPXY6w7R3bu0F7ob
HoaikIgErYxrwSsuayhpjF/D/QeMCHRdks6cgZ1Z1yiB8vZvx8L04GPL6kJUcwS2
q1SGn2/Bs5u80d39OxztVDv3yQ0fSjB1s4NaRUlYY3X+WKOEkH+mKU2xJ7eNOTP2
roCUbpN4KatHKL0hymn+8Tg8l5Obj2xi71XyrOD30jM5bY983Zoxmp9N6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE6r6pzkfnX7sZu4VsEcjhTtkUzMB8GA1UdIwQY
MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt
NzMxM2M3ZjNjYTNmLzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm
LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauMDq3wH
azWLwscOBfXuPPfIHhKtfWR4tdRGHJZTT+aa8Vd/oZwswd2iGdb7AsWdC/T8qgK5
AYScqNCgNGH2WWgJ/WDsBfeJSafVo2xO3TxLA6pLJXXwxUxJLLdVBplvMHg4etTg
MUYEwgEomANaOYkQiiCCgReGF0P6gVE1D2+lYkQaxfATWpfszCpsNzpv67PTkq4C
MSDrNe89KmTUCPKbp4gKS58YmMrYgf33Btj8OlummyouKhgBPpiaInkihv06nVfP
MW6QjHfSQBx6SNtEUQevl6C8tQkI+IjlnAc/7dBvQPZOAhMbNRrRPPSDhYNdcuIW
Q750/c+r4vsaRw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:07 2026 by rpki-client