Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          smjJaRMPE2SuJwJR2herPwO6IxoAH1A27sFXNny5tGs=
Subject key identifier:   ED:AC:A3:62:D1:1E:A2:CD:58:FB:AF:F8:E6:35:A1:92:AE:51:F9:E1
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       019F935BB1B7C51260EF1194C63299BEC309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 09:01:27 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:27 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:27 +0000
Files and hashes:         1: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: PPBHD829b55HNK+46J6HpjYir5zQKShu+BL1Tt36J0w=)
                          2: sl_qn_gMelOUS3XMJODn5T8W54w.roa (hash: MlmmeycjTjJos3jc0JF/rEVajpy499lBCd4bHXbugOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:b1:b7:c5:12:60:ef:11:94:c6:32:99:be:c3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Jul 24 09:01:27 2026 GMT
            Not After : Jul 25 09:01:27 2026 GMT
        Subject: CN=edaca362d11ea2cd58fbaff8e635a192ae51f9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:d4:ff:32:15:5c:62:5e:5f:f1:2f:b7:76:
                    87:37:98:94:04:63:ee:21:45:6a:42:1d:d3:ef:e3:
                    90:dd:de:5d:a6:42:8f:7e:dd:f5:1b:af:14:e7:da:
                    41:cc:90:9c:6e:08:04:89:ad:34:05:e6:0b:ab:11:
                    ba:15:4e:6a:1e:a6:c7:92:7f:bd:aa:4f:d2:a9:a8:
                    6e:11:bf:f6:07:54:be:ca:91:43:8b:47:e4:bd:0b:
                    77:8a:58:96:2b:ba:11:94:91:12:41:49:aa:7f:73:
                    67:4a:57:46:d6:4e:f7:19:c0:d3:a7:b0:85:41:a2:
                    93:11:eb:15:20:32:7e:82:73:1b:47:b4:d3:6b:65:
                    18:83:1f:ec:70:13:75:4b:98:1d:4b:ec:87:a0:d0:
                    3e:64:b7:a7:d7:91:19:47:0b:cb:95:31:06:18:10:
                    24:28:1c:27:69:c5:54:7a:64:d6:e2:89:0c:da:97:
                    b1:89:19:b3:ef:8e:07:df:61:11:c8:4b:7e:d4:89:
                    43:35:ea:77:a0:0c:9c:0a:ea:31:bc:51:67:54:cf:
                    d0:de:0e:a6:2b:3c:1c:81:51:b1:27:64:68:e6:16:
                    ba:91:ea:97:41:4e:cb:af:cd:cd:68:d1:2a:db:f4:
                    f9:be:c3:f3:50:b9:28:f8:1d:52:66:5f:73:3e:c7:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:A3:62:D1:1E:A2:CD:58:FB:AF:F8:E6:35:A1:92:AE:51:F9:E1
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:63:b6:b3:7c:a9:f5:19:96:e5:a2:1e:48:88:96:14:3e:d9:
         e7:b6:44:1e:bc:c8:3c:7e:4e:d5:a3:28:e0:19:fd:02:ac:d4:
         0b:c6:c3:1e:13:34:ca:1b:86:62:3c:cd:0e:f2:7b:80:b8:8e:
         3a:2a:c0:56:b0:f9:3e:59:d3:54:14:a5:ba:b4:06:f1:70:6a:
         79:8e:ab:95:85:85:06:02:2c:1d:58:92:6a:9c:1f:2d:9f:6f:
         b1:09:f3:5b:05:52:44:29:3b:d7:0d:70:5a:6a:13:0c:8f:fb:
         dd:19:0a:30:17:47:cc:60:a4:df:67:8e:4f:36:f7:b5:9f:ce:
         49:69:57:19:cf:0c:bb:af:4e:b1:7f:04:ed:16:ed:2c:ed:4c:
         bf:4e:01:4b:e8:94:74:01:d6:d5:8d:f0:75:7d:99:59:56:5a:
         3d:4d:65:b6:89:68:7a:ee:e3:7f:3a:9f:0c:52:fa:af:34:44:
         90:a5:39:b8:02:24:00:52:31:f8:dc:38:a6:69:13:47:e7:ed:
         eb:d9:66:f5:4a:eb:8c:51:2c:c6:25:8f:58:ad:73:55:3c:e4:
         1d:db:48:4f:16:84:96:7e:f3:92:ed:9a:a2:c1:cf:ce:a3:fb:
         b5:b7:cd:95:5c:7f:13:d8:66:c9:fd:76:6f:c7:a5:df:3d:be:
         e2:81:4c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:12 2026 by rpki-client