Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File:                     g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier:          TySE9w7ZslfMHBag8Y9Wfg3X68KGHfPYshPcBj+Nst0=
Subject key identifier:   0A:02:ED:E2:EC:ED:1B:2F:A6:FE:40:10:F5:BA:2B:78:66:94:22:56
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer:       /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial:       019F91A394E42C4C8F0117E511A324EB2C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number:          11D6
Signing time:             Fri 24 Jul 2026 01:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:44 +0000
Files and hashes:         1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
                          2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: pPdTdOaw2pKS+3KGk9lRw5mOZaCp2/ynyt4PKcaygR4=)
                          3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
                          4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:94:e4:2c:4c:8f:01:17:e5:11:a3:24:eb:2c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
        Validity
            Not Before: Jul 24 01:00:44 2026 GMT
            Not After : Jul 25 01:00:44 2026 GMT
        Subject: CN=0a02ede2eced1b2fa6fe4010f5ba2b7866942256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:97:a2:6b:46:05:92:97:6e:aa:10:38:b4:
                    81:7b:be:a2:54:ae:45:b0:dd:fb:6d:cc:72:21:c5:
                    7d:bd:d6:cf:66:03:bf:d5:78:de:38:f7:13:37:bd:
                    46:43:36:44:d3:66:a1:d5:2c:52:a8:15:19:4f:62:
                    0b:7e:17:db:af:1a:ac:68:99:8a:d2:64:78:d8:e4:
                    bd:54:85:57:6a:30:74:ee:46:ef:05:4e:77:b0:bf:
                    9d:c7:6a:cf:20:ef:99:c2:54:94:b9:3d:df:8a:c2:
                    2b:3e:e9:88:91:af:26:5f:1c:2c:1f:9e:1f:c8:15:
                    9e:0a:a2:cc:72:34:cc:9c:7e:54:c4:27:f1:e6:2a:
                    14:a8:74:49:59:80:75:79:4b:e7:a3:a7:45:02:7c:
                    57:79:4c:5b:7a:f2:c6:bb:f8:a6:2d:b2:bb:25:85:
                    8a:ce:40:a4:79:bc:ac:5f:15:c3:3c:6a:57:93:73:
                    a1:1e:9d:2b:ca:da:18:ea:56:41:e3:e9:78:2c:6b:
                    8e:8c:25:f4:5d:32:23:11:e9:c8:e8:ab:ac:2b:a8:
                    29:ce:b3:d3:8b:c8:a8:08:ee:5d:73:b1:7a:31:f9:
                    46:bf:ce:41:9e:f8:37:72:50:36:b0:4e:bf:2a:04:
                    85:fc:6b:aa:bb:c2:b8:ba:1c:7d:01:01:cc:ed:10:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:ED:E2:EC:ED:1B:2F:A6:FE:40:10:F5:BA:2B:78:66:94:22:56
            X509v3 Authority Key Identifier:
                keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b0:f8:ee:c2:1c:40:72:5c:3d:d8:83:dc:1b:11:1e:cd:fc:
         23:aa:81:3e:a3:66:f4:f2:b0:81:51:53:eb:6f:18:6d:45:1a:
         f9:23:55:4a:72:43:43:84:36:16:0b:54:35:56:fe:c4:b5:de:
         3f:d4:b4:5f:6e:63:b5:5a:85:6d:48:99:0f:08:89:34:26:13:
         18:b8:2b:60:5d:4d:02:d1:b1:e8:a4:db:96:27:ac:aa:f5:15:
         60:ef:23:f9:c7:54:cb:ed:39:c4:3e:83:92:b1:ab:03:5b:73:
         59:f5:5c:4d:79:3f:fd:92:a2:09:93:13:6b:7f:ee:a2:a3:ab:
         7c:61:57:5d:78:8e:fc:f7:6f:80:34:ee:19:f8:4a:35:c6:bb:
         10:ba:22:88:5f:1e:37:e6:52:e5:ff:ae:d2:18:ca:d8:44:b5:
         a8:02:65:67:5c:cd:a6:2e:8b:a1:a1:8e:50:6b:e5:e0:00:16:
         56:1a:69:43:14:f0:fa:03:20:b0:be:6a:3b:d6:3c:aa:bc:b8:
         d6:46:7f:28:3e:b5:99:22:98:71:c8:5e:ab:b1:43:b5:37:c9:
         7a:b3:7a:bf:0e:4c:7f:60:7b:85:64:af:a6:d7:0f:46:bb:7b:
         43:f3:49:99:9b:67:83:92:df:14:3b:2c:18:7c:84:d4:0f:60:
         96:3a:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:48 2026 by rpki-client