Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File:                     GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier:          7dpx8d0cCB5Wnsl4T6o93rrZsrkTDMPiOUzKwCqlgRE=
Subject key identifier:   7C:58:FF:A8:28:82:54:2B:DC:CE:8E:D8:1F:E6:C4:75:D6:F4:76:CA
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer:       /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial:       019F93C9785A106A11830669EACC016AB056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number:          0B5C
Signing time:             Fri 24 Jul 2026 11:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:21 +0000
Files and hashes:         1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: U43z6nLUnX64HmiRc/q+G34CtiSZVPcH8gf+6oBLta4=)
                          2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:78:5a:10:6a:11:83:06:69:ea:cc:01:6a:b0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
        Validity
            Not Before: Jul 24 11:01:21 2026 GMT
            Not After : Jul 25 11:01:21 2026 GMT
        Subject: CN=7c58ffa82882542bdcce8ed81fe6c475d6f476ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:d0:54:c8:03:ab:ee:d8:66:9b:aa:1d:12:
                    bb:11:0f:8c:41:31:df:22:35:9e:d8:66:a1:12:7d:
                    fd:65:97:0b:49:aa:5e:b8:cc:5f:cf:81:ab:94:af:
                    d9:12:c9:d9:af:be:f2:62:2c:07:11:55:0e:91:d4:
                    2f:cd:2a:06:e6:25:9f:6f:83:7b:af:c3:0d:9b:4f:
                    96:02:c1:4a:c1:d9:85:34:ce:67:76:3e:a9:09:23:
                    f7:28:31:eb:fb:55:ac:d3:36:50:d8:d9:99:60:3e:
                    34:55:b8:3e:f6:06:ed:e3:3c:79:e2:2b:94:d1:97:
                    df:93:60:58:b5:1a:1c:83:43:65:52:81:99:9d:e7:
                    ff:37:39:a9:29:ac:8e:1b:89:a3:9a:b7:eb:a0:f3:
                    36:f1:3e:d9:b6:33:9d:fc:c4:e3:24:3e:87:a3:80:
                    47:47:f8:3d:d9:cc:9b:6d:f9:7e:72:40:00:f3:d6:
                    a5:d2:e8:e3:b3:56:36:f4:08:f3:ee:5c:78:76:5d:
                    48:32:84:c8:b0:81:7b:04:5f:83:1c:39:7b:0d:81:
                    cf:36:3f:8c:be:76:76:39:0e:3e:e5:db:67:35:d6:
                    75:d0:a9:69:3f:de:50:d2:0e:8f:ed:3a:34:f9:60:
                    ea:ca:5a:10:41:dc:1c:3d:87:a5:1c:b9:9b:71:1c:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:FF:A8:28:82:54:2B:DC:CE:8E:D8:1F:E6:C4:75:D6:F4:76:CA
            X509v3 Authority Key Identifier:
                keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d3:bf:e1:2c:ff:de:be:36:53:d0:bc:bf:b6:a9:ec:9f:52:
         09:23:45:4e:9e:9e:f6:c0:a8:6a:7f:fe:26:7d:94:ba:36:91:
         66:13:e1:6e:46:13:66:5c:f9:f9:d7:91:23:ee:83:1b:c1:6b:
         65:28:9f:94:9c:3a:bf:e1:de:d6:0b:64:ed:15:e9:c5:5b:f3:
         9d:d1:15:38:8f:86:7d:15:f0:69:bc:b2:a4:8f:ad:38:93:b7:
         49:48:04:c9:01:30:e6:ee:5b:3a:b2:48:0b:ce:bd:12:a1:ba:
         76:06:5e:5b:a9:b3:96:94:2c:6f:51:77:df:7a:5f:3f:b7:56:
         0e:22:34:26:b3:a1:9c:1c:49:f2:35:21:db:1c:35:bf:d4:05:
         a9:eb:16:fd:85:12:d8:f3:f7:a8:11:b1:3d:5c:95:61:6f:db:
         c6:18:f0:be:15:ec:37:eb:73:a0:8e:63:d5:32:72:29:aa:30:
         00:23:f1:2f:66:37:74:be:dd:06:fc:9b:d9:53:e7:b3:51:3f:
         1b:c5:27:4b:7e:e3:7c:69:92:35:b5:39:09:b4:69:5b:a5:41:
         a6:31:b0:10:84:67:c4:c4:fc:97:8f:c6:4b:73:68:be:d1:d1:
         06:b2:91:58:38:62:d7:7a:7a:e8:dd:9f:82:9f:a2:b3:19:7e:
         52:1c:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:23 2026 by rpki-client