Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
File:                     GpvZxsEozNlD9_dyKSLGb2a07dU.mft (raw, json)
Hash identifier:          ZeC6lMkBRIS3fa3sxC1AxOWaE6xiYt+sIEaEb6OS318=
Subject key identifier:   1E:85:59:81:4C:8A:84:2E:F5:1A:FC:55:B0:F9:1C:A3:ED:72:9E:99
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Certificate issuer:       /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial:       019F94372A1EFE524C0E56046ACB7FFACA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
Manifest number:          025C
Signing time:             Fri 24 Jul 2026 13:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:10 +0000
Files and hashes:         1: 1-oyfhNLyYue13tRFCKo0IPxmM24.roa (hash: oPm09IIbFaa5Ai2vo1N5k2H9XoBpkLq4SkDxgfWP1PU=)
                          2: GaCNO5uvEPZSSwfLA86l-W_3H7o.roa (hash: Q+4U2eLN8lYe4XRd9553vr9mNVPmss4+izmTxQVodwk=)
                          3: GpvZxsEozNlD9_dyKSLGb2a07dU.crl (hash: z+nqvuy2LLqcHriOKvMHZu2lhmHNurR66SyfMxj+sDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:2a:1e:fe:52:4c:0e:56:04:6a:cb:7f:fa:ca:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
        Validity
            Not Before: Jul 24 13:01:10 2026 GMT
            Not After : Jul 25 13:01:10 2026 GMT
        Subject: CN=1e8559814c8a842ef51afc55b0f91ca3ed729e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:66:6b:ae:ab:ca:68:a9:fa:c8:ef:f0:2c:
                    b5:b5:7c:aa:19:17:3b:b7:26:af:eb:29:ca:56:82:
                    73:99:0e:8d:f5:1b:3d:74:82:dd:68:af:b6:0a:f4:
                    43:66:b6:83:50:66:3f:ed:06:76:46:36:3f:56:b8:
                    d1:e7:30:85:1f:4d:b9:52:cb:b9:28:6b:5f:15:4a:
                    79:12:6a:06:62:98:72:c0:60:59:98:4d:43:81:0e:
                    40:f7:62:ce:fb:ee:ae:b9:a4:4d:be:dc:f9:51:60:
                    54:31:e6:05:2c:b5:3f:7e:47:ed:3a:b8:5c:c0:0d:
                    3f:8c:54:d0:1f:3f:d3:d6:f3:33:54:6a:05:b2:e6:
                    34:10:a9:80:34:50:36:ee:14:b4:36:f0:c4:5e:8b:
                    e6:17:d2:3a:11:f0:d5:89:bc:1d:a4:02:45:91:45:
                    72:26:59:76:35:78:e0:be:fa:b6:3c:bf:b2:f2:3c:
                    7b:39:a0:1e:b5:e3:bc:f1:d2:17:d1:32:df:58:e3:
                    67:1a:16:6c:b7:30:98:c9:85:73:3e:52:4d:c1:b0:
                    96:1d:ac:26:93:0c:5d:fc:f2:65:84:f9:c6:d2:16:
                    16:a9:d5:84:98:92:a1:e2:4b:f6:95:d1:0e:a2:2d:
                    f5:ce:75:ec:00:f6:8a:69:2d:a4:48:06:8a:08:e4:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:85:59:81:4C:8A:84:2E:F5:1A:FC:55:B0:F9:1C:A3:ED:72:9E:99
            X509v3 Authority Key Identifier:
                keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:66:d5:ed:3e:b6:11:cb:1e:68:4a:16:f2:68:68:42:8b:
         3e:8b:29:08:df:26:28:17:dd:8c:ea:34:7e:06:d0:c4:07:5a:
         1e:9e:34:8e:f0:11:22:a9:17:54:20:8d:2c:bf:76:7d:51:a5:
         80:d2:d4:ba:5e:cb:32:4d:8a:7d:3c:3f:1f:e9:6f:44:8c:fc:
         e5:54:7e:ff:4f:5a:74:b0:09:4c:42:60:f8:21:cb:23:02:f2:
         b1:19:19:e7:0c:87:2e:0d:9b:27:e3:4f:a6:c0:0d:97:b1:4b:
         11:d2:97:d2:f0:df:2d:da:ba:f0:ad:82:75:f1:72:2f:4a:71:
         07:c0:3a:0f:91:da:19:a2:91:b0:37:e6:1d:08:9b:03:fd:2f:
         a1:af:47:75:89:0a:db:58:20:7f:57:8f:94:9b:d0:7d:7e:43:
         39:27:23:a0:7a:ec:e2:6a:16:e9:0b:f5:d7:a8:9c:50:59:1b:
         56:91:4f:07:e8:62:3c:d9:04:74:b1:8e:11:19:2f:b1:a8:95:
         c7:10:71:17:bf:9a:18:26:28:ad:12:83:bb:9e:ba:44:4a:5b:
         1a:b6:1a:1c:5f:a3:8e:26:d0:78:30:dd:ff:89:d9:da:39:20:
         d5:2d:c4:1d:be:97:93:09:eb:f7:c2:6e:98:04:cd:f0:ec:e2:
         53:00:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:29 2026 by rpki-client