Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          UWMd0zYCTMAkIDnJ5H0XkH/OSgGwXO8mUuidgkbsOLI=
Subject key identifier:   F5:0B:5A:14:9C:C2:95:FA:74:A2:69:27:1D:19:68:BC:B1:F9:CE:DB
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       019F91DA37C8FFF40078B845478C4EFEC909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 02:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:25 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: 92MyNn/xK+btHa2acUhGMpxS2AhNpZi+qwqgPKxQs/c=)
                          2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:37:c8:ff:f4:00:78:b8:45:47:8c:4e:fe:c9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: Jul 24 02:00:25 2026 GMT
            Not After : Jul 25 02:00:25 2026 GMT
        Subject: CN=f50b5a149cc295fa74a269271d1968bcb1f9cedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:09:9a:a4:a2:82:1f:62:ba:31:16:31:58:
                    3b:20:89:46:9f:27:54:40:f8:6f:aa:3a:94:f3:9a:
                    9e:00:98:4c:be:08:df:39:af:cc:b4:03:d6:63:ee:
                    fe:c8:6d:0b:ec:91:22:20:20:ce:50:85:41:ad:db:
                    b3:de:03:22:05:78:5f:cc:43:4f:3c:a7:eb:0f:85:
                    57:ab:eb:85:2d:64:13:4e:21:d8:e8:32:51:97:f3:
                    8d:78:09:a2:27:35:32:fc:30:08:28:c6:50:7f:f3:
                    32:14:2a:e4:ef:70:7e:3b:b9:20:f7:e6:7c:59:11:
                    b7:5a:98:cb:2a:56:4f:c9:7a:b6:b3:e5:a0:e9:18:
                    a6:0e:42:ab:af:38:e5:83:4a:c4:32:aa:2b:aa:08:
                    3c:d0:87:d7:02:fa:1b:e1:d4:c0:3b:1c:dd:a6:12:
                    1e:a2:02:8f:74:4c:63:b9:ab:a6:b2:37:7c:6e:fc:
                    56:7f:2b:3b:68:15:63:72:14:cc:4d:ab:b8:c3:5c:
                    8a:d3:1b:30:a6:c9:1e:de:94:6a:10:8e:4a:e5:58:
                    0f:70:3a:9e:8a:62:f3:dc:a5:88:c1:56:f7:ae:e1:
                    28:6b:c3:df:26:0c:03:1c:03:05:92:5f:8b:f1:a1:
                    36:ba:3f:4c:8b:7c:cc:67:9a:bb:f1:14:39:b5:cb:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0B:5A:14:9C:C2:95:FA:74:A2:69:27:1D:19:68:BC:B1:F9:CE:DB
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:19:f9:b4:3f:1f:5f:54:28:ca:ec:75:b3:a0:61:6a:09:bc:
         41:80:b0:b2:cd:00:67:f9:cc:24:86:1a:53:66:38:a1:93:31:
         64:81:22:4d:92:25:ab:af:93:86:9c:70:79:f9:2b:b4:32:40:
         89:fe:cd:41:d8:e7:5d:34:7e:77:f0:3c:75:ae:4a:fb:e6:c1:
         b0:04:f7:e2:24:c3:a9:c5:e0:b7:cd:2f:a9:02:dd:3e:58:46:
         cc:5b:fa:4f:08:78:08:9a:84:3a:3c:03:12:a7:ea:ab:d8:a4:
         c8:20:57:0f:f8:94:19:00:e3:aa:aa:7f:8b:10:4f:e5:22:5d:
         7b:85:64:d2:82:57:0b:a6:3d:84:dd:8c:30:66:03:be:64:fe:
         37:ad:a0:22:83:f3:a0:4f:8e:0e:0e:b2:22:07:6a:dc:1f:37:
         cd:e8:6e:90:8a:be:68:98:f6:19:0a:d8:3d:bb:47:0a:9d:8f:
         57:3d:98:92:ad:0a:6f:7d:f1:f2:f6:18:07:4b:9a:3a:a0:aa:
         2d:5d:a9:2a:e3:d1:5b:0f:f8:8c:68:ac:da:12:26:88:d8:73:
         e9:43:6f:d4:af:37:b7:58:bc:d6:e7:09:22:f5:66:48:af:05:
         06:44:67:2b:5f:7a:17:63:58:62:ee:aa:1d:18:ee:9d:ec:5c:
         38:64:4e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2jfI//QAeLhFR4xO/skJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl
ZDY4YWYwHhcNMjYwNzI0MDIwMDI1WhcNMjYwNzI1MDIwMDI1WjAzMTEwLwYDVQQD
EyhmNTBiNWExNDljYzI5NWZhNzRhMjY5MjcxZDE5NjhiY2IxZjljZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXgJmqSigh9iujEWMVg7IIlGnydU
QPhvqjqU85qeAJhMvgjfOa/MtAPWY+7+yG0L7JEiICDOUIVBrduz3gMiBXhfzENP
PKfrD4VXq+uFLWQTTiHY6DJRl/ONeAmiJzUy/DAIKMZQf/MyFCrk73B+O7kg9+Z8
WRG3WpjLKlZPyXq2s+Wg6RimDkKrrzjlg0rEMqorqgg80IfXAvob4dTAOxzdphIe
ogKPdExjuaumsjd8bvxWfys7aBVjchTMTau4w1yK0xswpske3pRqEI5K5VgPcDqe
imLz3KWIwVb3ruEoa8PfJgwDHAMFkl+L8aE2uj9Mi3zMZ5q78RQ5tcubwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPULWhScwpX6dKJpJx0ZaLyx+c7bMB8GA1UdIwQY
MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt
ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0
LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRn5tD8f
X1Qoyux1s6Bhagm8QYCwss0AZ/nMJIYaU2Y4oZMxZIEiTZIlq6+ThpxwefkrtDJA
if7NQdjnXTR+d/A8da5K++bBsAT34iTDqcXgt80vqQLdPlhGzFv6Twh4CJqEOjwD
Eqfqq9ikyCBXD/iUGQDjqqp/ixBP5SJde4Vk0oJXC6Y9hN2MMGYDvmT+N62gIoPz
oE+ODg6yIgdq3B83zehukIq+aJj2GQrYPbtHCp2PVz2Ykq0Kb33x8vYYB0uaOqCq
LV2pKuPRWw/4jGis2hImiNhz6UNv1K83t1i81ucJIvVmSK8FBkRnK196F2NYYu6q
HRjunexcOGROOw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:18 2026 by rpki-client