Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
File:                     GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft (raw, json)
Hash identifier:          Udk0Sft1vzYr5UNKHgmdLFhLjx2PIgbhUru0ac5Fl2E=
Subject key identifier:   84:55:26:03:A5:4C:7F:85:B6:3D:29:1C:55:AB:D6:1E:7E:9F:4E:04
Authority key identifier: 18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
Certificate issuer:       /CN=187091cfccc327e62a63b1b743acef32a506554f
Certificate serial:       019F916CDAC96543E3EF09D0ABB7995B0C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:57 +0000
Files and hashes:         1: GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl (hash: 1FZDEAYrqA8Bew3LTmRibk/L0THw32SlDK3t/+avtp4=)
                          2: ITQ_fLmxy4DjGBL45vz2QEMqGJA.roa (hash: HfggULB+36iVP97JMDur3JZVIMvMcNZa9ngwLysPNW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:da:c9:65:43:e3:ef:09:d0:ab:b7:99:5b:0c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187091cfccc327e62a63b1b743acef32a506554f
        Validity
            Not Before: Jul 24 00:00:57 2026 GMT
            Not After : Jul 25 00:00:57 2026 GMT
        Subject: CN=84552603a54c7f85b63d291c55abd61e7e9f4e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:73:ac:47:36:4d:a5:59:96:b4:2f:2f:8f:6e:
                    c4:54:71:11:b2:78:94:0f:89:ab:f1:4e:c7:fe:39:
                    0f:fd:91:a1:4e:12:23:5e:30:ee:63:74:82:60:3a:
                    48:88:ed:55:6e:7e:d5:06:37:e3:13:e7:7c:1f:16:
                    ca:0d:f2:6d:62:98:86:1a:3b:c8:3e:e5:8c:67:ac:
                    5c:b0:23:8a:5e:9c:b5:ea:6f:68:67:fb:ea:f6:9a:
                    86:ca:21:be:e1:d1:8a:ea:8b:7e:21:b0:d7:80:5a:
                    11:91:5e:3e:f9:e0:cf:29:21:bd:92:1e:cf:24:94:
                    b8:d1:ce:cb:77:e6:e8:60:b8:96:e1:92:b5:ed:5e:
                    42:05:25:65:36:56:9c:e0:61:22:93:61:2c:e3:19:
                    79:7c:0a:79:ba:8b:8f:58:3f:f6:11:b5:09:32:07:
                    26:a2:2e:40:bd:5e:8b:02:66:66:1e:97:16:15:be:
                    17:4a:96:cf:7b:4b:f7:26:e9:0e:17:6e:5d:50:2c:
                    ed:72:5d:72:ba:da:e9:db:0c:5f:94:2a:63:b0:89:
                    66:5f:74:ef:61:3b:4b:c9:81:28:cc:de:a7:dd:a8:
                    04:51:d1:86:b5:0e:0d:96:4c:dc:36:6f:88:35:80:
                    0b:ed:c2:ba:b4:a3:6a:43:39:cc:18:6f:64:bd:45:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:55:26:03:A5:4C:7F:85:B6:3D:29:1C:55:AB:D6:1E:7E:9F:4E:04
            X509v3 Authority Key Identifier:
                keyid:18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:36:cd:a1:4d:16:ef:ad:b2:0a:99:fa:88:c1:98:54:b7:86:
         45:45:e8:59:80:41:2e:49:73:c4:f1:01:60:84:65:fd:3e:9a:
         6e:25:87:46:ac:2d:10:71:c2:86:77:23:32:a2:79:96:5d:5e:
         e3:b7:6f:7e:da:68:40:50:ca:02:61:9b:95:d5:0b:5a:a7:74:
         6e:80:8a:cd:a5:84:1f:bf:c8:9e:34:21:3e:4d:c7:cf:f1:b2:
         b6:e6:9b:82:f5:27:ba:99:dd:7b:57:24:6e:d9:12:46:ab:bd:
         ad:4d:94:34:92:b9:aa:0a:d8:a9:ec:8c:28:9b:3c:3f:27:e6:
         76:01:65:50:01:d7:15:16:c6:4e:c5:15:74:6d:a7:58:6a:4b:
         ee:0a:62:c8:28:aa:74:73:a9:f7:76:ac:8c:a1:b3:0c:c7:06:
         19:71:64:0f:4e:e0:b9:5f:39:b4:52:ba:d7:7a:d7:33:f6:26:
         a3:53:14:0b:31:07:a9:32:cc:5e:51:25:10:36:66:3a:96:76:
         5c:d8:80:dc:50:84:50:46:49:e5:bd:c4:c8:9d:0b:fb:24:33:
         e9:01:46:6e:cf:65:fb:3c:b6:cf:96:bd:7b:48:11:24:b8:43:
         1a:ae:c8:7d:a2:1e:2d:83:48:1e:6f:51:4c:57:27:a9:59:76:
         d2:8c:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:36 2026 by rpki-client