Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File:                     GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier:          KW8otlN18k2IH4DNMri32VEMx5vHoJdO+TdI9nu1cuk=
Subject key identifier:   A9:D9:27:B6:83:48:E3:28:5F:15:50:C1:D6:1D:FD:A5:F0:2A:98:F9
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer:       /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial:       019F921150469DCE5A10EB574483C8FA6462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number:          19ED
Signing time:             Fri 24 Jul 2026 03:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:35 +0000
Files and hashes:         1: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: S52OpNWFtnz5U+Bw4/qY29ptO2FnD+d9rEZ44eivvus=)
                          2: Gll7cy-kn16EuQChyjd5kxJVar8.roa (hash: rAFOy1sEoOQYL6xEmxiSqkBDTDW6pzDgHlfqHYvviWQ=)
                          3: NbBpfQGsHkSsujFNmwYaCRxCh_M.roa (hash: JJcHtuXrwzjuiCppA+Z6JQDHbPH63cB9zvzIpG1UH3U=)
                          4: VG14tR93nrCtNgYNhIfw5ASK5b8.roa (hash: Tcz678dunbruTrkYTbdv98GThScQ5vNKS1fF8cX93JE=)
                          5: em-wCAvCHoRc_h-xPjZ1v-f-PJU.roa (hash: PgYRRROxFEoYAKT7r9ipsKpTh4ssV5nRRFlWjSGCkb0=)
                          6: jEjMvlS0E3-JaxbZrtShhCPLCJ8.roa (hash: cNkIwV71ok/w0KC8pKnGuUP130XxoF34h2rE4wB3M+0=)
                          7: q9_YDIRra6aFcMc0ByB5ssvbp7c.roa (hash: Aqh+b9LnXWSFB27cNYCIor6EI4XZue2eU7FkAjMEl08=)
                          8: s0K3J9Hfz8f1sftMuRidCQOAQhk.roa (hash: 1kkEqiEjaCO/BAeUP7qyZJOwB2fegbQON/HmveFaeBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:50:46:9d:ce:5a:10:eb:57:44:83:c8:fa:64:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
        Validity
            Not Before: Jul 24 03:00:35 2026 GMT
            Not After : Jul 25 03:00:35 2026 GMT
        Subject: CN=a9d927b68348e3285f1550c1d61dfda5f02a98f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:70:3f:e0:dc:84:b7:5c:c3:cb:c4:23:bf:
                    db:fe:99:75:2f:6d:0c:b0:5e:b2:87:22:0b:52:ec:
                    64:f6:be:aa:34:49:e6:04:7a:2f:c6:64:ca:65:6d:
                    9e:d9:54:7e:7d:2e:19:c3:d6:f8:62:f2:e1:75:60:
                    a3:a1:18:17:74:4a:cf:da:bc:3b:09:be:40:96:ae:
                    fd:ca:e3:2e:3c:8e:5b:6d:25:ee:6a:2b:83:58:61:
                    e2:3b:ba:f5:14:7f:90:aa:b0:1d:dd:9d:41:b6:10:
                    b3:6d:99:be:1a:a2:45:c0:a4:6c:7c:4b:95:be:7d:
                    65:b5:f1:6f:6b:65:a6:82:af:11:89:dd:0e:7b:0a:
                    f6:5a:ae:18:65:2d:4c:48:3a:0c:89:c9:aa:12:41:
                    d7:14:60:6d:d2:75:72:c2:f3:c4:65:b7:e9:a5:de:
                    c2:b3:68:dc:94:d0:59:f4:98:38:33:ce:ef:99:db:
                    d1:de:6d:cc:93:50:39:b6:9a:47:76:49:fb:c9:99:
                    90:8c:11:f0:a8:da:0e:38:6f:ac:f0:ae:2e:23:5a:
                    fe:e2:6e:d0:1d:db:0a:05:10:b4:37:84:aa:d3:e8:
                    2f:57:05:39:9d:b3:52:ae:14:77:fb:73:80:dc:f2:
                    e2:e8:ba:5c:06:1c:21:d0:3b:6f:aa:39:38:05:05:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D9:27:B6:83:48:E3:28:5F:15:50:C1:D6:1D:FD:A5:F0:2A:98:F9
            X509v3 Authority Key Identifier:
                keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:14:43:7e:c2:9f:66:4c:61:e4:d0:4e:07:24:a0:68:c0:e0:
         31:88:88:6c:62:cc:e4:64:db:28:7b:74:81:ef:2f:6d:c9:62:
         c1:2d:69:f7:a1:94:25:01:fa:52:f4:e9:09:19:e2:ae:1b:61:
         f8:06:6b:aa:b9:6e:3e:2e:21:01:db:2c:0d:bb:13:d8:e4:e1:
         94:d2:f5:fa:1d:42:50:34:ef:02:79:a4:8e:c9:b6:76:3c:d6:
         71:4f:6e:e1:fe:6a:4e:ba:40:d6:34:85:ab:ea:84:b2:42:16:
         5f:f7:60:d6:4e:03:a9:1f:3d:a2:e4:d9:85:30:0c:05:e9:06:
         0e:25:db:6e:7d:2c:56:f7:61:18:d9:77:fb:bb:6d:d3:78:af:
         84:b1:9f:27:ff:fb:fb:e2:b3:61:6f:42:bd:09:a9:45:56:81:
         90:80:42:2c:b8:80:8f:fc:d8:35:33:ee:50:3e:28:6f:7d:50:
         1b:66:17:9c:5e:4d:5b:ae:49:91:02:e8:d4:28:e6:1e:f4:54:
         03:76:f5:be:77:c3:9a:95:a9:63:2a:0b:c9:fc:17:ea:95:0f:
         11:bb:da:63:01:99:67:0b:54:cb:37:a0:4f:be:10:ac:d8:81:
         68:7c:55:81:2b:be:a6:dd:16:ef:76:bb:f2:19:eb:55:18:28:
         61:fb:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:17 2026 by rpki-client