Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          JShLAjR+n6DiWyC71hWTq+UAKdUUdZE9v7bMN2VD5sE=
Subject key identifier:   15:93:5E:E3:46:1E:E4:5F:3D:64:E3:DE:31:B6:07:60:0D:46:54:21
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       019F9135E44C2F2A32D41B9467E7DA2688A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          0B0D
Signing time:             Thu 23 Jul 2026 23:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:55 +0000
Files and hashes:         1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: GgqOxHHWsmmuu2oCnRYCAPwgWtbgg8eWv+5ezIIQ6mk=)
                          2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:e4:4c:2f:2a:32:d4:1b:94:67:e7:da:26:88:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Jul 23 23:00:55 2026 GMT
            Not After : Jul 24 23:00:55 2026 GMT
        Subject: CN=15935ee3461ee45f3d64e3de31b607600d465421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:68:d6:b5:f7:2f:7c:bb:19:8e:51:94:db:
                    0e:c8:b0:c8:41:55:b5:c7:9c:06:5f:ba:d3:17:fb:
                    47:ac:25:48:ec:50:75:db:75:2a:66:52:79:4a:e8:
                    7b:f0:38:80:26:21:59:7e:ab:c7:9e:18:e5:2b:49:
                    78:e7:f2:37:1a:74:c8:3d:67:0c:b1:c9:bc:7b:af:
                    a9:58:9f:74:3c:77:1a:44:fa:7d:6c:52:90:55:80:
                    6a:d0:38:4a:d0:27:04:79:33:11:87:3e:46:0a:69:
                    91:71:cd:6f:b3:b6:64:9a:05:01:24:f4:be:bb:4c:
                    b0:c0:3c:fd:6a:78:93:b0:2e:5b:f3:95:25:32:58:
                    63:78:32:eb:85:f3:35:50:9c:2a:41:7e:4e:c9:fc:
                    bb:f5:36:15:aa:d0:d4:15:6d:ce:77:80:72:fc:8f:
                    35:b8:44:9a:d7:db:3f:4e:44:cb:d0:28:1b:0b:a6:
                    17:f7:d3:4f:a4:f9:e4:6b:ea:76:0c:67:d8:cc:27:
                    ae:d6:e5:cc:b2:29:08:a9:da:61:cf:ea:d1:d9:8e:
                    00:b3:f8:ce:36:05:e9:bb:7d:05:75:f4:bd:a0:43:
                    09:d6:e4:4b:20:43:ef:b5:cd:54:aa:a4:6d:56:51:
                    aa:72:72:e8:09:db:6e:04:90:11:9c:0f:a3:67:34:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:93:5E:E3:46:1E:E4:5F:3D:64:E3:DE:31:B6:07:60:0D:46:54:21
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a5:b9:fa:f4:bb:c9:cd:c8:91:f9:61:a7:fe:d8:94:64:1f:
         6f:3c:cd:02:a8:26:5d:cc:d1:15:09:a4:b8:64:0b:57:dd:fe:
         44:b7:0f:33:8c:44:c8:78:bb:8e:87:d8:c4:c6:23:51:f8:49:
         ee:e2:98:76:d3:6f:07:20:9a:54:da:14:f9:7d:4d:f1:80:bf:
         f2:8e:9c:dc:24:26:f3:b7:b4:22:2c:68:25:c7:ac:d4:cd:66:
         f2:14:5f:9a:b6:e0:85:c0:7b:0b:35:7f:5b:cd:97:9f:4b:0d:
         60:d0:39:26:34:81:e2:2e:89:ce:45:61:d4:d9:45:68:79:cd:
         b2:9c:35:8d:e5:37:5e:c1:39:f3:3a:76:69:42:ee:3c:55:c6:
         18:01:64:33:8c:11:4a:71:9f:2a:b4:c7:fb:da:d0:8a:44:ca:
         17:98:37:3b:88:ee:e3:62:dc:e2:d0:80:4f:33:d2:9b:3a:c7:
         98:1c:cc:df:45:cd:13:bb:ca:4b:50:f2:ec:5c:a2:ef:9b:a7:
         3d:c2:c5:b4:82:4d:7c:f5:76:f2:32:63:eb:ac:c3:e4:b0:08:
         5d:e5:b3:16:b0:54:06:9e:4f:b1:a6:93:75:41:7a:52:6a:37:
         aa:d2:fa:14:ad:27:11:b5:11:a4:59:91:83:ed:90:6b:69:97:
         ba:2d:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:39 2026 by rpki-client