Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File:                     gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier:          /3Xy8SMjz4Y/G1ETCo8UE3fAEaaPrk9O+nyH073u7bI=
Subject key identifier:   7E:53:1F:14:90:14:3C:FB:1C:E4:AD:8A:A2:1F:03:78:AC:BA:A8:12
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer:       /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial:       019F93FF782CD0BC0BDB985132261CFB1E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number:          16F2
Signing time:             Fri 24 Jul 2026 12:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:20 +0000
Files and hashes:         1: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (hash: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE=)
                          2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: ObbQIzcUJ/eymL1ifhwkGNpaeqq2JzEeW5URfNGyknI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:78:2c:d0:bc:0b:db:98:51:32:26:1c:fb:1e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
        Validity
            Not Before: Jul 24 12:00:20 2026 GMT
            Not After : Jul 25 12:00:20 2026 GMT
        Subject: CN=7e531f1490143cfb1ce4ad8aa21f0378acbaa812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:07:09:cf:9b:77:05:d3:c6:88:72:43:16:
                    82:fc:83:47:2c:e5:cf:08:e8:3c:4f:13:e4:92:d5:
                    d5:e7:14:ae:b0:59:fd:63:53:8c:13:65:ec:22:33:
                    73:de:fc:2a:3c:a5:90:5f:e6:4c:60:18:ae:38:35:
                    29:04:84:1e:b2:d5:dd:5f:48:99:e3:b0:d9:9d:1f:
                    f6:74:d8:70:9a:97:ba:9a:26:1b:71:83:07:20:f0:
                    20:d4:95:ca:21:b3:87:35:57:51:27:a1:86:a7:04:
                    6e:73:55:a6:7c:be:b9:73:bd:06:f8:dc:a3:1c:d4:
                    36:08:d2:21:98:89:58:f6:68:c2:e2:c3:79:68:7f:
                    9e:b5:65:e6:50:b6:8b:14:3b:82:0f:07:b5:94:44:
                    8b:ed:e2:52:0a:e0:71:c8:cb:26:52:8f:22:76:f2:
                    b3:e0:59:1f:ee:6d:f6:f5:9a:7b:ac:6f:2b:07:c4:
                    db:95:b8:6a:06:6a:56:9e:e2:55:1d:62:88:bc:96:
                    b8:59:8e:a0:ee:c6:94:7a:bb:db:62:67:b7:87:6f:
                    1e:32:07:26:cc:a6:8c:01:dc:a4:40:fd:2a:9e:fc:
                    ac:cc:e2:ec:1f:9c:fb:8a:2e:2a:03:a9:1c:41:5c:
                    04:44:43:2f:6b:65:73:e1:83:8b:c5:65:a1:3d:65:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:1F:14:90:14:3C:FB:1C:E4:AD:8A:A2:1F:03:78:AC:BA:A8:12
            X509v3 Authority Key Identifier:
                keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:88:8b:c7:5c:63:eb:5c:24:0c:16:ee:8c:a6:19:f5:28:62:
         9b:1c:89:13:1d:1e:7d:48:36:56:18:18:18:4d:f8:d4:b9:6e:
         07:c6:43:89:32:08:e4:39:62:1e:ed:ee:28:66:4d:42:d0:6b:
         cb:3f:9a:a6:93:2e:5b:47:e3:50:04:4a:40:bf:c4:bd:10:e3:
         30:ae:2d:a8:eb:9a:1d:4a:ca:45:b9:63:f3:38:5d:eb:e8:c5:
         63:ad:6a:49:50:37:dd:47:db:25:13:d9:bd:64:fb:e5:01:44:
         d1:88:59:ba:c6:2e:b0:c5:67:42:da:fc:b8:72:0f:8a:2b:63:
         9c:03:16:81:25:5c:af:c1:2a:a2:80:b1:1e:d0:dd:6a:70:72:
         5c:d3:39:30:d8:aa:ac:33:50:bc:78:d4:df:e5:36:3b:0b:85:
         d8:f9:78:33:dc:fa:c1:b2:19:68:cb:74:2a:f9:5b:91:b8:81:
         1c:8c:8e:46:52:ef:1b:90:29:c2:c4:b2:32:a6:b3:70:32:a2:
         b4:fa:cf:ee:75:68:b7:6a:3f:d6:14:76:56:a4:55:21:b0:40:
         e1:4c:78:79:89:46:fe:ca:ec:4c:73:2b:e9:f8:b6:e6:d7:97:
         8b:99:2a:96:5e:07:40:bc:e6:06:4c:34:d7:06:af:f1:61:b5:
         b5:15:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:02:46 2026 by rpki-client