Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File:                     gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier:          40TJR7WesWuT+tK9qXxRL/KNGdIjumSCwByWghbnXRM=
Subject key identifier:   2E:55:F0:10:35:64:44:3A:6E:53:80:E5:79:6F:63:4D:02:85:1A:18
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer:       /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial:       019F9248CEADFF144F1296B37B26F3240531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number:          06F8
Signing time:             Fri 24 Jul 2026 04:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:12 +0000
Files and hashes:         1: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: KblxuMqLdDJ/ZwBPABhnHbOsuS4gWh/BoTQo+/2euNo=)
                          2: ip_fTXtrV6Sb-Uz_23d2v2IhtQo.roa (hash: JShw05Zaz3LphiciGtK8MssYWo5XoUpv7n2tqAbN/Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:ce:ad:ff:14:4f:12:96:b3:7b:26:f3:24:05:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
        Validity
            Not Before: Jul 24 04:01:12 2026 GMT
            Not After : Jul 25 04:01:12 2026 GMT
        Subject: CN=2e55f0103564443a6e5380e5796f634d02851a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:7d:32:9d:ce:00:96:dc:ea:02:4f:db:87:
                    f9:44:e7:fd:20:54:d7:92:55:eb:f3:82:b2:ae:27:
                    bb:a6:e1:a9:85:e8:19:4b:8e:7b:00:f3:b5:ec:87:
                    f6:98:44:9c:a6:db:40:89:c4:7e:49:41:ed:1c:79:
                    4e:95:f8:e1:02:b5:67:ef:ce:56:2e:ca:6f:a4:7d:
                    b8:7a:8d:b4:cf:05:e4:f6:bc:f8:27:59:fa:8a:ce:
                    ed:4e:c4:d5:6f:0b:ab:27:bf:93:2e:05:ec:24:a2:
                    47:c8:69:95:fb:91:77:c2:86:a2:fc:a1:38:46:39:
                    32:5c:c0:2b:39:6c:18:7c:64:24:db:65:82:d3:8d:
                    20:6d:a6:f3:7c:32:78:98:67:6b:a9:61:af:65:ab:
                    67:35:94:36:76:77:ed:1e:8e:7c:10:c2:c2:d9:6a:
                    b0:48:60:77:d6:ef:07:c3:d4:0b:0d:ec:7c:2a:26:
                    67:a8:9c:eb:ab:54:cd:5c:be:71:01:80:01:64:5f:
                    c2:a0:3e:44:3e:32:6e:c8:7f:49:c0:af:8b:ca:cd:
                    5d:40:59:f6:64:72:15:87:94:8f:f3:19:d4:14:88:
                    74:98:4c:af:24:e3:06:02:d1:52:c3:91:e4:7d:31:
                    73:3e:ab:5e:fb:27:ae:6d:ca:fa:04:91:b8:19:be:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:55:F0:10:35:64:44:3A:6E:53:80:E5:79:6F:63:4D:02:85:1A:18
            X509v3 Authority Key Identifier:
                keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:f5:67:6e:55:4c:2f:3b:6d:80:65:05:a8:da:65:3d:91:
         88:1b:66:d0:90:67:53:48:41:e1:0d:ad:f2:e2:d8:f3:27:7f:
         a0:62:aa:90:c6:29:c2:81:bc:b1:cf:be:55:e4:d9:90:ba:a3:
         fa:ad:fd:20:b6:7a:ef:b3:20:01:00:fa:bc:11:92:e0:97:0b:
         5b:ee:e6:39:10:f5:4b:99:3e:0a:fb:e9:c5:d3:a4:11:19:a1:
         49:b8:05:42:06:67:2e:82:c7:ff:e1:0c:8c:f2:a0:56:ef:30:
         fd:c4:c0:88:e0:1b:5a:ea:d2:c3:67:0e:4d:80:bb:fc:87:1f:
         fd:f3:8f:dd:a3:d3:10:bd:fd:8d:63:3f:27:86:4f:46:6a:eb:
         f6:72:33:d2:f0:ac:0f:77:d4:90:ce:f2:30:10:bb:d5:38:93:
         e9:5c:cf:22:d1:e4:9b:39:19:73:7e:23:5e:e1:73:20:87:0f:
         d4:5c:5c:03:b1:5d:6e:d6:cf:7a:c1:78:21:0b:0d:95:79:bd:
         16:e3:8c:7e:8c:e6:91:7d:68:d4:f7:32:6f:e5:94:42:e2:15:
         5d:92:da:e0:f0:a7:95:00:4e:a8:5e:f5:b1:5d:19:ff:bf:8d:
         d3:31:50:18:7e:01:b7:eb:d6:e4:fa:72:30:fb:51:0f:6c:d1:
         a3:b3:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:29 2026 by rpki-client