Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
File:                     gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft (raw, json)
Hash identifier:          SUhr+n7rTl7neSeqmzNQCu3Dd7HKT2dheEgR63QTF+4=
Subject key identifier:   87:E7:A5:F7:8A:73:B8:D3:76:21:13:AE:F8:F9:20:97:4F:3F:19:04
Authority key identifier: 83:1A:9A:5C:62:7E:9C:EB:F6:C6:BB:D1:AB:22:93:6C:6F:AE:01:7E
Certificate issuer:       /CN=831a9a5c627e9cebf6c6bbd1ab22936c6fae017e
Certificate serial:       019F935AA4982C9F0F4DD8A31103BDB2782D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:18 +0000
Files and hashes:         1: gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl (hash: BJh9PrUhMOXqTrVgFAR89fBkIRtFHveC1dl6KhRc2X4=)
                          2: v5Q8h0Frf_fkKX96wbZrroiiUgw.roa (hash: xazWsb2KBZG8oZXdC4uirJOWCgIYpdumcjOq7MINQ1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:a4:98:2c:9f:0f:4d:d8:a3:11:03:bd:b2:78:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=831a9a5c627e9cebf6c6bbd1ab22936c6fae017e
        Validity
            Not Before: Jul 24 09:00:18 2026 GMT
            Not After : Jul 25 09:00:18 2026 GMT
        Subject: CN=87e7a5f78a73b8d3762113aef8f920974f3f1904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:54:0a:04:3f:5a:35:86:b7:ab:ab:6c:50:
                    60:3d:f5:fd:ab:47:41:9d:bf:60:d3:08:9e:01:ab:
                    02:02:cd:55:69:47:48:f0:77:91:54:f1:8e:c4:05:
                    75:11:f1:22:2f:51:67:02:7a:b9:3e:07:da:a0:09:
                    11:75:7f:e1:a8:72:14:51:65:45:f7:39:82:09:46:
                    18:03:b7:8a:da:5a:77:6b:e1:ba:f6:67:93:b8:4f:
                    21:3a:84:d7:63:a3:0d:b4:d7:f9:40:95:52:4b:be:
                    7a:65:6c:c4:91:24:cf:03:88:de:f0:89:64:1c:8d:
                    7e:9a:68:03:63:b6:6d:ae:f2:f5:52:c2:68:34:63:
                    d0:b4:b0:9c:32:91:31:90:e5:08:10:0e:37:fa:64:
                    3c:5a:1e:15:61:89:d3:eb:e8:7e:3e:38:ee:e5:f0:
                    3d:49:52:8b:ac:f1:77:3f:f6:dc:9a:ae:5c:89:f7:
                    14:62:d7:bd:a5:02:a2:a1:39:38:6f:f5:f9:78:a7:
                    b6:2b:65:21:fd:ba:58:96:1c:45:86:6a:9f:f7:f1:
                    b3:f4:74:e1:02:b1:d8:85:95:79:75:7e:9b:a8:86:
                    ba:1a:86:d4:79:f2:59:dd:6a:a3:b4:d3:76:c3:91:
                    5e:2c:2d:80:08:3f:16:9c:59:fb:ba:2d:40:58:b1:
                    e0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E7:A5:F7:8A:73:B8:D3:76:21:13:AE:F8:F9:20:97:4F:3F:19:04
            X509v3 Authority Key Identifier:
                keyid:83:1A:9A:5C:62:7E:9C:EB:F6:C6:BB:D1:AB:22:93:6C:6F:AE:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/gxqaXGJ-nOv2xrvRqyKTbG-uAX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:3f:91:d7:18:7b:83:7d:6f:08:c5:7c:07:f8:9b:b0:29:
         8b:c7:d6:21:17:62:d9:9b:6b:eb:2a:2a:af:a1:42:71:ce:ab:
         03:8d:d9:f9:ac:1f:35:4c:af:92:04:71:1f:3a:d1:9f:b6:37:
         1d:10:6a:6c:21:2f:a1:fb:f4:84:1c:da:9b:70:ae:01:5e:40:
         e6:78:f1:db:b6:f3:36:98:3e:a1:98:46:6f:45:d3:ef:32:72:
         a0:58:c3:ea:06:9f:ab:73:d5:61:25:eb:1e:34:8b:9a:7d:0e:
         18:ba:78:2e:d8:d3:57:5f:d4:2b:9d:fb:8d:b2:6f:f8:b7:80:
         3c:ca:e9:24:ff:50:e1:f4:29:53:c2:60:d3:c4:b4:74:70:08:
         f9:99:21:9d:ab:87:de:97:9a:b6:59:62:2b:3b:d3:ea:4b:15:
         de:35:46:2e:f0:f3:da:73:b4:7d:4e:9e:5a:54:10:19:dd:de:
         95:e3:e8:2c:c5:b4:3b:42:17:73:7b:05:7d:fa:2e:b4:32:e6:
         bc:7d:bc:11:01:5b:1f:fe:5d:26:d8:e5:3d:44:d3:a2:86:98:
         fd:51:94:cf:d9:ee:7a:01:63:3c:97:8b:d3:64:1b:a1:24:0e:
         84:86:79:18:6e:ea:cb:81:df:53:8c:c0:04:9c:e5:86:d5:d7:
         a3:d6:9a:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWqSYLJ8PTdijEQO9sngtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMWE5YTVjNjI3ZTljZWJmNmM2YmJkMWFiMjI5MzZjNmZh
ZTAxN2UwHhcNMjYwNzI0MDkwMDE4WhcNMjYwNzI1MDkwMDE4WjAzMTEwLwYDVQQD
Eyg4N2U3YTVmNzhhNzNiOGQzNzYyMTEzYWVmOGY5MjA5NzRmM2YxOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBhUCgQ/WjWGt6urbFBgPfX9q0dB
nb9g0wieAasCAs1VaUdI8HeRVPGOxAV1EfEiL1FnAnq5PgfaoAkRdX/hqHIUUWVF
9zmCCUYYA7eK2lp3a+G69meTuE8hOoTXY6MNtNf5QJVSS756ZWzEkSTPA4je8Ilk
HI1+mmgDY7ZtrvL1UsJoNGPQtLCcMpExkOUIEA43+mQ8Wh4VYYnT6+h+Pjju5fA9
SVKLrPF3P/bcmq5cifcUYte9pQKioTk4b/X5eKe2K2Uh/bpYlhxFhmqf9/Gz9HTh
ArHYhZV5dX6bqIa6GobUefJZ3WqjtNN2w5FeLC2ACD8WnFn7ui1AWLHgtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfnpfeKc7jTdiETrvj5IJdPPxkEMB8GA1UdIwQY
MBaAFIMamlxifpzr9sa70asik2xvrgF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3hxYVhHSi1uT3YyeHJ2UnF5S1RiRy11QVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2Et
ZDYwZjQ0YTkzNGIxLzEvZ3hxYVhHSi1uT3YyeHJ2UnF5S1RiRy11QVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2EtZDYwZjQ0YTkzNGIx
LzEvZ3hxYVhHSi1uT3YyeHJ2UnF5S1RiRy11QVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMw/kdcY
e4N9bwjFfAf4m7Api8fWIRdi2Ztr6yoqr6FCcc6rA43Z+awfNUyvkgRxHzrRn7Y3
HRBqbCEvofv0hBzam3CuAV5A5njx27bzNpg+oZhGb0XT7zJyoFjD6gafq3PVYSXr
HjSLmn0OGLp4LtjTV1/UK537jbJv+LeAPMrpJP9Q4fQpU8Jg08S0dHAI+ZkhnauH
3peatlliKzvT6ksV3jVGLvDz2nO0fU6eWlQQGd3elePoLMW0O0IXc3sFffoutDLm
vH28EQFbH/5dJtjlPUTTooaY/VGUz9nuegFjPJeL02QboSQOhIZ5GG7qy4HfU4zA
BJzlhtXXo9aaxg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:07 2026 by rpki-client