Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
File:                     gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json)
Hash identifier:          H15LlrOntIVOgwG7C14ubraSYZEUio8YJZ0l3Hf1x+Q=
Subject key identifier:   08:97:5C:80:B7:EA:AA:04:8A:F8:8A:01:47:16:59:ED:4E:13:3D:9D
Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
Certificate issuer:       /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Certificate serial:       019F93C883FD721740DB3A5473E53BD6A140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
Manifest number:          02BC
Signing time:             Fri 24 Jul 2026 11:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:19 +0000
Files and hashes:         1: 4L-Jua-2JEh-ZF5izuHQE1QIgHg.asa (hash: /hw923UzyAllXo5sTey8z8qOf1YJkIdoRHUKHmoEep4=)
                          2: _d-CFEMcXTCBxMYYwaRIA3_8Mj8.roa (hash: wJlrxRnPc85yw0LRsjdXZscmyYO4/G8JoNKPUPsic7k=)
                          3: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: iIzLN+uqZEDfnLzdPzWj1M5xGvVBwMlXKyt3wA3xPIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:83:fd:72:17:40:db:3a:54:73:e5:3b:d6:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
        Validity
            Not Before: Jul 24 11:00:19 2026 GMT
            Not After : Jul 25 11:00:19 2026 GMT
        Subject: CN=08975c80b7eaaa048af88a01471659ed4e133d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b9:d2:c5:82:8a:25:1a:87:a6:96:71:ae:47:
                    95:2f:d3:92:bd:cb:5c:f2:a1:fa:2a:12:56:1c:40:
                    2a:59:54:11:fa:a0:cc:dc:32:12:bc:25:45:c9:3a:
                    b0:4e:f8:10:9f:05:fc:c7:af:bd:69:dc:f6:4a:be:
                    bd:66:33:49:8e:65:33:c0:df:c1:5d:f7:57:f6:77:
                    fe:c8:e5:86:3e:34:18:e8:91:ee:28:5e:a0:03:79:
                    cf:b9:8c:b6:03:ac:9e:2a:87:c6:20:ed:a3:27:e7:
                    53:f4:53:a5:33:48:67:69:bd:6f:f2:11:6d:cf:99:
                    25:c9:05:37:1c:5d:84:a5:6e:2b:8e:67:04:df:f2:
                    6a:3c:f1:d1:04:9b:d3:31:47:24:c0:05:fb:b7:9c:
                    3b:d8:f9:25:a1:7b:6b:67:58:5a:2d:1f:fb:cb:59:
                    61:b6:8f:20:23:0a:90:48:28:7f:98:80:47:5a:a8:
                    82:0e:b1:e1:64:f7:3e:58:09:9a:89:d6:7b:ed:28:
                    0d:0b:f3:62:e3:5a:e1:d0:a0:dd:08:e3:c7:60:dc:
                    3c:8c:8a:ce:e9:6a:36:ca:44:07:2a:ac:b2:c7:37:
                    a1:a5:93:84:d7:65:69:fc:e0:d3:1d:24:75:1f:da:
                    54:0d:10:76:20:68:f4:54:63:b2:97:e7:12:8c:f2:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:97:5C:80:B7:EA:AA:04:8A:F8:8A:01:47:16:59:ED:4E:13:3D:9D
            X509v3 Authority Key Identifier:
                keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:62:03:09:e4:3f:5c:f9:4c:8c:33:9a:fc:69:74:1a:d3:70:
         97:29:cc:3f:8f:90:a9:ca:0d:9b:47:d5:0b:e4:53:30:62:f6:
         41:bb:bc:7c:90:b4:93:41:30:94:b8:70:e8:75:97:50:b6:ed:
         46:77:79:b6:b0:e0:06:b7:79:f0:e6:c8:74:0c:b0:5c:bd:98:
         ab:1c:6e:64:32:4a:d8:e0:47:6e:1f:ae:83:b5:c6:03:73:e2:
         30:4a:4b:73:0a:b1:ba:3b:59:70:ff:de:b8:c8:ad:42:2c:dc:
         3f:3f:59:45:0c:c3:f7:75:37:a5:fa:89:6a:a3:e6:bd:1d:38:
         5d:1c:d9:15:54:ed:cc:07:d8:55:c4:76:9d:c5:2b:5e:96:bf:
         cc:64:3b:54:a8:8d:59:99:03:8f:f5:8f:5d:40:c9:da:e7:be:
         69:e4:ef:5d:97:62:65:25:01:4e:9e:b5:95:70:31:67:2b:53:
         4b:d7:98:ae:c2:38:1f:2d:e6:b8:69:e6:4f:d8:22:14:c2:cf:
         4d:1f:35:a7:65:74:c2:2b:81:08:78:99:d7:b2:4b:7e:f6:8b:
         db:56:1d:ab:36:0b:a1:69:a3:f2:be:25:5a:aa:bd:c3:a5:1a:
         4f:6c:bb:76:e3:5e:e9:fd:18:4d:21:41:37:de:2f:f4:2f:15:
         df:c8:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:33 2026 by rpki-client