Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File:                     GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier:          9hB5H/WLDTkzIGsfgMF803T9BbI97y3d0uI5/mtXDCc=
Subject key identifier:   F1:30:C9:37:D8:74:39:C6:39:53:C7:02:02:D8:04:21:A9:AD:4B:3C
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer:       /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial:       019F9400193A00A1F0157456F476D3122261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 12:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 12:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 12:01:02 +0000
Files and hashes:         1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=)
                          2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: flV2UA1xFnffJ54eqbNtT6K/6or2rkozAWK49rfhod8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:00:19:3a:00:a1:f0:15:74:56:f4:76:d3:12:22:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
        Validity
            Not Before: Jul 24 12:01:02 2026 GMT
            Not After : Jul 25 12:01:02 2026 GMT
        Subject: CN=f130c937d87439c63953c70202d80421a9ad4b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:af:5c:32:fe:2f:83:cf:63:38:bb:f4:86:
                    d6:37:65:13:52:91:43:3c:26:8a:53:2c:73:28:f1:
                    e0:68:7c:87:4f:19:62:3f:42:c9:93:20:42:63:ff:
                    2c:2a:fc:20:12:8c:a9:07:54:a9:b0:0a:bf:9d:3b:
                    59:78:f4:3e:ee:d2:df:72:ed:73:f1:b9:e9:97:71:
                    29:4e:fa:15:20:d1:13:2b:47:78:fa:78:37:59:14:
                    b4:1f:b7:ee:a4:0c:aa:a5:8a:fa:2f:3c:da:91:22:
                    e4:fb:7c:40:f7:af:69:18:97:1b:25:30:28:8d:0d:
                    1e:30:dc:26:82:cd:6a:8b:7a:9d:ae:5b:02:f1:c1:
                    67:71:0b:c7:bf:a3:98:ec:a9:bb:46:78:ea:83:8a:
                    86:e0:95:73:6a:3c:5c:37:f4:c5:3c:8e:47:be:08:
                    7a:92:16:ab:c9:8d:7a:df:73:1c:60:93:5a:cd:91:
                    73:6b:43:40:02:71:83:75:56:c1:00:0b:65:df:62:
                    b1:73:a1:70:b4:dd:a8:0c:37:85:f0:c5:cf:60:e0:
                    1c:43:63:2c:64:a7:9f:dd:e0:15:1b:58:83:a7:5d:
                    47:9f:16:f3:26:31:86:58:71:95:98:2a:5c:c8:84:
                    27:4f:be:7d:aa:73:4b:e6:35:92:cc:80:35:7f:f1:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:30:C9:37:D8:74:39:C6:39:53:C7:02:02:D8:04:21:A9:AD:4B:3C
            X509v3 Authority Key Identifier:
                keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:62:f1:c9:d9:48:eb:13:37:62:f2:c8:d8:f9:a7:12:ed:b7:
         c3:cf:bc:0d:20:84:dd:cf:59:09:68:3d:82:20:06:0c:df:0e:
         42:fb:bf:d4:fb:8b:2d:75:73:22:49:06:23:c1:0f:03:4b:8a:
         f8:d9:e8:81:cf:19:f7:a6:61:dc:c3:b9:28:93:09:48:2e:e3:
         03:33:de:b9:2e:8a:3e:b6:b2:82:cd:ba:93:5b:49:e5:bc:54:
         b1:ff:1a:4d:69:10:c0:56:50:11:6a:8e:ba:35:60:3f:0b:96:
         91:66:de:53:5b:a8:93:52:ba:0a:22:5d:0d:eb:5f:ae:e1:68:
         a3:d5:82:95:51:d1:81:a9:72:d3:c0:2b:8e:1b:f2:6a:8a:2b:
         8c:9b:21:cb:0e:07:b2:41:fe:78:df:25:1d:ab:56:2b:8c:23:
         12:63:fe:3c:5d:d4:b7:77:a9:70:82:84:71:24:86:b6:da:75:
         c5:1f:1d:61:71:d3:94:b6:1a:c6:b8:3f:d2:e5:3b:ef:e2:01:
         cb:1a:16:d0:22:7f:95:74:91:5c:d5:59:66:2f:ce:5e:60:95:
         76:ec:19:5e:c8:3a:7b:b1:26:cd:c2:b6:20:ca:d7:3b:fa:ce:
         2c:8e:6f:79:42:ce:71:11:d9:bf:f2:be:51:95:6b:c1:d9:c7:
         ab:28:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:57 2026 by rpki-client