Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
File:                     gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json)
Hash identifier:          Anq6l5G73nQYD8qj677Wesd0o8uj5PX9YC3LJAPM7Vg=
Subject key identifier:   CD:38:E5:F6:13:EF:44:23:52:C7:1E:B0:76:35:FF:6B:E1:D4:59:ED
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Certificate issuer:       /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial:       019F94DC1FCCFD903940C0DEDE340244D332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
Manifest number:          19D5
Signing time:             Fri 24 Jul 2026 16:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:21 +0000
Files and hashes:         1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: 3JKvRxVLB6ra7mMC1fXGulMCqkDkP1BKP6RUw/dho64=)
                          2: hI6blJ5kjyHb7biy4lfSirS37zs.roa (hash: mqWBp2AFnHxwb8q7BdrL6WW9+Na4SaPzQGePE+5iXFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:1f:cc:fd:90:39:40:c0:de:de:34:02:44:d3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
        Validity
            Not Before: Jul 24 16:01:21 2026 GMT
            Not After : Jul 25 16:01:21 2026 GMT
        Subject: CN=cd38e5f613ef442352c71eb07635ff6be1d459ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:a2:96:40:bc:6f:49:92:b9:9a:17:19:7d:
                    d2:b9:8e:68:f8:d7:d4:d9:c7:c0:94:43:7b:07:f7:
                    72:cc:dd:97:6f:3e:e0:26:f7:78:ef:bf:44:ef:02:
                    bf:50:4c:33:ff:1e:48:77:35:87:e4:81:66:28:83:
                    74:f2:6e:09:14:72:4f:47:d7:0b:eb:d3:32:d7:f7:
                    62:03:41:62:b1:0d:ea:c5:43:83:d7:5c:73:b0:ef:
                    19:58:23:15:d1:6e:a0:65:a7:81:f6:ea:e9:14:e0:
                    78:87:5b:c5:83:d5:9c:d9:d1:7b:07:d4:68:6a:64:
                    90:8f:65:bd:02:d7:d8:20:74:b5:25:91:eb:51:17:
                    3b:2c:a5:3f:49:79:e0:f1:65:03:5a:c5:23:38:a1:
                    ea:2d:8b:c9:5a:50:6e:b8:9b:36:80:c0:44:3f:38:
                    ec:20:4f:81:f8:79:5e:f4:3b:f7:ba:24:c2:3d:7c:
                    77:14:e0:13:7c:a1:89:19:bd:be:f4:63:2f:0a:77:
                    79:56:7a:72:18:11:95:9e:a3:30:35:cd:b6:22:6c:
                    bd:38:69:76:32:3b:76:e9:a6:4a:8d:9f:34:2d:cf:
                    bc:08:5e:8b:27:69:4f:55:29:57:c1:76:2c:2a:ac:
                    98:49:d6:04:c1:2c:f0:f9:36:f4:46:df:89:15:19:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:38:E5:F6:13:EF:44:23:52:C7:1E:B0:76:35:FF:6B:E1:D4:59:ED
            X509v3 Authority Key Identifier:
                keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:96:fa:5b:4f:f3:15:43:60:0b:33:fb:18:dc:63:e4:a7:
         1b:6c:30:3e:42:80:16:24:c5:a8:6e:ac:67:05:e8:7b:d2:69:
         9c:a2:4a:3e:98:1a:dd:96:be:93:16:07:68:82:18:68:12:42:
         c9:0f:c3:cf:44:3c:f5:25:4d:d0:da:dd:3b:06:78:45:9b:87:
         ea:fb:e9:ec:3a:da:97:c3:ad:05:89:62:73:19:45:be:54:bb:
         26:4c:7f:4c:35:e3:c6:0a:6c:d8:8f:9f:d2:bb:7e:b8:72:d1:
         b1:08:b3:98:e9:2c:d1:6f:80:cf:37:45:8d:f3:18:61:d2:dd:
         62:1a:2c:6f:8c:9d:f6:fe:64:13:5d:b5:9e:da:9d:63:37:cf:
         26:16:71:cf:23:e3:7c:43:a5:98:18:a5:73:cd:18:61:51:33:
         a1:0c:64:77:b3:f1:c8:66:01:88:9f:44:b7:86:2f:38:96:64:
         ed:ed:ca:26:cd:31:a7:63:82:96:dc:96:17:6c:51:2a:e0:29:
         35:ce:cf:3c:36:68:68:68:0a:bb:b0:72:79:73:09:9f:1b:d2:
         a3:a2:98:d7:42:5f:fa:3c:40:43:4d:12:d5:ba:ac:0a:6c:be:
         69:89:b4:c4:1e:cc:68:91:82:6f:76:37:d8:c9:f9:e2:6a:20:
         75:04:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:25 2026 by rpki-client