Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
File:                     GXC73-TB270lU1siTtzNjL0Wy0s.mft (raw, json)
Hash identifier:          ZKY3kmLygi0udDg/Gut8HlJpbXa4rle01mei9WixgXU=
Subject key identifier:   0C:6A:E8:C8:51:93:54:84:3F:1E:27:75:3F:0C:F5:8A:28:E3:12:68
Authority key identifier: 19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B
Certificate issuer:       /CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
Certificate serial:       019F8F47120B1C2DA588606BC4E5E8C51366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
Manifest number:          BA
Signing time:             Thu 23 Jul 2026 14:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:27 +0000
Files and hashes:         1: GXC73-TB270lU1siTtzNjL0Wy0s.crl (hash: 45w/8eFHpk1lgEwQNHRoraq/GRs8biRdQKXnMWJydwI=)
                          2: pf2FwpKc7vnaaunQAa3wzyiNNX4.asa (hash: pibuNniDNE/2mZFRFWHKbypNyAWHCp21IacmhxVYowA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:12:0b:1c:2d:a5:88:60:6b:c4:e5:e8:c5:13:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
        Validity
            Not Before: Jul 23 14:00:27 2026 GMT
            Not After : Jul 24 14:00:27 2026 GMT
        Subject: CN=0c6ae8c8519354843f1e27753f0cf58a28e31268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:3d:32:03:2b:5a:4a:47:e4:0b:9a:65:a3:
                    d1:56:12:01:9f:d8:88:ca:f7:5d:6d:d5:3b:2e:30:
                    69:a0:a6:9e:4f:cf:7b:10:cd:81:37:2a:33:b1:a8:
                    1e:8d:ad:7a:0f:13:e7:f6:4a:47:cf:40:a7:eb:bf:
                    ab:19:21:a7:18:72:2b:cf:6d:7e:c4:e4:ae:74:98:
                    3d:a6:a9:56:b4:fc:d7:9c:52:0b:3c:98:b9:9d:74:
                    18:fc:d3:d4:dd:38:55:06:6f:88:4e:cb:fb:fa:68:
                    10:28:23:71:5d:58:8f:ec:46:21:50:21:ab:c5:9a:
                    d3:c9:be:34:6c:4c:6f:0c:a8:47:0e:a8:ac:f6:94:
                    31:75:f9:25:16:e1:71:6c:ad:e2:47:e9:8f:07:fa:
                    17:3b:d4:0c:33:5b:db:72:09:57:a0:bf:3f:ea:09:
                    99:62:5f:9a:7c:1f:7e:44:e1:6f:9e:a7:48:4a:94:
                    6f:46:39:9a:fc:ab:60:e4:ee:c1:a6:89:e3:4a:a7:
                    83:f9:89:eb:cb:e7:50:df:5b:55:6c:9b:97:ba:a9:
                    0a:20:76:6a:0b:75:21:ca:4d:5a:80:13:10:72:22:
                    3c:0c:9a:90:8a:b1:c0:ea:d8:dd:8f:7c:77:c5:e9:
                    49:17:bb:97:07:29:0c:71:21:99:df:83:ea:bd:14:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6A:E8:C8:51:93:54:84:3F:1E:27:75:3F:0C:F5:8A:28:E3:12:68
            X509v3 Authority Key Identifier:
                keyid:19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:eb:6a:9a:02:6d:b1:60:61:73:81:d5:4a:f4:90:e7:fb:
         b6:5a:51:73:d8:bb:ed:cc:69:94:1d:80:06:a2:e4:91:b5:10:
         16:f8:fa:d2:49:24:a0:ff:f0:9e:5c:fe:08:21:41:65:e5:39:
         91:a0:b7:5b:50:29:ef:38:4d:e8:3e:9d:6a:c6:74:cf:e7:25:
         14:eb:d1:4d:77:de:e7:8a:d4:2c:3e:34:ea:20:39:3c:a6:b4:
         66:81:d0:71:09:ee:0f:8e:b1:27:35:e7:6e:e4:ce:6f:30:b7:
         a3:dd:af:03:fa:06:77:a0:d3:e0:b8:d5:be:49:62:05:74:07:
         1d:34:cf:cb:82:0a:28:94:ac:f7:06:13:24:f0:6f:67:ad:6e:
         14:96:78:54:8e:7a:d1:49:76:7e:30:5b:a3:48:de:92:c1:aa:
         1d:67:3f:d3:b3:3a:8e:4e:c5:b8:9c:12:0d:5b:02:59:62:49:
         02:48:eb:07:e5:bc:78:24:09:8b:08:de:b2:f1:d9:64:ba:75:
         04:1d:03:3d:68:7b:9d:dc:f4:08:d5:5e:66:57:98:53:f1:80:
         5c:8e:45:79:6f:81:59:6b:9a:cc:3d:d3:1f:8a:8f:42:31:2e:
         0c:2a:d4:7c:39:a8:d5:3a:55:db:3e:c0:68:a0:5a:3b:72:c8:
         3c:c7:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:38 2026 by rpki-client