Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
File:                     gRVc2PIuywFPiq1xDAcMfofLCi8.mft (raw, json)
Hash identifier:          FJ4JljWnkIK45vmf8QAJStY/q9wCUxmMs+9z4j5IeIY=
Subject key identifier:   BB:0A:D1:11:80:35:CC:59:DF:C8:5B:2C:74:7B:22:CC:6F:E3:82:B6
Authority key identifier: 81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
Certificate issuer:       /CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Certificate serial:       019F946D70AD1AD7DBCD11181669209B391D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
Manifest number:          011D
Signing time:             Fri 24 Jul 2026 14:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:27 +0000
Files and hashes:         1: gRVc2PIuywFPiq1xDAcMfofLCi8.crl (hash: gwMBk+CH8fqUD0Kl1LvdjPb1QiX6IqIV65kfm5PMPs8=)
                          2: uDc2pV6zqfjwI-4br5JK6tiGG5E.roa (hash: bNNvOAco8leAwP4SgeSGZ8jpQ0jHOezRglGnSiHe4TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:70:ad:1a:d7:db:cd:11:18:16:69:20:9b:39:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
        Validity
            Not Before: Jul 24 14:00:27 2026 GMT
            Not After : Jul 25 14:00:27 2026 GMT
        Subject: CN=bb0ad1118035cc59dfc85b2c747b22cc6fe382b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:a5:22:92:24:9a:29:2a:51:40:b2:88:1d:
                    a6:64:8c:dc:a8:e7:c8:86:e0:88:60:b1:a2:32:64:
                    d9:53:fd:73:54:c0:25:57:c6:44:f2:32:03:8d:3f:
                    38:8b:5a:9e:da:4c:1b:ef:03:f2:6b:c2:c6:d6:70:
                    33:57:10:35:8a:ff:84:5d:02:47:ae:2d:8f:60:51:
                    b3:b1:e8:02:45:d4:c3:69:a8:b7:70:0d:4f:91:5d:
                    19:bf:af:05:8e:d0:5c:be:f4:4f:40:f1:1a:8f:49:
                    09:f2:93:50:96:7a:1a:3c:ca:73:12:35:41:e1:d1:
                    3e:56:73:43:86:39:c8:94:96:44:d6:cc:89:2f:7a:
                    36:04:97:01:df:df:b7:e6:62:e8:db:ee:18:4b:fd:
                    0e:f9:9f:04:fa:6f:e6:77:d7:cf:21:f0:24:19:5e:
                    09:e9:d7:56:4b:aa:a1:94:aa:e5:e7:73:f8:6b:d1:
                    cb:23:06:30:45:24:47:da:82:2f:7b:2f:b4:b8:45:
                    11:51:24:d9:28:cb:27:d4:e6:fa:f5:7f:b6:27:a3:
                    bb:e2:ec:59:9f:b2:25:da:c1:a0:dc:7f:f1:0a:79:
                    ab:6f:91:90:e2:c3:6f:d7:90:07:52:f4:16:6e:0d:
                    4d:b0:a8:a7:3f:12:ae:93:12:10:0c:95:02:32:a4:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0A:D1:11:80:35:CC:59:DF:C8:5B:2C:74:7B:22:CC:6F:E3:82:B6
            X509v3 Authority Key Identifier:
                keyid:81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:74:16:2e:fe:5b:8b:1a:08:8e:d7:dc:57:1a:c0:f6:d6:09:
         a8:0f:21:a9:4f:02:66:39:78:6a:66:cd:15:c4:1b:3c:f2:ee:
         bd:05:0e:d6:ae:78:fe:c1:e6:3d:a3:a0:96:31:d2:42:46:02:
         5a:2d:65:57:0c:aa:c5:bd:0e:46:39:ef:9b:00:35:1f:ca:42:
         34:34:35:d9:7f:78:1d:56:5c:74:6e:5b:3d:4e:ac:05:60:3b:
         ff:69:15:c7:3b:d6:ed:94:02:72:a1:49:46:f7:59:06:4d:16:
         2d:1f:da:e7:08:1e:00:cc:f8:85:9f:c3:56:dc:a0:45:73:f4:
         95:d0:b3:b5:0d:64:a7:dc:0f:88:fd:50:24:15:9a:5d:5e:db:
         72:5a:cb:24:33:67:a3:62:b4:73:b1:ce:13:06:dc:a4:d8:09:
         5d:25:e9:95:1d:9f:c2:8b:f3:ce:e7:de:8d:a5:0d:ec:ea:a4:
         41:6e:db:68:44:61:18:3a:c7:c3:43:66:d1:12:2e:a2:c4:41:
         68:7d:24:77:1c:0f:55:08:76:c7:66:11:eb:bd:27:bf:0f:fc:
         ee:e5:2f:23:4d:4b:be:31:50:e9:8b:35:2c:77:08:cb:c1:2e:
         7a:1a:dc:0b:20:bb:63:83:ec:08:bb:6c:f2:d7:b5:3f:28:98:
         4a:44:11:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbXCtGtfbzREYFmkgmzkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMTU1Y2Q4ZjIyZWNiMDE0ZjhhYWQ3MTBjMDcwYzdlODdj
YjBhMmYwHhcNMjYwNzI0MTQwMDI3WhcNMjYwNzI1MTQwMDI3WjAzMTEwLwYDVQQD
EyhiYjBhZDExMTgwMzVjYzU5ZGZjODViMmM3NDdiMjJjYzZmZTM4MmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRalIpIkmikqUUCyiB2mZIzcqOfI
huCIYLGiMmTZU/1zVMAlV8ZE8jIDjT84i1qe2kwb7wPya8LG1nAzVxA1iv+EXQJH
ri2PYFGzsegCRdTDaai3cA1PkV0Zv68FjtBcvvRPQPEaj0kJ8pNQlnoaPMpzEjVB
4dE+VnNDhjnIlJZE1syJL3o2BJcB39+35mLo2+4YS/0O+Z8E+m/md9fPIfAkGV4J
6ddWS6qhlKrl53P4a9HLIwYwRSRH2oIvey+0uEURUSTZKMsn1Ob69X+2J6O74uxZ
n7Il2sGg3H/xCnmrb5GQ4sNv15AHUvQWbg1NsKinPxKukxIQDJUCMqR+vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsK0RGANcxZ38hbLHR7Isxv44K2MB8GA1UdIwQY
MBaAFIEVXNjyLssBT4qtcQwHDH6HywovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1JWYzJQSXV5d0ZQaXExeERBY01mb2ZMQ2k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ODFmNjUtMjJkOC00MmQ3LTliNjIt
YzQwYTBhNzk5NDY5LzEvZ1JWYzJQSXV5d0ZQaXExeERBY01mb2ZMQ2k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ODFmNjUtMjJkOC00MmQ3LTliNjItYzQwYTBhNzk5NDY5
LzEvZ1JWYzJQSXV5d0ZQaXExeERBY01mb2ZMQ2k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3QWLv5b
ixoIjtfcVxrA9tYJqA8hqU8CZjl4ambNFcQbPPLuvQUO1q54/sHmPaOgljHSQkYC
Wi1lVwyqxb0ORjnvmwA1H8pCNDQ12X94HVZcdG5bPU6sBWA7/2kVxzvW7ZQCcqFJ
RvdZBk0WLR/a5wgeAMz4hZ/DVtygRXP0ldCztQ1kp9wPiP1QJBWaXV7bclrLJDNn
o2K0c7HOEwbcpNgJXSXplR2fwovzzufejaUN7OqkQW7baERhGDrHw0Nm0RIuosRB
aH0kdxwPVQh2x2YR670nvw/87uUvI01LvjFQ6Ys1LHcIy8EuehrcCyC7Y4PsCLts
8te1PyiYSkQRSw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:26 2026 by rpki-client