Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
File:                     GW1YekBaGQSWYyGhDzmJtoZvXmM.mft (raw, json)
Hash identifier:          zfqi4te5YOMXCSXG2HiKPUZhe8hfialY2+afb6yuaKc=
Subject key identifier:   F1:26:75:F6:BC:B9:03:E9:90:5A:4B:C2:81:84:B0:9B:71:82:F2:C8
Authority key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
Certificate issuer:       /CN=196d587a405a1904966321a10f3989b6866f5e63
Certificate serial:       019F951270DDBC0D85BA0B6F4E7205BD60E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
Manifest number:          01E0
Signing time:             Fri 24 Jul 2026 17:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:41 +0000
Files and hashes:         1: GW1YekBaGQSWYyGhDzmJtoZvXmM.crl (hash: /n/eNkHA+MljkV7nZ593CqhhnTM0aEzwBdjQ0m2oE2w=)
                          2: cJYpXB_oLGSwXDizlOh5NTU415c.roa (hash: mZv4pxKg6JT+luM0hXV3CCOhtyIkDC3zPkMJ6EEFxgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:70:dd:bc:0d:85:ba:0b:6f:4e:72:05:bd:60:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196d587a405a1904966321a10f3989b6866f5e63
        Validity
            Not Before: Jul 24 17:00:41 2026 GMT
            Not After : Jul 25 17:00:41 2026 GMT
        Subject: CN=f12675f6bcb903e9905a4bc28184b09b7182f2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:e9:ac:5f:89:b8:3a:9a:c4:d7:15:5d:ba:
                    2a:1b:b3:7e:fd:0d:39:a0:60:6a:9f:6b:b4:0b:33:
                    4a:5c:d6:23:33:e2:9b:e5:27:3d:fd:9a:ca:3b:60:
                    47:62:e2:a8:e9:49:06:f3:3d:2b:7d:ca:a5:ab:7a:
                    12:7a:c2:a7:00:2e:66:01:b9:ed:4c:87:6e:66:77:
                    3b:25:f3:a4:59:6f:f1:af:dc:b7:1d:be:bf:11:ea:
                    b2:a9:2b:03:ba:85:5b:7b:8d:f9:fa:8a:bc:d1:a8:
                    0a:ef:28:30:16:ee:8a:e1:ce:4b:da:de:11:3d:a5:
                    ce:ff:9e:d1:41:59:f7:16:ca:1b:b9:23:f8:84:c9:
                    e0:92:8c:49:dc:c8:42:b5:fb:97:0f:61:94:c8:41:
                    a2:a7:2e:cd:a7:47:77:97:e5:3e:10:92:a3:6f:54:
                    09:95:33:04:b4:c4:72:b1:45:cd:57:46:cd:78:cd:
                    57:44:d3:77:b7:ef:3a:f6:ec:02:12:63:6e:5a:fc:
                    ff:df:b3:3b:96:a5:94:6d:29:4e:6b:c0:1c:d5:ae:
                    79:78:2f:c2:a5:5a:2b:b8:6a:af:3c:35:78:bf:d2:
                    64:53:3b:c9:1a:d9:eb:9a:8e:a3:23:34:b8:f1:29:
                    d0:68:cf:ea:0f:66:a3:3e:ad:0d:80:f2:79:fc:ac:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:26:75:F6:BC:B9:03:E9:90:5A:4B:C2:81:84:B0:9B:71:82:F2:C8
            X509v3 Authority Key Identifier:
                keyid:19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8c:02:23:f2:43:bf:76:a0:4e:6a:d3:3f:6e:03:bd:fc:79:
         86:3d:ee:62:1f:72:ce:17:43:dc:f6:19:c8:ea:df:f3:95:fe:
         ee:be:25:7c:07:6b:99:bb:15:75:e8:47:38:58:82:0c:5b:f6:
         39:54:2b:9a:35:85:4d:a5:b7:0d:20:fd:e7:9c:88:16:2a:99:
         43:53:17:c6:c4:04:89:84:52:dd:07:84:80:3d:59:3c:a9:a0:
         7d:5c:cc:d7:08:02:9d:f9:c7:ab:bf:f4:96:88:5d:9b:74:8f:
         31:d7:f3:79:83:5f:37:17:40:ca:d7:84:23:98:0b:f5:d6:f9:
         78:b3:ad:f6:36:c0:0c:90:53:95:90:df:01:4b:8a:86:43:a6:
         f4:18:f6:d5:ec:05:7d:cd:17:d4:4c:46:f7:64:08:98:1a:47:
         58:c3:c4:3f:a4:c3:51:5a:c0:92:ae:1e:96:44:33:4f:54:15:
         a9:f9:65:e9:01:3c:b6:ad:c0:7f:f4:3d:20:5e:fc:5e:15:09:
         b1:c9:1b:e7:4e:49:e5:f8:d1:3c:d1:2f:6d:d0:29:2c:62:ba:
         74:64:d2:81:48:96:84:88:46:ef:1e:3c:52:d8:1b:32:e0:79:
         03:1c:5c:28:6f:a0:fb:b1:8b:01:3b:33:60:4e:4b:7d:ec:14:
         e1:1c:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:06 2026 by rpki-client