Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
File:                     gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json)
Hash identifier:          WxumgDgbJgapaLmE1hrDG8q43pgQxCGGYaSsez13wko=
Subject key identifier:   66:10:75:55:CE:7F:11:56:E8:F3:E3:40:CD:37:62:DB:EB:97:AE:DA
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Certificate issuer:       /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial:       019F95490B7DFEBA54F41F6287AC61370522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
Manifest number:          18CD
Signing time:             Fri 24 Jul 2026 18:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:19 +0000
Files and hashes:         1: 1-vE35X7cA95yo4co5xI4LRsygqE.roa (hash: GArZfb9HlabGHSj6lQqBP09tmUxt9yZTyafscM2AVng=)
                          2: 8F-O76TUkmlsiOgCnmM_6nJTd4g.roa (hash: Jg+vMGJ/IvxZ8SnVP3JTyVdc1ply2v1uAg9EFIKmJK4=)
                          3: Fh-Fpr_uHjcMFD06n24XprpSG1M.roa (hash: FmZcmk95+iBFV9lKN3BmY/9kElMyaU+AZ6vmkOB1orM=)
                          4: H_-983GgKYxhkkt3nnpQcnHg30Y.roa (hash: Vd3cVl32ciW8wDwlKvX6dteoTksKbjaVlUmvnCCj7EU=)
                          5: HnkouqdWv4SIiw0Y6wY8Ui47meM.roa (hash: ahZvoApKlh5l0oa6Zn6fDd3kDM/ctYdpf3+HGB0yzh8=)
                          6: KQlwkPmpk1DLGUyeI2rVK9lNE7E.roa (hash: bwKf8d6A05QgLcfG48aYiSBWbkKSxoVtSdwZtCZpE+U=)
                          7: Oqt--JM-bQkAEwluYF_VbCJNXBk.roa (hash: qgtHHT2LrCzQJdNXo2JdjcQzzNmHNGHV0c6PUoEL78k=)
                          8: bCNLowmF60GtTgq9MrPewL3-uQM.roa (hash: 6XTgGY9inLGGmIYKO2xERVTl3h4QMDusQwowddy15I8=)
                          9: ejTvaV2blN9QenSFLNnrpBZq49g.roa (hash: Y7jff0ticwpNpSgfsyRoCcnLBtZbRBWqW7cbBoyiVCM=)
                          10: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: gyVppPRLBgWnXJU9URv/DwbsAU2O5iaUsLg4yEFtQ+k=)
                          11: nq6pDF5PCk2N9cPjSjfM50wXO9w.roa (hash: G1Ywhcu+WSXWGvbw/G0u1TXbTpmgtQzLkStG8DNuRus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:0b:7d:fe:ba:54:f4:1f:62:87:ac:61:37:05:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
        Validity
            Not Before: Jul 24 18:00:19 2026 GMT
            Not After : Jul 25 18:00:19 2026 GMT
        Subject: CN=66107555ce7f1156e8f3e340cd3762dbeb97aeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:57:c5:df:fb:cd:53:01:7a:6e:0e:87:28:fa:
                    5a:52:f3:13:70:86:68:7b:30:c2:50:87:cc:27:3b:
                    c7:09:6d:91:56:4e:4f:56:8e:34:b0:be:2a:6b:c7:
                    89:0d:0d:6b:dc:a7:b0:69:a6:49:eb:ba:5c:87:67:
                    cf:7e:5a:31:8a:11:17:54:ac:74:07:0e:58:01:00:
                    b7:b2:09:bb:0d:91:c4:03:d3:2e:fd:6d:ca:ab:fd:
                    e8:0e:0c:79:da:a9:a5:a4:11:d3:da:64:a7:e1:7a:
                    4c:9c:61:36:7a:f4:41:3c:64:88:01:a5:7d:fa:b4:
                    fc:ea:f1:ab:a2:e7:04:be:59:d6:80:95:e7:1e:f3:
                    cb:e1:f6:a1:f8:d4:2c:9d:5a:e2:47:10:ad:2f:93:
                    fb:28:60:63:b6:44:94:eb:76:21:85:e4:b8:81:01:
                    2c:05:61:b9:71:56:ca:0a:9b:e0:71:ab:da:c6:8e:
                    8d:5e:e5:60:5e:cc:ed:cc:96:30:c6:88:8c:e8:66:
                    46:4d:07:64:4b:f5:fd:14:2f:da:fc:45:01:0e:a4:
                    2c:7b:5c:bd:a3:36:e7:7b:12:ba:60:86:cf:da:63:
                    82:57:67:62:de:80:bb:47:ab:6c:0c:2a:1e:8c:0d:
                    77:b9:49:24:a4:8e:89:c6:72:c7:e7:9c:8b:22:1f:
                    e4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:10:75:55:CE:7F:11:56:E8:F3:E3:40:CD:37:62:DB:EB:97:AE:DA
            X509v3 Authority Key Identifier:
                keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:27:84:0b:51:37:e5:86:8b:e5:74:60:ba:26:97:3d:a7:78:
         03:0d:57:dc:98:fb:c9:ec:6f:ec:2b:36:0b:38:d2:53:11:43:
         98:70:2b:58:58:d2:94:21:bb:ea:40:50:a9:87:fd:77:99:00:
         be:f2:e7:c8:fb:8f:36:7e:cf:91:6e:68:e6:54:eb:a9:8d:3f:
         e9:8e:73:d4:53:24:bf:01:52:60:ed:79:f8:55:28:5f:d3:2c:
         96:56:c1:9b:5a:31:d8:de:16:e8:e9:ab:bc:67:b2:86:37:58:
         7e:d1:e2:15:ea:1f:6d:65:62:f2:fd:c2:36:84:cf:5e:4f:88:
         f0:bf:7b:a2:89:78:c8:d2:2b:10:bc:70:bd:f9:e5:72:62:cb:
         6c:b3:82:a9:91:ef:0a:da:59:cf:8f:95:3c:1b:e2:6d:11:61:
         56:57:76:94:93:ad:0c:ff:54:57:59:6a:f7:7e:a9:6e:ed:5e:
         03:31:3b:ba:53:53:be:4a:10:14:e0:04:95:f0:27:37:ec:fa:
         3f:45:d1:ed:96:d3:aa:79:02:1b:f9:23:9f:cc:68:6e:cf:5a:
         46:0a:af:79:8a:e1:fc:24:c8:f6:4b:02:2b:81:93:5a:5e:1a:
         de:3c:f8:87:f8:24:eb:32:da:24:08:e7:b8:3b:83:75:1c:0a:
         9b:d5:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:16:37 2026 by rpki-client