Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          SwKCCgSEHJ4rKRGK//pklv/VuWceXWQF+A3n6lv0H2w=
Subject key identifier:   0F:5E:DB:2B:43:B5:EB:ED:98:86:B6:F6:87:ED:AC:E0:EF:67:9B:6A
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       019F8F46F5D5CAC2477096BEC0DCB74F40C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          19D2
Signing time:             Thu 23 Jul 2026 14:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:20 +0000
Files and hashes:         1: GvVv96JrRLH22YKSK9VfEbCaaP0.roa (hash: Qk3itIJYOZGxOb9KSpcwss8K3JcW4s+BHAT7y+BPQUI=)
                          2: XfAxSlgwCTxzDzqz1F5GSiHcht8.asa (hash: cUvj7YaZEThgC8DmFBrpKSpjIZNpn5XqKRaVt6kdn/Y=)
                          3: ZYu3qwDD62OQjK-0MY1GhTTV3L0.roa (hash: jwdnKx0rMKE4+yxjFPdAO7oEDuayA2F4huzOqBo8dhI=)
                          4: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: sBX9+/mbzy+eTTqpEFSzALZghplGA6+8tkf3aNGOebg=)
                          5: uXeyuyNFTLdI8bGRmbqj8zikNy8.roa (hash: 3g5uGaWB0/TdoVSPoOBbNodtyn53Sd/iS2fmmUAB/ic=)
                          6: wIFSdDIn69QjGp9-x0gmnkeBqoI.asa (hash: 6G8K5jievPqmLDZE/wjQxWQa/PGUOa8AwCZQ1np/zp4=)
                          7: wywENrgV9cTNnEJt2kyjfxZDgWw.asa (hash: +Yfj1V4ldVnWd67CebIjZgHqSDXzdBkKkOBcRyvVlgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:f5:d5:ca:c2:47:70:96:be:c0:dc:b7:4f:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Jul 23 14:00:20 2026 GMT
            Not After : Jul 24 14:00:20 2026 GMT
        Subject: CN=0f5edb2b43b5ebed9886b6f687edace0ef679b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:f8:9b:29:76:96:f5:45:7f:52:85:96:ee:
                    3b:22:02:71:53:c7:d2:4d:38:0c:c2:b9:fc:23:16:
                    25:78:79:74:ed:28:8b:91:85:58:6f:4d:ea:f9:e4:
                    e2:e5:16:7d:36:4d:86:06:2b:c7:6f:a3:1a:4c:6e:
                    95:cd:7d:32:27:27:bc:99:84:ef:3f:76:39:a4:41:
                    89:85:50:c7:e7:11:64:0a:9d:85:6b:dd:56:09:47:
                    c2:ea:fd:8d:e2:58:27:71:dc:45:64:1a:af:d7:bb:
                    38:f9:7d:1d:84:91:32:2c:69:eb:e4:52:22:e6:3f:
                    59:a9:b6:16:d8:68:fd:f3:71:56:ee:c1:bc:2d:f6:
                    e1:15:b0:c9:ab:6f:ea:6a:2e:53:08:db:3c:30:f7:
                    29:39:99:79:85:ef:43:f9:7d:09:80:90:3b:c4:34:
                    69:5e:4d:9a:64:0c:00:54:aa:f0:f4:df:d8:ab:61:
                    82:5b:df:0b:dc:8a:22:01:dc:03:f1:5e:f9:59:db:
                    af:33:fc:db:76:7c:ad:e6:b7:6a:6d:c5:d9:a3:a4:
                    9e:89:fe:28:c8:da:9d:4e:68:cc:2f:24:b4:6d:bf:
                    8c:72:35:64:01:d9:89:bd:50:6e:4b:7f:a0:ad:2c:
                    64:08:85:3f:14:d6:d2:63:82:4a:31:de:c2:5b:34:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:DB:2B:43:B5:EB:ED:98:86:B6:F6:87:ED:AC:E0:EF:67:9B:6A
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:96:14:92:18:03:67:88:52:40:4b:92:a0:bd:20:2c:e0:70:
         e9:28:8d:82:50:88:26:de:9a:73:69:f4:0a:5b:9d:d1:cc:53:
         74:ca:18:4d:4b:89:ec:fb:76:68:04:10:d9:41:2f:e0:3e:c8:
         40:bb:d2:a0:d0:97:52:ea:10:04:82:85:a1:da:10:67:db:5b:
         18:3f:54:3a:cf:bb:4c:38:6d:08:ce:8d:d8:e2:51:b1:38:aa:
         00:12:ab:bb:37:89:a7:20:30:38:9f:4c:37:81:35:83:5e:bd:
         73:a0:76:c7:0b:30:8d:cf:83:26:e2:01:6f:77:47:83:b9:e1:
         62:ca:e4:ae:20:d3:19:4f:19:16:93:a4:84:77:98:7b:62:5b:
         4e:bb:fd:9f:a5:cd:2b:13:fa:92:2c:ab:06:12:6d:64:05:e0:
         0a:2c:ec:ed:8f:31:81:22:db:c3:89:cd:b6:e3:03:33:f8:8e:
         68:1e:35:52:61:d6:b4:fe:71:88:11:62:3e:96:8b:27:ae:e3:
         45:5b:fe:8b:ec:ca:67:7d:d2:82:af:87:30:f4:8f:2e:11:fc:
         f8:a6:7b:c5:53:c8:69:ca:e1:fc:c8:8f:2d:d2:b5:19:61:ef:
         8f:6b:5d:41:93:5e:a7:b7:42:97:fd:e2:56:e6:a0:b3:05:cf:
         3a:99:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:33 2026 by rpki-client