Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File:                     GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier:          EFrEjASnTuihR1B40UNUr2QhyB5it8kdgG4cx8C14IU=
Subject key identifier:   08:A0:1E:4A:C1:3A:26:F8:17:92:6B:5F:52:73:47:56:B1:D9:6C:DD
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer:       /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial:       019F92B624A53CA805F10D56AC317A2C8D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number:          17E6
Signing time:             Fri 24 Jul 2026 06:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:38 +0000
Files and hashes:         1: C_loy0B7_p9VbknMqKT5_-soGMw.roa (hash: lXBtx5TCEhT3yUAY172G+wMVb0Mu6qGMrAg/+UmSriM=)
                          2: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: 1Fttf0CJk/SdAPJAorrSwwKhdWzG80yDMEfyJtoA8Do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:24:a5:3c:a8:05:f1:0d:56:ac:31:7a:2c:8d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
        Validity
            Not Before: Jul 24 06:00:38 2026 GMT
            Not After : Jul 25 06:00:38 2026 GMT
        Subject: CN=08a01e4ac13a26f817926b5f52734756b1d96cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:e2:92:cc:9a:9a:b9:c8:d4:f9:23:f8:87:
                    17:76:3b:b3:8a:7b:a8:6d:87:32:c3:53:ed:d1:c9:
                    a4:be:ac:d3:06:b2:d9:55:45:56:80:8f:59:f4:10:
                    97:ff:97:25:47:be:d7:8a:0a:50:5a:bb:12:04:c0:
                    d3:3b:50:b1:28:12:ae:bd:75:84:61:f2:6e:fb:13:
                    77:c9:85:5f:d5:32:e3:d8:66:83:50:cc:91:c6:be:
                    a0:cd:90:78:ca:cc:8d:44:00:96:8f:c0:ad:a6:19:
                    31:7d:31:d5:71:7b:c9:f3:17:67:bc:46:86:5c:41:
                    4b:1d:62:16:0e:a2:a9:32:ae:25:f5:d9:4c:90:cf:
                    ed:55:57:e1:25:ae:ad:0e:6e:24:dd:f7:c8:7a:41:
                    b8:bd:28:52:8e:28:ee:ca:89:79:0d:a2:49:b5:f7:
                    2b:51:3d:02:06:d2:7d:a5:7f:17:71:30:ea:56:8b:
                    e6:78:be:29:1a:e0:20:35:71:44:5a:ce:81:4c:5a:
                    a4:da:8e:c4:ed:6c:50:c7:84:cb:d3:73:bd:a5:cb:
                    4a:09:40:8f:4c:f2:c3:a5:69:4b:0c:c7:e5:1a:ea:
                    42:b6:9b:b4:4c:fc:21:52:ba:8d:9b:f4:3d:4d:59:
                    d6:e9:65:68:eb:a0:79:62:f9:1d:05:55:73:62:12:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A0:1E:4A:C1:3A:26:F8:17:92:6B:5F:52:73:47:56:B1:D9:6C:DD
            X509v3 Authority Key Identifier:
                keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:1f:a1:b2:d4:7f:68:31:e1:c6:e0:f5:47:2a:a7:75:bc:
         96:8b:9f:00:ae:53:b3:52:07:2d:03:62:92:89:2b:6a:4f:e9:
         09:63:55:13:b5:98:2a:1d:33:de:57:03:a2:c2:80:9e:84:d8:
         1e:b5:ef:47:dd:a9:2e:47:e4:cb:54:7f:e9:4c:fd:5f:05:03:
         41:92:35:d6:a6:21:3c:10:6a:30:ac:d5:16:96:89:67:94:2d:
         13:75:89:fd:c8:e8:01:d4:4e:6b:ea:44:5b:95:88:00:fc:af:
         69:4d:58:5e:a3:f1:be:be:41:c1:09:1f:ff:1b:8d:e3:c0:9f:
         01:53:d6:48:fd:bc:59:21:0a:d3:b4:59:9e:bd:1c:55:76:49:
         d3:1a:78:12:78:94:d5:c1:cb:6c:64:86:c9:a6:7e:0c:4e:5c:
         c9:a1:d3:97:c3:44:bc:ad:a9:8f:e0:5e:2f:d8:89:7e:a4:c1:
         b7:6d:ad:cb:b6:19:9a:56:c8:43:1c:6e:45:35:d8:55:ec:33:
         a9:99:b2:91:1d:64:4b:97:d4:ce:1b:66:d2:60:cc:75:67:dd:
         f8:d0:e8:f3:bd:bf:c7:f7:53:64:b0:37:4d:45:eb:04:a5:d5:
         dc:5f:90:87:ba:6b:74:dd:bb:c8:14:49:75:5d:8e:61:da:5a:
         f7:4c:20:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StiSlPKgF8Q1WrDF6LI18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx
YTc3OTQwHhcNMjYwNzI0MDYwMDM4WhcNMjYwNzI1MDYwMDM4WjAzMTEwLwYDVQQD
EygwOGEwMWU0YWMxM2EyNmY4MTc5MjZiNWY1MjczNDc1NmIxZDk2Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjHiksyamrnI1Pkj+IcXdjuzinuo
bYcyw1Pt0cmkvqzTBrLZVUVWgI9Z9BCX/5clR77XigpQWrsSBMDTO1CxKBKuvXWE
YfJu+xN3yYVf1TLj2GaDUMyRxr6gzZB4ysyNRACWj8CtphkxfTHVcXvJ8xdnvEaG
XEFLHWIWDqKpMq4l9dlMkM/tVVfhJa6tDm4k3ffIekG4vShSjijuyol5DaJJtfcr
UT0CBtJ9pX8XcTDqVovmeL4pGuAgNXFEWs6BTFqk2o7E7WxQx4TL03O9pctKCUCP
TPLDpWlLDMflGupCtpu0TPwhUrqNm/Q9TVnW6WVo66B5YvkdBVVzYhLM9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAigHkrBOib4F5JrX1JzR1ax2WzdMB8GA1UdIwQY
MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt
N2E4MGVkNjIxNzgxLzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx
LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9MfobLU
f2gx4cbg9Ucqp3W8loufAK5Ts1IHLQNikokrak/pCWNVE7WYKh0z3lcDosKAnoTY
HrXvR92pLkfky1R/6Uz9XwUDQZI11qYhPBBqMKzVFpaJZ5QtE3WJ/cjoAdROa+pE
W5WIAPyvaU1YXqPxvr5BwQkf/xuN48CfAVPWSP28WSEK07RZnr0cVXZJ0xp4EniU
1cHLbGSGyaZ+DE5cyaHTl8NEvK2pj+BeL9iJfqTBt22ty7YZmlbIQxxuRTXYVewz
qZmykR1kS5fUzhtm0mDMdWfd+NDo872/x/dTZLA3TUXrBKXV3F+Qh7prdN27yBRJ
dV2OYdpa90wg4A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:40 2026 by rpki-client