Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File:                     GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier:          +B+ZyevESDiB5c6/w9pRaDv2oWtxAMeEbCv8HsOQQOk=
Subject key identifier:   BC:E5:E9:FD:61:36:BC:2D:2F:78:E7:91:A4:6D:5D:4F:94:4D:41:3F
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       019F95B73DD42A36C7764C714DEFB6907112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number:          0DCA
Signing time:             Fri 24 Jul 2026 20:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:41 +0000
Files and hashes:         1: 8QpoO-rxJHsqUjRex5_olbhYxQc.roa (hash: SX9oUFynqnM4YrEmctmRd+yYGKV06PoodiFRGZH6voc=)
                          2: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: rfj7CQgEfI/gIFv8Eoxxdn5Rm26k9KQaqKIJ9IasiQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:3d:d4:2a:36:c7:76:4c:71:4d:ef:b6:90:71:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Jul 24 20:00:41 2026 GMT
            Not After : Jul 25 20:00:41 2026 GMT
        Subject: CN=bce5e9fd6136bc2d2f78e791a46d5d4f944d413f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:c4:0c:a1:70:a8:d1:7d:4b:02:fe:7c:d8:
                    e9:cb:e6:5c:06:2b:93:59:ac:6b:d7:b7:af:90:99:
                    57:eb:61:15:ad:c9:b4:a6:70:e4:17:e6:20:85:28:
                    77:7a:65:68:de:a6:e7:7d:75:1c:31:cd:40:06:f1:
                    59:bd:5e:d5:1b:fd:9a:7d:89:01:ea:d3:70:97:92:
                    7f:0d:5e:52:e5:6a:ef:da:60:f1:ff:4e:12:e9:6e:
                    04:8f:00:0c:41:60:20:a3:75:b5:86:18:79:37:91:
                    68:32:b2:7c:b1:a8:9f:55:78:de:87:65:2a:5f:6e:
                    14:a1:45:19:a1:d7:f4:a9:84:91:24:80:25:2d:fd:
                    80:ff:15:e9:92:d9:da:72:91:9d:c3:bb:53:b9:52:
                    27:f0:1a:19:c1:dc:a7:8f:30:d5:e0:b3:78:70:f2:
                    3f:11:23:e5:61:fb:ef:33:77:70:43:96:f7:93:9e:
                    ab:89:79:78:82:7a:ac:bc:5d:f9:7e:7a:8e:f8:e6:
                    a5:9e:de:77:71:10:d5:f9:90:e6:90:96:bb:8a:19:
                    89:4c:3c:7b:28:32:53:6b:e7:cb:1d:40:fa:96:18:
                    81:da:8d:62:bf:b9:84:73:29:50:b4:12:ca:7d:5e:
                    4e:06:ea:4a:64:50:56:87:d7:ba:7f:f3:1b:02:dd:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E5:E9:FD:61:36:BC:2D:2F:78:E7:91:A4:6D:5D:4F:94:4D:41:3F
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:52:60:ff:be:24:79:e2:35:44:ec:25:63:92:ce:09:9f:e2:
         bc:89:59:db:d7:a9:2e:05:98:f4:ad:ec:1a:4b:9a:ab:3e:7d:
         3c:2c:52:6e:59:10:40:fb:db:e1:07:0d:62:54:04:9b:58:a5:
         79:8b:86:0a:8d:6d:cd:e8:ac:58:9f:b6:87:94:cd:7d:9a:c2:
         72:2c:53:e3:19:23:7b:7f:fe:77:17:81:aa:7d:32:e2:5f:a1:
         33:fc:29:81:d2:76:c9:18:ee:29:2e:cf:3a:ed:cb:2f:ce:4c:
         bd:e8:22:ea:0f:90:de:b5:9e:d2:46:26:4d:7f:33:9c:af:4d:
         3e:ec:8f:f0:e3:da:0d:53:09:0f:d5:24:71:23:75:b8:fc:d3:
         7c:f6:5f:f3:0f:9c:41:63:2e:5d:4f:6e:ea:83:ba:c8:08:a2:
         bb:1c:06:5e:2c:0a:18:f9:b7:a7:1f:94:c6:0a:40:3c:8b:3a:
         49:06:f9:67:e5:5c:dd:c7:bb:56:74:7d:45:4a:20:5c:69:35:
         9b:44:6a:54:59:20:c0:4e:29:c9:63:79:99:6e:0d:cc:ef:d9:
         c3:e1:ea:f1:cd:1f:4b:64:da:f5:0e:cf:2f:7a:eb:3b:3c:fd:
         26:3d:b5:7d:38:09:28:90:73:2f:c0:ce:90:e5:9d:64:44:32:
         e3:39:18:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vtz3UKjbHdkxxTe+2kHESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjIyNjUwMDQ4MTA3OTE4YWRmMWIyMmNkZjA4N2M4YTgz
NGY3OWMwHhcNMjYwNzI0MjAwMDQxWhcNMjYwNzI1MjAwMDQxWjAzMTEwLwYDVQQD
EyhiY2U1ZTlmZDYxMzZiYzJkMmY3OGU3OTFhNDZkNWQ0Zjk0NGQ0MTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwbEDKFwqNF9SwL+fNjpy+ZcBiuT
Waxr17evkJlX62EVrcm0pnDkF+YghSh3emVo3qbnfXUcMc1ABvFZvV7VG/2afYkB
6tNwl5J/DV5S5Wrv2mDx/04S6W4EjwAMQWAgo3W1hhh5N5FoMrJ8saifVXjeh2Uq
X24UoUUZodf0qYSRJIAlLf2A/xXpktnacpGdw7tTuVIn8BoZwdynjzDV4LN4cPI/
ESPlYfvvM3dwQ5b3k56riXl4gnqsvF35fnqO+Oalnt53cRDV+ZDmkJa7ihmJTDx7
KDJTa+fLHUD6lhiB2o1iv7mEcylQtBLKfV5OBupKZFBWh9e6f/MbAt2+YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzl6f1hNrwtL3jnkaRtXU+UTUE/MB8GA1UdIwQY
MBaAFBliJlAEgQeRit8bIs3wh8ioNPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNTAyYzEtZjMxNC00MGIxLWEwMjQt
OGQxMGZlZTU4NGZlLzEvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jNTAyYzEtZjMxNC00MGIxLWEwMjQtOGQxMGZlZTU4NGZl
LzEvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1Jg/74k
eeI1ROwlY5LOCZ/ivIlZ29epLgWY9K3sGkuaqz59PCxSblkQQPvb4QcNYlQEm1il
eYuGCo1tzeisWJ+2h5TNfZrCcixT4xkje3/+dxeBqn0y4l+hM/wpgdJ2yRjuKS7P
Ou3LL85Mvegi6g+Q3rWe0kYmTX8znK9NPuyP8OPaDVMJD9UkcSN1uPzTfPZf8w+c
QWMuXU9u6oO6yAiiuxwGXiwKGPm3px+UxgpAPIs6SQb5Z+Vc3ce7VnR9RUogXGk1
m0RqVFkgwE4pyWN5mW4NzO/Zw+Hq8c0fS2Ta9Q7PL3rrOzz9Jj21fTgJKJBzL8DO
kOWdZEQy4zkYkA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:32 2026 by rpki-client