Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File:                     GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier:          D/kBihqW1QngY8iVtU4lUQNMN489e0AxOkKQbgQBgpw=
Subject key identifier:   EA:8B:61:91:D2:C7:0C:E0:21:FE:30:5E:D6:1F:BE:F8:D6:0E:E3:DA
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer:       /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial:       019F93C929BFE1A27B6600BBCE1EAD26C8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number:          0CDB
Signing time:             Fri 24 Jul 2026 11:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:01 +0000
Files and hashes:         1: 4siB5e1GQm-axBvoOugw52N_IkE.roa (hash: /3IxrvNXYC3JPq03y8Dq56bw9cEQPSNh5PVk8H407no=)
                          2: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: 9zmLqpphekdFdjZeP4+epKvvlzUHsaAggJKPm08KKRE=)
                          3: OoPG2MT4AbshroGKma-go4-mAqg.roa (hash: MmH8u7qEGNsEDukTF/vmrjDahE/w+pZkLOqm+xYo1ZE=)
                          4: ughKvz4zorztqh7yWUjfuuHBP5E.roa (hash: XOZZpijgX85rlrIVt7kzdBz4Rca7aZetcDWsBATSYMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:29:bf:e1:a2:7b:66:00:bb:ce:1e:ad:26:c8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
        Validity
            Not Before: Jul 24 11:01:01 2026 GMT
            Not After : Jul 25 11:01:01 2026 GMT
        Subject: CN=ea8b6191d2c70ce021fe305ed61fbef8d60ee3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:03:b0:07:69:f5:84:61:fe:b1:bc:79:a5:
                    43:0e:00:11:83:7c:6e:b2:57:b8:39:c4:a7:0a:28:
                    e9:a8:f9:61:ad:36:09:6a:6e:34:be:fc:06:5e:e7:
                    31:a5:8f:2c:26:2b:13:ac:17:6d:d4:70:a1:5b:65:
                    e7:14:17:3d:9b:fb:e1:a2:9c:82:38:01:69:aa:16:
                    b0:cf:eb:81:88:61:f2:33:e4:4b:a5:a6:bc:25:11:
                    b9:94:4c:7d:11:ce:85:3e:d0:84:f0:fb:a0:a8:be:
                    40:89:74:de:6c:e7:68:bb:43:72:35:2e:1c:91:94:
                    75:27:49:1a:6e:f9:6e:f2:0d:73:0c:1d:1a:0d:d8:
                    ae:42:a7:b0:80:30:5a:84:b4:fc:23:ac:a8:51:bd:
                    ee:5c:20:41:72:01:60:d8:5f:e1:0b:c6:41:9d:0a:
                    e8:2c:69:81:06:40:1f:22:55:9a:13:1b:ed:0e:92:
                    79:5f:8e:c1:1c:86:95:db:0b:cc:2f:c3:c7:41:48:
                    ba:24:fd:fd:ae:15:6b:cd:3a:95:d7:09:56:4d:5f:
                    58:0f:d5:19:ab:4b:6e:6e:15:19:5e:fc:b4:0d:2d:
                    9b:8f:60:cc:1f:e1:ca:57:16:1c:c5:8f:e5:24:a0:
                    78:68:46:9d:01:1d:68:c2:a5:71:73:ed:df:3e:b0:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8B:61:91:D2:C7:0C:E0:21:FE:30:5E:D6:1F:BE:F8:D6:0E:E3:DA
            X509v3 Authority Key Identifier:
                keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:2a:16:45:8d:80:eb:73:2a:20:aa:ce:28:e4:c3:28:80:
         8a:9e:4c:a8:51:d4:1a:7c:c5:d2:e8:99:93:ef:b0:bc:6d:cd:
         d3:10:18:d9:4c:54:ed:e4:26:29:47:f1:fa:59:95:8d:c5:7c:
         d7:64:d7:b5:44:4f:79:99:20:e0:b7:79:e9:a1:d2:bd:c7:25:
         e7:cb:a6:dc:16:26:1c:ab:33:eb:a5:00:80:7c:72:c7:7a:cc:
         59:0d:df:f6:91:13:c0:26:01:be:3a:66:be:48:67:43:30:c1:
         4b:0e:76:52:c0:ff:f8:66:95:8b:87:a3:d5:f3:43:a9:40:6f:
         40:7e:46:ae:e6:c2:2d:41:c3:04:9f:4a:64:82:38:2a:de:4f:
         be:f9:78:c0:7f:7a:68:89:60:83:67:4b:54:ac:2c:e9:70:09:
         25:4a:de:bb:2e:43:b5:e0:e8:a0:3c:1f:9c:af:2b:44:15:30:
         f4:ac:58:30:68:1d:89:3e:b5:89:c4:88:76:43:a6:04:80:c0:
         c5:90:bd:7e:36:ff:59:af:51:a7:7c:6a:1e:e0:63:40:0d:09:
         13:f7:91:65:f6:6d:8f:a9:9c:4b:be:78:12:41:6d:9e:45:f4:
         6b:96:56:da:31:72:52:fd:11:88:50:9f:74:52:01:1d:a7:96:
         34:2e:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:23 2026 by rpki-client