Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
File:                     G9LUY64VNG1e3Xk3uL-o4JsUN20.mft (raw, json)
Hash identifier:          EGrQLFHaX79cPvboSkkp8ZAqhuNUP/axMRLci3UKiHI=
Subject key identifier:   94:71:A9:97:68:1D:AF:07:7F:E2:21:81:BF:BB:01:3A:04:58:5A:E0
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Certificate issuer:       /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial:       019F9247F4E8E5F396CFF8E007F7C1F37976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
Manifest number:          14A6
Signing time:             Fri 24 Jul 2026 04:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:16 +0000
Files and hashes:         1: Aa3-IX9Q5L903l6hxbaGkutiUDc.roa (hash: 86HjD4s9N7nHz6qRPx1oJDAQW0wNKeBRj+6qzWFQ0Mo=)
                          2: G9LUY64VNG1e3Xk3uL-o4JsUN20.crl (hash: MfTKppLvw2uoExAQ1J2SW+yU4KeCPUPzvYidcX2neXk=)
                          3: aFNhBsBj-ZBfP8L0NrUC_nO9pPg.roa (hash: HGwMoHWdFAfz3fMiL4Fa4RdLW7mO6LIOX2HFGuPp8Ys=)
                          4: edEUrHXeyIs0S-HknWeoeIPSRms.roa (hash: hIGtl5bcP13DHPOHJVKYk8Pv0tnGSP+tn+p7AAFcEDc=)
                          5: iTldB4zEBvTcpwV7r2_yT9tL9f0.roa (hash: OFds1nswtHe57QbWsYL+F1pMF391WdX7IZtfFU0BiUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:47:f4:e8:e5:f3:96:cf:f8:e0:07:f7:c1:f3:79:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
        Validity
            Not Before: Jul 24 04:00:16 2026 GMT
            Not After : Jul 25 04:00:16 2026 GMT
        Subject: CN=9471a997681daf077fe22181bfbb013a04585ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:a7:08:af:d4:5b:c2:36:85:34:e8:5c:8b:
                    13:79:d1:32:87:be:46:bb:d2:ca:cc:20:45:b3:52:
                    37:12:c3:25:eb:cf:90:52:48:82:7e:7e:e7:9d:aa:
                    e1:6a:ba:e8:c1:f3:e1:fd:cf:5a:89:7f:33:8b:8e:
                    f7:d2:a8:64:da:1f:0a:d8:a5:12:4e:2d:cb:53:ff:
                    93:3d:db:5d:ca:59:b7:f6:90:04:18:e5:e8:ab:15:
                    d1:85:cf:da:00:3e:b5:6e:1a:ce:5f:b7:67:2a:c3:
                    cf:31:58:66:15:76:b9:77:2e:49:e1:ca:b6:17:7d:
                    09:59:91:cd:83:69:f2:75:de:e9:db:af:7d:95:f4:
                    af:a7:58:0e:20:07:27:33:3d:72:de:b0:a5:3e:97:
                    dd:dd:24:13:18:db:ca:c3:f9:a0:f9:f4:f9:e9:d8:
                    b3:d2:5c:2a:ca:6c:ad:f7:22:a0:36:62:e2:dc:3c:
                    3d:62:05:3d:b7:31:82:5a:dc:71:68:f0:95:db:cd:
                    0d:0e:9c:ce:db:9d:ac:dd:f8:3a:7e:a3:d8:b6:d1:
                    20:f0:d9:ee:ab:11:3f:64:bb:bf:93:f4:aa:00:88:
                    81:92:b8:ac:5e:b8:1e:f0:08:fd:03:66:85:40:92:
                    ce:dc:35:96:b0:bd:5f:fb:fb:7e:1b:39:04:1a:b7:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:71:A9:97:68:1D:AF:07:7F:E2:21:81:BF:BB:01:3A:04:58:5A:E0
            X509v3 Authority Key Identifier:
                keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:9b:4f:86:01:35:45:65:64:8e:d3:db:34:bf:de:ec:b4:
         64:3f:6c:05:db:3c:1b:19:59:a1:7a:bc:4c:6d:7f:03:85:f3:
         ac:2a:23:d6:f6:68:a0:6a:67:bf:b9:fb:86:72:ff:b3:d5:30:
         a5:db:93:49:f4:b8:41:47:86:3e:2a:9f:48:fc:27:c7:ca:3b:
         5f:76:cd:a6:1b:81:81:fa:a0:17:b0:1b:c2:66:06:ab:f8:25:
         4e:18:d0:26:93:69:7a:45:92:e8:53:2f:78:65:8b:bb:50:d8:
         49:2e:d4:7b:24:31:7e:d4:1b:0e:a7:06:76:91:c4:22:fd:4d:
         8a:b8:ad:a0:28:b2:e6:37:b6:44:3a:1e:f8:ac:e8:9b:f9:6a:
         89:74:7d:21:1e:06:08:c6:d6:fd:8a:75:12:e5:2a:08:4c:e9:
         94:68:3d:e5:7f:c4:94:3f:51:69:78:70:e0:c6:d1:c6:27:77:
         2b:1c:ab:2e:50:17:1b:c9:fc:fa:61:35:ff:02:1f:6b:99:32:
         93:26:26:93:63:4f:f9:ac:d0:e4:83:0a:c1:cd:28:9d:fe:40:
         2b:2c:b3:6b:bb:e1:02:17:0d:c0:04:00:26:7b:a0:69:b6:1b:
         0b:c5:aa:91:93:4b:e1:8f:6a:17:31:d6:31:d9:1a:22:63:09:
         26:69:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:08 2026 by rpki-client