Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
File:                     1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft (raw, json)
Hash identifier:          WcMMjz8VT+mu2z6wj8SmFRD4dEIMDPyD7VhNTw9kWNQ=
Subject key identifier:   5D:9A:A2:CF:91:E8:AF:5A:A0:91:BC:65:31:33:B3:F4:19:D0:D1:E7
Authority key identifier: D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
Certificate issuer:       /CN=d46c4359926ac7f3acf8dc520e787a366271387c
Certificate serial:       019F935B08210053A2473364ECDFC0E5839D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
Manifest number:          07C8
Signing time:             Fri 24 Jul 2026 09:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:44 +0000
Files and hashes:         1: 1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl (hash: MfSVJIF5VNrn3q8Q7ZggOUxKV5SYPflP83pPePhGO30=)
                          2: SW1-GU0vjRIMOdgKtktv6UJ2u5A.roa (hash: HYXdjq1s2CF7qtOBfZMvLVsZCpKL4ygUQusnxbvr3Iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:08:21:00:53:a2:47:33:64:ec:df:c0:e5:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c4359926ac7f3acf8dc520e787a366271387c
        Validity
            Not Before: Jul 24 09:00:44 2026 GMT
            Not After : Jul 25 09:00:44 2026 GMT
        Subject: CN=5d9aa2cf91e8af5aa091bc653133b3f419d0d1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:58:3d:f2:43:61:1b:9a:0e:be:b8:e0:13:
                    24:0c:a7:e3:dd:22:b1:a1:01:a7:e2:59:9f:ed:fa:
                    cd:43:d6:8f:a7:5c:d7:26:c9:96:5c:74:e5:c3:c4:
                    e0:d4:ff:5e:c1:e0:94:7a:55:0f:ad:ee:1a:3d:2b:
                    a6:cb:52:2d:de:28:ab:df:7e:86:c5:cf:52:76:aa:
                    56:91:da:e1:7f:da:cb:30:8c:3d:68:e9:58:78:8e:
                    8a:e5:af:c5:bf:a3:f4:4c:be:77:08:4d:fe:db:8e:
                    b2:cf:da:a1:5c:c3:2e:f1:05:f1:b1:ae:24:8f:d4:
                    91:32:1c:d1:5e:47:cc:d0:80:80:21:ed:d0:11:5f:
                    d8:08:0f:7b:a4:7e:46:2e:53:ac:ca:ea:5e:be:88:
                    db:1d:4d:83:f0:66:e9:83:17:bc:ff:8f:1d:17:be:
                    b8:0c:e5:c9:3f:d9:49:9b:b4:24:68:8b:66:b8:57:
                    ef:9d:fb:27:50:eb:a5:2d:cd:92:55:3b:0f:cf:ca:
                    94:e5:8e:9e:9e:da:0b:4d:03:2e:c8:99:0d:9d:bc:
                    90:f8:19:35:b1:04:7a:03:06:c0:76:4c:d9:06:54:
                    5a:dc:25:0b:ec:30:d2:ce:76:ca:1f:37:ec:83:50:
                    33:01:5b:52:f1:eb:7e:86:42:59:51:e0:32:87:6c:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:A2:CF:91:E8:AF:5A:A0:91:BC:65:31:33:B3:F4:19:D0:D1:E7
            X509v3 Authority Key Identifier:
                keyid:D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:14:5e:6e:63:84:b7:22:31:21:2d:57:e9:e1:da:0a:a5:ed:
         b5:6c:6c:a4:15:6f:70:2b:c3:ea:89:d8:f0:d9:19:23:a1:4d:
         08:b1:e3:ab:8b:27:07:e9:04:2c:27:54:4b:e7:7a:95:7a:18:
         42:ba:7e:7a:85:01:4c:e9:8d:58:be:87:68:56:d1:1c:f8:fa:
         69:85:c0:2e:26:29:33:af:8f:fa:83:e7:c9:2d:d9:3b:3f:48:
         3b:d8:ff:c5:de:ff:b9:a7:9f:e4:ab:e2:3d:70:45:79:18:43:
         a2:72:a6:06:0f:e9:dc:da:c1:b3:fc:40:e5:c5:f0:c5:8b:4b:
         e1:27:07:80:9c:60:42:0c:db:30:b4:16:1c:da:84:12:10:80:
         0d:2a:0f:19:8c:41:91:e9:a0:38:8c:91:c8:af:11:76:56:67:
         e6:af:39:fc:7a:90:93:08:26:b3:8d:2e:89:83:ed:a1:0d:ac:
         95:aa:34:3a:5e:83:59:6c:94:d9:a7:48:22:ed:5c:d9:e8:bd:
         5c:a5:1f:60:bf:a1:f9:be:68:4e:74:7b:c1:09:b7:93:aa:23:
         11:62:2b:9a:07:41:ef:75:8d:33:59:53:5d:ee:63:15:8e:18:
         a0:42:d2:39:96:7e:42:f1:25:b7:a1:f8:9f:63:4c:66:55:37:
         a9:b0:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:14:04 2026 by rpki-client