Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File:                     GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier:          RAAht+RYtB6OG0v6u2aBKRk7JotfTyxHlYqPk8k1khc=
Subject key identifier:   7B:4F:70:51:D8:02:A1:B0:1F:8C:08:F0:B9:1A:54:04:A1:47:F0:CD
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer:       /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial:       019F9248DD1EAB41E80D2852B70044709CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number:          0E0C
Signing time:             Fri 24 Jul 2026 04:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:16 +0000
Files and hashes:         1: 8JSZWhyUYpRy8aBCdNPv83OhLzE.roa (hash: cRifW1LmyHI9b6LIEF+DhKfqeLjA5tpM2Wwz0m3WPJE=)
                          2: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=)
                          3: GiB2XPgzfAZoK37GjE41zRNuwfw.roa (hash: kt4wF2f4rJfLJ5yt1aN/zDgxy1rqy/Zyxyd2CL/+BiY=)
                          4: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: cPmwhe/W42zWWzAB6ZPgApAm9mSw8Ogz3O/IWz1y4a8=)
                          5: SMhGdBkdywnevpYEWhKr1IzaM4M.roa (hash: m3kf4ZVSNKzUhBPVSBlYDUaNyUcw0siodBs/T4U83BA=)
                          6: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=)
                          7: lx_DhApBbepgoPXpAWVMZkHOy4M.roa (hash: uguPsOnPbZyPw2Mv7U8Fmu1LMUcIDj3qTCfJ/Uhauy4=)
                          8: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=)
                          9: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:dd:1e:ab:41:e8:0d:28:52:b7:00:44:70:9c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
        Validity
            Not Before: Jul 24 04:01:16 2026 GMT
            Not After : Jul 25 04:01:16 2026 GMT
        Subject: CN=7b4f7051d802a1b01f8c08f0b91a5404a147f0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:b5:81:9c:40:21:5b:82:2a:95:62:a5:d7:
                    57:fe:cd:d8:5d:30:fb:6c:40:b8:0b:74:b2:45:33:
                    e6:3a:ca:44:a0:ea:c9:bc:ca:62:04:a6:33:1d:15:
                    5b:46:dd:31:38:c2:cb:d9:45:c2:a8:71:de:e4:31:
                    e6:38:6f:4d:d0:e0:a2:a1:7c:43:32:4d:e5:f6:12:
                    12:c8:28:75:39:07:10:af:38:99:41:60:a9:69:e7:
                    90:21:cd:1b:24:65:09:b4:05:a7:f4:12:01:ea:55:
                    01:5f:f0:1d:1c:4c:8a:37:00:c8:fc:a0:c0:7e:d0:
                    9f:88:7b:f5:59:9d:56:06:a3:42:7f:87:bd:cb:3c:
                    b3:9b:e0:86:35:28:43:91:e5:01:2c:98:b7:53:6b:
                    4d:42:8a:c9:75:2d:3e:e0:a0:a6:f7:ed:8c:a8:b1:
                    69:b8:10:c3:09:b5:a8:bd:7f:20:81:f2:95:cc:3b:
                    9a:fb:92:00:bc:dd:47:c4:72:7c:9f:3f:59:ef:a7:
                    46:98:06:02:24:51:46:12:3c:ab:7a:d2:6d:29:92:
                    2a:d4:66:cb:4e:0c:75:3e:30:a5:20:0b:ff:8e:fa:
                    47:6c:89:77:46:23:7a:6d:9c:6e:25:77:13:43:00:
                    86:c3:7f:70:4a:2b:ad:68:f5:11:45:1e:fc:23:67:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4F:70:51:D8:02:A1:B0:1F:8C:08:F0:B9:1A:54:04:A1:47:F0:CD
            X509v3 Authority Key Identifier:
                keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:d9:fe:af:74:f4:9b:bd:4a:af:72:1a:23:e0:da:69:0a:
         31:c8:95:73:40:3f:bd:9e:fd:3d:cd:fc:cd:cd:9a:50:e2:cb:
         35:ab:d3:7b:2f:5e:e8:7d:87:9b:12:9a:45:c3:2c:4c:6b:4e:
         51:da:a8:70:d4:14:31:c0:a3:5c:0a:ca:fe:95:fa:03:8b:d7:
         07:af:c0:14:5c:4c:7f:0f:4c:4b:47:66:7e:37:68:ba:ee:1a:
         3b:46:91:57:3a:93:25:53:49:b4:8e:6f:d1:41:04:33:9c:63:
         7f:8e:83:f3:f0:a7:f7:1e:ba:d6:ab:01:11:4a:29:32:59:08:
         f9:79:e0:93:29:50:4f:d9:6f:71:58:85:57:bc:bd:f6:95:bf:
         35:bf:36:03:c5:b3:ed:8a:6d:3f:da:b8:09:a0:87:e2:88:e3:
         c4:00:e7:7d:31:47:7d:0b:27:29:85:70:cb:d4:2a:d9:80:86:
         29:30:6e:0e:86:3b:1f:7e:dc:e8:33:b0:6a:25:13:0d:ed:b9:
         30:94:68:37:ac:8e:94:c0:40:a2:3f:68:61:f2:0c:16:67:33:
         b9:0e:3c:24:1b:ff:1b:e9:63:1f:be:cf:9a:6d:5d:8c:0f:25:
         49:41:9f:be:00:65:5a:18:02:31:1b:92:50:90:98:50:ea:77:
         38:bc:d6:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSN0eq0HoDShStwBEcJykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjYwNzI0MDQwMTE2WhcNMjYwNzI1MDQwMTE2WjAzMTEwLwYDVQQD
Eyg3YjRmNzA1MWQ4MDJhMWIwMWY4YzA4ZjBiOTFhNTQwNGExNDdmMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo21gZxAIVuCKpVipddX/s3YXTD7
bEC4C3SyRTPmOspEoOrJvMpiBKYzHRVbRt0xOMLL2UXCqHHe5DHmOG9N0OCioXxD
Mk3l9hISyCh1OQcQrziZQWCpaeeQIc0bJGUJtAWn9BIB6lUBX/AdHEyKNwDI/KDA
ftCfiHv1WZ1WBqNCf4e9yzyzm+CGNShDkeUBLJi3U2tNQorJdS0+4KCm9+2MqLFp
uBDDCbWovX8ggfKVzDua+5IAvN1HxHJ8nz9Z76dGmAYCJFFGEjyretJtKZIq1GbL
Tgx1PjClIAv/jvpHbIl3RiN6bZxuJXcTQwCGw39wSiutaPURRR78I2ezeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtPcFHYAqGwH4wI8LkaVAShR/DNMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUjZ/q90
9Ju9Sq9yGiPg2mkKMciVc0A/vZ79Pc38zc2aUOLLNavTey9e6H2HmxKaRcMsTGtO
UdqocNQUMcCjXArK/pX6A4vXB6/AFFxMfw9MS0dmfjdouu4aO0aRVzqTJVNJtI5v
0UEEM5xjf46D8/Cn9x661qsBEUopMlkI+XngkylQT9lvcViFV7y99pW/Nb82A8Wz
7YptP9q4CaCH4ojjxADnfTFHfQsnKYVwy9Qq2YCGKTBuDoY7H37c6DOwaiUTDe25
MJRoN6yOlMBAoj9oYfIMFmczuQ48JBv/G+ljH77Pmm1djA8lSUGfvgBlWhgCMRuS
UJCYUOp3OLzWog==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:50 2026 by rpki-client