Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File:                     gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier:          SFM2M7Vh1uiqUPtZE0jtlL9AkW55nbonBf2moz9vD3w=
Subject key identifier:   7F:D8:6C:F7:36:B4:AC:3D:4B:38:29:EA:B9:E7:B7:AB:A8:D5:FF:6B
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer:       /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial:       019F9549F751D91880E0AEFFA8FB387694B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 18:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:20 +0000
Files and hashes:         1: Iu9PnHVM0LSwUFID8vLNCNKzD-U.roa (hash: tU7O1VjjD0lcgYnwOxVPASyTAKDrVm8qOBVH6F4eICY=)
                          2: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: mm7qYhOv1oXK6oljcMPOTbEXfq5FJ+nI3NicS1+ofzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:f7:51:d9:18:80:e0:ae:ff:a8:fb:38:76:94:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
        Validity
            Not Before: Jul 24 18:01:20 2026 GMT
            Not After : Jul 25 18:01:20 2026 GMT
        Subject: CN=7fd86cf736b4ac3d4b3829eab9e7b7aba8d5ff6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:31:b4:e6:b7:f5:11:82:5b:8c:52:33:2a:
                    cd:eb:eb:3b:50:0a:c9:49:c4:e1:0a:b2:34:c2:54:
                    b2:94:c0:0f:8b:bb:67:67:08:07:7f:67:69:84:42:
                    e7:bb:f5:3c:30:31:fe:69:55:6f:c9:f1:1f:5e:30:
                    7d:3f:db:51:ed:af:3d:3c:fa:d9:c0:20:eb:8b:74:
                    4f:a1:f7:ba:86:bb:67:a3:1a:f4:67:20:09:19:82:
                    39:0f:ec:d6:09:0b:e1:e1:32:a8:41:cd:b3:93:29:
                    2e:c6:f1:c9:7c:d2:55:f3:3c:e4:d4:74:00:fc:d9:
                    ca:24:2c:41:3c:45:06:68:f1:77:35:fb:88:4c:3e:
                    45:1d:e8:10:e6:70:df:1b:9f:c2:14:53:8e:91:41:
                    78:ae:dc:4e:72:76:19:90:1b:c5:9d:81:da:25:fd:
                    e1:c1:d3:cf:46:de:dc:9a:4e:b5:0e:2f:d8:97:6d:
                    b2:38:f2:55:2b:47:88:92:bc:f0:cb:02:0f:9c:46:
                    8d:f1:08:32:62:45:b5:69:b3:d8:3e:3c:9d:01:e3:
                    5c:4e:c8:8f:c6:1a:9e:b9:b3:28:b1:be:92:9b:28:
                    b8:46:cb:6a:13:a4:ef:e5:a5:d7:89:ec:23:b6:32:
                    01:a2:d7:d5:d1:3c:b8:fa:81:dc:f1:22:c3:b8:64:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D8:6C:F7:36:B4:AC:3D:4B:38:29:EA:B9:E7:B7:AB:A8:D5:FF:6B
            X509v3 Authority Key Identifier:
                keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:fd:08:71:2e:5f:b4:06:3f:0c:41:c4:c6:65:d0:dc:22:37:
         9a:34:97:2a:79:3d:b4:2d:47:8b:6b:ad:41:e0:74:80:af:fb:
         22:11:b4:b3:5f:f1:f8:34:10:37:e4:a9:52:e6:4a:4b:b9:a5:
         aa:75:79:4d:89:5c:b5:54:6c:be:b5:0a:af:91:76:e9:4d:05:
         b7:c4:bd:53:80:ae:b4:cd:3c:26:ea:21:d3:30:37:86:3f:fc:
         84:0f:62:35:6d:7e:62:f8:09:54:53:59:b1:d5:75:46:84:f6:
         b3:00:83:d7:dc:11:ef:48:48:2e:c1:f2:8c:e9:5d:ba:47:e9:
         92:83:fe:97:68:f5:ce:f5:1c:1f:f1:34:dc:56:50:5a:c4:0a:
         93:9d:ce:18:d1:4e:94:6b:c7:7e:b8:f4:6f:e3:20:c2:8d:7d:
         f9:3b:63:9a:2a:d5:f3:b2:92:f5:59:0c:2a:b2:b8:c2:5b:60:
         a3:e2:f2:89:71:5b:f2:0b:0e:f6:6c:d9:f8:7a:7c:a9:c4:42:
         8a:db:df:28:11:b8:b8:8a:a8:69:f5:8d:ce:a7:e9:03:b7:e4:
         bb:2f:50:d1:37:c3:ac:7a:5f:d9:6e:e3:10:9e:92:ef:6d:cb:
         7e:0b:ab:8c:b4:29:ef:af:ce:f9:63:6d:1e:d9:d3:63:4a:17:
         27:fe:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:58 2026 by rpki-client