Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
File:                     gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft (raw, json)
Hash identifier:          hDHuuSIVJuu1Sg0DHow9xKnWgFala55JPS1249iruGg=
Subject key identifier:   99:56:9F:72:7E:1B:9F:DC:D6:05:BF:57:34:B7:29:80:57:3B:E1:01
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Certificate issuer:       /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial:       019F954A81C8CC03F7C2D5FDA6B9D2F72697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
Manifest number:          0206
Signing time:             Fri 24 Jul 2026 18:01:55 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:55 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:55 +0000
Files and hashes:         1: 8RuluZQlRmxS5liK5WCiaw4-rPs.asa (hash: 0elw691q/DOTcT4KkqOkd4B3/A9WMyuwKne0j6qHRw8=)
                          2: gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl (hash: FTdjJnHlntMFKeheS06xNZkTfgIB6ue8jgKTRpPmR14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:81:c8:cc:03:f7:c2:d5:fd:a6:b9:d2:f7:26:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
        Validity
            Not Before: Jul 24 18:01:55 2026 GMT
            Not After : Jul 25 18:01:55 2026 GMT
        Subject: CN=99569f727e1b9fdcd605bf5734b72980573be101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:5f:88:e4:7a:a2:9a:77:0a:c0:5b:83:0b:
                    a5:d0:1e:51:a4:ab:dc:34:06:1b:fa:b2:62:2e:89:
                    7d:d9:d5:5d:af:b3:1a:9e:95:52:4c:ef:a4:cb:1d:
                    80:02:8f:33:15:c7:e8:55:12:43:79:37:07:f4:61:
                    61:40:25:ef:bd:b0:42:9b:84:fa:8d:95:67:b4:82:
                    44:18:f1:71:b9:5c:84:a1:b8:39:d0:b9:99:2c:e1:
                    a2:29:5e:36:63:6d:d6:ef:0f:de:3d:7d:bc:ef:be:
                    e9:4f:18:c8:3d:9f:2b:0d:83:31:e5:06:e4:38:82:
                    82:3a:a4:29:02:36:90:d5:56:8e:bb:65:f3:a8:0f:
                    80:4e:51:35:2a:27:95:64:70:25:93:85:9b:19:54:
                    81:ba:44:e0:1a:0a:3e:ef:d3:45:20:89:ca:4c:2f:
                    31:3b:d0:9c:89:6c:9b:41:8a:cc:c3:8e:19:07:57:
                    a1:b7:4a:1b:96:aa:36:bd:fe:18:a4:c5:8f:ae:f2:
                    e3:31:20:43:30:2e:0c:66:01:33:0a:2b:77:fb:4f:
                    f1:df:38:b1:ea:ff:5a:11:54:72:74:0c:3a:f6:c2:
                    df:87:df:69:5e:c9:de:a5:b4:02:54:01:20:fb:61:
                    35:3e:a6:94:60:cf:0c:e3:0f:50:fe:74:c4:b3:87:
                    83:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:56:9F:72:7E:1B:9F:DC:D6:05:BF:57:34:B7:29:80:57:3B:E1:01
            X509v3 Authority Key Identifier:
                keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:36:5b:09:46:eb:ec:64:a5:97:db:e4:76:46:d5:2a:ed:16:
         2d:f3:99:57:0e:73:e6:fa:b4:16:32:27:24:85:23:c8:e3:77:
         61:9c:33:f7:5e:90:cc:2c:bc:93:7b:40:72:f7:9b:57:fb:af:
         33:2b:08:4f:ba:2e:d6:75:e8:a3:ed:85:7c:1b:97:a6:3b:35:
         00:56:f9:5a:16:9d:6a:4b:9d:d3:fd:cf:80:7c:68:15:48:29:
         09:a9:f3:60:bb:51:c4:0e:2a:92:cb:0b:dd:5e:91:b6:f6:8c:
         fe:43:f8:e0:6c:4d:66:e9:95:55:c8:b9:20:2f:78:6f:51:21:
         60:9b:ba:3c:e3:f2:64:1e:fc:26:ff:55:62:02:67:ec:e2:57:
         45:e3:ae:0e:d3:2d:f2:09:b5:54:22:9d:58:d5:58:05:23:12:
         96:c2:e6:61:bd:c1:53:4c:18:cc:7b:81:f4:15:11:62:33:a5:
         27:9a:b1:dd:f6:d9:ec:8f:d9:a0:93:72:25:35:38:21:d6:45:
         c9:12:74:4c:4f:eb:4f:44:e3:5a:2c:b7:b4:a0:ef:cc:c7:c2:
         e0:1e:8a:ce:76:93:d9:c2:f8:37:d7:c2:74:81:53:bf:0b:30:
         af:df:3f:93:39:b6:b7:9e:45:06:90:2e:f8:ab:88:22:8c:a6:
         50:65:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:18 2026 by rpki-client