Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File:                     GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier:          kUtAhVxT+WniaqsjLslHSkCwA4BhVcf3kCF15pghGyE=
Subject key identifier:   B7:E7:6D:C7:3C:D6:4B:3A:FE:DE:E9:D7:16:59:ED:4A:6F:FA:44:A7
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer:       /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial:       019F8EA2E9A2AD62BAB1F2FDFC1A7FF26D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number:          018F
Signing time:             Thu 23 Jul 2026 11:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:09 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:09 +0000
Files and hashes:         1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
                          2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: achEU9/u+WA9L4bnilebojO6/G+w4OD2B4Lt2SiBOdQ=)
                          3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:e9:a2:ad:62:ba:b1:f2:fd:fc:1a:7f:f2:6d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
        Validity
            Not Before: Jul 23 11:01:09 2026 GMT
            Not After : Jul 24 11:01:09 2026 GMT
        Subject: CN=b7e76dc73cd64b3afedee9d71659ed4a6ffa44a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:28:51:90:5f:92:74:7d:69:eb:61:db:d4:
                    ca:62:28:45:76:19:70:96:7c:42:16:fd:e6:e3:c8:
                    d6:02:e7:8a:1c:16:fa:53:50:5b:03:bc:bc:3f:fa:
                    0e:f9:26:67:83:e0:1e:16:a9:16:9b:b4:ae:2b:29:
                    d8:9c:61:86:6a:5f:08:ef:c7:02:fa:06:7c:68:cd:
                    d0:4d:4a:e1:a5:62:70:ac:57:a5:c7:7a:6a:ca:ed:
                    7b:29:0d:8f:16:59:de:40:28:64:2f:b9:89:a4:fb:
                    ce:33:d7:cd:90:f0:b4:02:29:ff:fb:2a:b2:f8:81:
                    75:6b:2d:30:4e:1c:4a:bf:7c:b5:c3:cc:d2:76:7d:
                    03:4d:11:92:30:81:26:15:b1:ad:84:d1:61:9f:7b:
                    50:0e:0a:15:45:65:d4:78:fe:ad:d7:44:d5:be:7e:
                    6e:f6:2c:c0:38:97:35:12:6b:be:c9:75:59:86:80:
                    19:a9:41:74:91:f6:08:01:25:6c:16:5a:98:5b:7f:
                    9f:da:8b:66:33:11:2a:51:44:28:66:be:f6:65:95:
                    12:b2:3c:6c:79:53:80:ba:0b:b6:c5:7b:03:4d:ea:
                    14:de:28:5f:88:20:12:8f:3c:9c:3b:76:d0:b3:73:
                    f5:8d:a3:5c:84:f2:c2:95:94:58:3c:ea:9d:22:dc:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E7:6D:C7:3C:D6:4B:3A:FE:DE:E9:D7:16:59:ED:4A:6F:FA:44:A7
            X509v3 Authority Key Identifier:
                keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:84:5e:eb:9c:8f:8b:6b:28:ff:15:d2:c9:a8:d3:79:ce:
         4e:e3:30:69:62:60:fe:b8:a0:bc:6f:8f:83:c6:69:97:b2:9e:
         23:da:01:a0:3c:03:74:ee:18:40:6d:82:96:86:2b:b4:d3:40:
         8a:cd:44:a7:cc:49:41:72:5f:d4:8c:52:da:a5:2f:56:d0:22:
         72:52:e7:a9:cd:5f:08:ac:49:30:bd:73:81:5c:4e:e0:53:9a:
         44:fe:5b:db:ac:3a:0d:40:98:f9:63:6a:5d:9a:fe:33:a8:63:
         f2:7a:77:40:54:71:a5:df:6c:6b:dc:5c:12:71:d0:3c:d9:45:
         86:c6:33:80:84:3a:f7:b9:e3:0f:13:b3:c2:2a:6a:d7:29:9f:
         53:81:65:79:9a:f3:b1:89:11:6b:3a:60:00:19:48:d3:63:07:
         8a:62:25:6b:3e:9e:eb:6f:25:6f:d4:93:fc:13:07:a3:9f:1c:
         6c:d7:ba:7b:7e:bd:22:c3:61:c3:43:57:6e:e1:9e:5f:03:20:
         fb:d6:67:56:3d:64:bf:92:d1:2c:ba:2a:49:46:2e:78:50:7e:
         65:dc:64:f5:c7:1f:69:90:82:13:9e:0a:aa:a2:28:76:27:17:
         f6:30:5d:a5:86:28:64:98:95:ef:2e:f9:ba:98:e5:57:fd:b9:
         53:16:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:30 2026 by rpki-client