Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File:                     gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier:          mo/k2R5gQUvvDCmgW86VsQWLWZo+ZJJVhXEgemzEidc=
Subject key identifier:   99:7A:39:9B:A1:CE:75:80:A2:31:FE:C8:51:5B:14:FA:C8:30:1C:BB
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer:       /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial:       019F9022B49AB6D759B1AA8BBC34E87EAC83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number:          13BF
Signing time:             Thu 23 Jul 2026 18:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:21 +0000
Files and hashes:         1: 5eB4htWyGJDJwj6zhgzJLbW_4Rs.asa (hash: AMkYMX4Ub8J6QzakBaQUECXSyVGj24SQ4egirOIAq6E=)
                          2: Uhdd2LHjn5iOA9Ff6w9g0pvCay0.roa (hash: GWSvUjVdu1UDo6lvgspGXIRNDtNx+fESVlxZbXeFX7g=)
                          3: dUaacGCz13O8mwDRkLQ5vwgXcZw.roa (hash: 7Istxql6dso4eiRf+0awNNeqAEJpy1igpjA10pd+/TM=)
                          4: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: rF86N4bL/3xS0LeOQRQ9OXEAsvy3Uys0vK+0tqKYhPQ=)
                          5: lnH9C7HQoo7yeYbE56WHSLlD_TE.asa (hash: V5rxGHK5REBBYrckeqobdcgc6TTvp3rfULd5M0m28N0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:b4:9a:b6:d7:59:b1:aa:8b:bc:34:e8:7e:ac:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
        Validity
            Not Before: Jul 23 18:00:21 2026 GMT
            Not After : Jul 24 18:00:21 2026 GMT
        Subject: CN=997a399ba1ce7580a231fec8515b14fac8301cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d8:c6:62:69:9b:57:48:8c:a7:72:d4:99:e2:
                    4d:56:e0:c9:d2:53:e0:ad:0b:b9:5d:74:5c:21:c4:
                    7c:db:db:39:4e:c8:a6:c2:10:11:b2:b5:52:6e:02:
                    b8:4c:19:82:44:00:01:64:3b:be:de:c6:ca:ee:22:
                    81:b0:16:04:f2:9e:71:fd:a6:47:95:07:be:b7:de:
                    d4:fc:e4:08:82:ab:0e:7d:13:92:d0:d6:ab:0a:c1:
                    aa:33:7c:ba:cc:24:cf:c3:e7:dc:0e:4d:4d:4b:cf:
                    06:60:2c:3f:90:67:ed:90:1a:85:9a:a2:20:ff:74:
                    d9:34:01:00:db:59:56:b6:46:19:b8:2b:19:c8:da:
                    50:66:20:57:9c:6b:ef:5a:57:98:20:cf:48:2c:a2:
                    a9:90:1e:f3:46:29:1b:16:19:70:bb:b7:ce:24:b8:
                    57:fd:5d:14:b4:89:4a:9a:92:c8:33:5b:b6:99:13:
                    a7:29:de:4e:d7:df:71:69:13:c2:42:7c:f1:4c:4b:
                    9c:87:b8:0d:b1:1d:72:96:26:a5:b2:e3:70:2a:97:
                    ba:e6:46:d6:df:0f:ad:01:63:97:0a:fb:7e:93:81:
                    8e:38:af:f8:11:45:4f:ad:d5:28:37:f4:ea:22:28:
                    4a:7f:61:dd:80:6f:57:4d:23:2b:35:f4:d2:e6:9c:
                    e3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7A:39:9B:A1:CE:75:80:A2:31:FE:C8:51:5B:14:FA:C8:30:1C:BB
            X509v3 Authority Key Identifier:
                keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:3e:2a:15:06:4e:5d:93:fd:e6:81:fd:d3:83:a6:9c:13:
         9a:f9:6c:8a:37:5d:cf:b3:2f:bb:3b:0f:5b:f5:2a:0e:a0:67:
         24:f3:cf:0a:01:74:08:0d:f9:2e:e9:b4:0a:8d:ab:2d:52:91:
         3c:d0:43:6d:1a:14:f7:00:00:cd:7f:32:e7:b9:a7:4d:7f:a0:
         b1:84:bd:5c:28:8a:ec:40:cf:88:89:d4:c4:d2:e6:ad:95:97:
         b4:e5:68:a8:52:4a:ce:7f:e0:21:f0:c4:a1:fb:58:47:0e:9b:
         4c:5f:c8:86:5c:bf:06:42:7b:9b:bb:a5:28:1f:4a:b2:f9:46:
         b2:21:40:cf:1c:52:dd:2c:56:fd:92:31:dc:24:01:9c:60:89:
         ce:dc:ab:08:3a:85:31:4c:b9:ae:f9:72:8b:a0:b2:13:66:33:
         56:19:79:af:a7:54:f4:d2:f7:b0:3f:12:39:f0:4f:7d:fe:bc:
         2f:8a:f9:a5:f3:c1:06:e4:94:41:97:d9:46:e0:1f:4d:4d:13:
         aa:2f:4a:4d:31:5c:a7:2c:d7:18:46:66:b1:71:af:38:2c:58:
         25:4d:86:ac:2a:75:18:10:20:27:ce:3e:4e:41:9c:51:bf:5b:
         51:7d:1a:bc:b0:8b:d0:82:fc:62:db:e7:98:3e:39:f1:43:70:
         50:12:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:37 2026 by rpki-client