Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.mft
File:                     h-GynEd57d28D6KliBB7iU669t0.mft (raw, json)
Hash identifier:          sldo8YRVFzd15W/cWyJYQmFT2s4refq4Mduooa3dZSI=
Subject key identifier:   1F:41:B7:52:80:A8:B3:49:04:64:72:29:6D:77:3A:CF:8C:09:BB:CA
Authority key identifier: 87:E1:B2:9C:47:79:ED:DD:BC:0F:A2:A5:88:10:7B:89:4E:BA:F6:DD
Certificate issuer:       /CN=87e1b29c4779edddbc0fa2a588107b894ebaf6dd
Certificate serial:       019F90233B48F02C43FAF51C6C4661FFB722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.mft
Manifest number:          C8
Signing time:             Thu 23 Jul 2026 18:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:55 +0000
Files and hashes:         1: 7W9BcgnnRatme6L6_U0HezZdQWs.asa (hash: UPJkIO5CpHlOYi7OXRALJbxPkRF0yZ7EucNiwwilDKw=)
                          2: W_zENwIeQp6Hptdo1_E6v_V4xjc.asa (hash: cs6qKkFwS7puW3zPA3o1/g0nGOPsED+IC7XzDcZsfdc=)
                          3: XpkYVtb--kvZli-gjLhQHv0SRzY.roa (hash: 9YvzsHrnuK/DQCSv5fkfKk7czH+Jjir+tAOAMyYKWPE=)
                          4: h-GynEd57d28D6KliBB7iU669t0.crl (hash: KHQwSNTGSI1vBvIeSQEe0g+K1UY/2PDcm7OcFwj+Vto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:3b:48:f0:2c:43:fa:f5:1c:6c:46:61:ff:b7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87e1b29c4779edddbc0fa2a588107b894ebaf6dd
        Validity
            Not Before: Jul 23 18:00:55 2026 GMT
            Not After : Jul 24 18:00:55 2026 GMT
        Subject: CN=1f41b75280a8b349046472296d773acf8c09bbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:e8:04:97:0d:f6:7c:07:29:ce:0a:d8:70:
                    1b:82:90:fd:f3:72:3e:0d:32:b5:45:a1:43:11:9a:
                    4b:b1:ec:e8:2d:1e:81:fd:ed:13:db:c0:d4:c0:1e:
                    0a:86:1d:ff:aa:d2:9e:56:48:82:38:f5:cc:df:6b:
                    a9:75:27:55:58:12:7c:6d:79:43:ac:84:0d:0d:25:
                    5b:7f:60:b3:26:3c:9e:d2:e0:5a:ab:08:e8:57:7b:
                    7b:c2:80:72:84:25:76:55:d2:97:44:41:9d:a3:1b:
                    b3:4b:38:bb:a1:5d:12:f3:9c:12:3a:23:30:44:2f:
                    8f:d1:88:2d:53:b7:e8:36:12:eb:45:22:a7:0c:35:
                    11:3e:a7:5c:58:e5:11:b4:ed:f6:47:63:7c:77:12:
                    c5:3d:b9:cd:c7:9c:25:3b:a3:50:65:c3:b6:8f:cd:
                    ea:03:63:62:21:24:d6:02:f4:4f:d8:62:07:0b:cd:
                    84:b3:7b:df:f1:19:19:31:ad:30:53:96:7b:25:79:
                    a4:9d:85:c4:bb:19:26:2a:dc:35:69:0d:0a:e1:e5:
                    b5:28:7f:64:53:d8:92:2a:53:84:a9:9a:95:ed:30:
                    fc:ba:d3:82:ef:7e:90:da:3f:b2:eb:61:c4:9b:e2:
                    37:3f:19:d6:7d:b3:8c:7c:ba:b4:2a:61:43:30:de:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:41:B7:52:80:A8:B3:49:04:64:72:29:6D:77:3A:CF:8C:09:BB:CA
            X509v3 Authority Key Identifier:
                keyid:87:E1:B2:9C:47:79:ED:DD:BC:0F:A2:A5:88:10:7B:89:4E:BA:F6:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:6c:6c:2c:2b:29:a1:04:03:9d:ab:71:cc:90:05:fc:7c:
         fe:4e:82:50:7a:36:f3:21:2d:15:ac:0e:24:96:e0:9a:4e:bc:
         6c:92:43:de:97:a2:2d:9f:ab:54:32:2f:3d:ed:7d:47:14:e4:
         8b:d1:5e:8c:a2:5b:5a:52:4f:b6:0b:15:07:c8:27:cd:88:94:
         56:47:9e:1a:75:1a:b0:33:73:f3:43:a9:fc:14:77:1a:ac:e0:
         a9:7f:1c:4b:62:8e:b3:8d:f4:45:f8:78:d5:32:b9:61:f7:45:
         fc:2c:9f:b3:74:6e:ed:fb:0f:c5:f0:11:40:8b:ac:1a:46:3b:
         bd:e8:a6:33:61:60:ea:cb:81:e9:31:d9:8a:69:60:45:eb:6d:
         a6:05:6d:2b:a6:91:00:bb:0e:80:a5:2a:da:31:c6:eb:e9:d2:
         e4:bd:c0:e8:e5:4c:d5:a9:98:8a:1d:38:08:c8:af:14:ce:c3:
         c9:fd:16:d3:99:5f:5e:da:62:92:88:00:ec:4c:36:f7:a3:dd:
         67:17:e8:fa:33:aa:49:f2:c7:cb:8e:38:41:8e:d1:ed:c0:32:
         b0:83:aa:f6:67:ad:1b:9d:be:e3:4d:8f:86:ab:39:f2:45:65:
         61:91:d6:1a:70:20:9d:33:dc:2e:f4:5e:b0:49:7b:d7:ee:6b:
         77:c9:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:37 2026 by rpki-client