Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
File:                     gV1MO26b-NpPoYWDUtVnCXSU64A.mft (raw, json)
Hash identifier:          0ketfLh4FQE41EGFk3QSamiSncr/Y0lvSCozsl88YnQ=
Subject key identifier:   7B:DF:A7:FB:BA:A6:54:5D:AD:14:13:5B:63:46:64:F9:AE:30:9D:EB
Authority key identifier: 81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
Certificate issuer:       /CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Certificate serial:       019F935BB0AADFB809B5A77B0B40A15335E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:01:27 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:27 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:27 +0000
Files and hashes:         1: 9OSNQHYwP7hMCYqH3m4FGoNr2h0.roa (hash: oI3UIYnZEeaaqKn53u1eLaxo0kke+QgwtslSgUJGtVo=)
                          2: eS4B6UGXaj1jtg698wa76I6I9s0.roa (hash: ee1yHXEYh01F57rf9ic6LVAj3dkGow/zQH8cnd6TnOc=)
                          3: gV1MO26b-NpPoYWDUtVnCXSU64A.crl (hash: 5eaTKBQ5KRiPgyI80/3L7IXA56Vm5p5psvr9M2s5q3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:b0:aa:df:b8:09:b5:a7:7b:0b:40:a1:53:35:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
        Validity
            Not Before: Jul 24 09:01:27 2026 GMT
            Not After : Jul 25 09:01:27 2026 GMT
        Subject: CN=7bdfa7fbbaa6545dad14135b634664f9ae309deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:a8:88:a8:a7:b4:37:3e:7c:09:13:c8:69:
                    46:07:cc:9e:1f:48:e9:43:f3:be:09:ff:6e:b6:48:
                    05:23:02:80:3b:92:8b:de:56:c4:e1:2b:a2:fd:de:
                    60:a5:2a:ff:a2:65:40:da:30:25:f8:b1:e4:ce:d8:
                    ea:fc:4c:7b:b9:1e:27:36:3e:5d:4c:b7:ac:a1:37:
                    5d:62:fb:85:8e:ca:5b:28:e7:50:5c:b9:26:ff:0f:
                    6e:27:85:fb:e4:81:f7:ce:ab:2a:c4:31:eb:4e:67:
                    36:37:57:00:b9:d1:c4:20:87:aa:60:84:6a:8f:f1:
                    9d:6e:84:87:24:ac:da:3b:d6:ad:d3:60:4d:9f:d7:
                    ac:35:af:b0:59:10:24:03:cd:1f:28:b5:5a:ba:89:
                    c8:ae:3e:95:f0:99:75:70:0b:ca:58:ae:b3:20:05:
                    77:e6:db:cd:6f:99:21:67:fd:98:76:a1:34:a0:6b:
                    6e:7b:7a:ec:d4:a7:2e:d8:de:69:c5:61:a4:01:7e:
                    df:52:8f:be:3a:c8:88:39:f8:00:3e:7e:c2:72:42:
                    0c:18:c0:dd:d2:21:92:76:bd:18:bb:fe:63:07:f7:
                    b6:ab:82:10:c9:fe:dc:8d:3b:2b:ad:95:d7:4d:c6:
                    25:aa:a4:1a:cf:58:ee:41:e5:77:cb:66:1a:bd:38:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DF:A7:FB:BA:A6:54:5D:AD:14:13:5B:63:46:64:F9:AE:30:9D:EB
            X509v3 Authority Key Identifier:
                keyid:81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:b4:48:f0:14:25:6b:cb:a3:f4:1e:eb:1a:f4:e5:d2:95:
         4c:84:3f:4e:6d:1a:dd:1c:06:86:f1:a9:94:3a:8b:02:b8:09:
         b1:66:93:55:90:af:52:68:95:0b:84:95:fe:b7:c9:a4:82:43:
         7d:f0:e2:f8:95:61:3f:08:4c:cf:9d:df:7e:1a:7e:21:21:ef:
         46:ba:72:36:f5:85:6a:be:a2:de:c5:48:51:7b:d3:5b:3c:8e:
         23:16:96:99:4f:e9:41:ff:23:19:e2:a9:d8:fc:eb:ca:3b:db:
         8f:22:83:e2:7f:4b:85:64:79:b3:aa:88:25:9f:7b:ea:9d:d0:
         38:77:09:a8:91:75:61:80:10:05:0f:f8:eb:ad:d6:44:1d:41:
         ea:43:0f:94:03:45:41:08:8c:47:b6:6a:2a:5a:22:6b:d4:5a:
         bf:c8:a3:6c:48:8d:53:d2:94:7e:b6:d2:d1:ae:94:1e:df:9f:
         21:55:61:67:f3:d6:fe:62:44:68:da:ca:f1:a7:b1:50:95:9c:
         8b:26:14:11:8d:c1:18:fe:da:a5:2e:97:30:5e:c3:c8:7a:8d:
         af:11:c9:52:82:d3:80:07:ca:b3:c2:4e:11:61:39:45:91:f7:
         2c:9e:fe:59:6c:cc:de:60:cc:90:a2:40:6a:d3:ea:41:09:f7:
         89:2a:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:25 2026 by rpki-client