Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File:                     GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier:          4l7h3OQKtWVjxxMvor64AJJSYge1TJ/5ik4zZh5y8FY=
Subject key identifier:   F4:9D:8F:CD:2E:16:4A:A8:FD:57:35:E4:A0:AA:3C:A9:D6:0C:23:6D
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer:       /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial:       019F954986AB456B75B27DE59FAC61680E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 18:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:51 +0000
Files and hashes:         1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: kqZwGcNokgMSL36q/gFT6Z/xALQUGmRBDdDAeLUNe/s=)
                          2: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (hash: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:86:ab:45:6b:75:b2:7d:e5:9f:ac:61:68:0e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
        Validity
            Not Before: Jul 24 18:00:51 2026 GMT
            Not After : Jul 25 18:00:51 2026 GMT
        Subject: CN=f49d8fcd2e164aa8fd5735e4a0aa3ca9d60c236d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:50:18:68:1b:1f:19:3b:73:7e:b1:22:86:
                    fc:28:a4:50:54:32:a5:0c:2f:63:40:8c:5d:4a:e5:
                    bd:bf:24:b6:00:37:c2:e7:6a:f9:4d:a0:43:81:d6:
                    37:5a:ec:17:90:c4:7d:30:3b:ce:a3:c3:b2:cd:2d:
                    d3:67:4d:d3:70:2a:cf:94:4a:4c:76:e3:5b:7b:c7:
                    47:c1:bd:23:74:23:1b:57:26:f0:e3:8a:ab:74:13:
                    83:95:48:d0:fe:f9:9f:31:b8:66:2b:ad:b9:02:1a:
                    51:f3:85:67:15:a9:04:2d:2f:bb:28:3f:89:03:fd:
                    e8:30:57:94:f3:e5:e7:aa:fe:f0:65:3d:b8:2f:a9:
                    46:ea:51:20:3f:3e:06:4c:e7:14:94:68:ce:50:48:
                    29:77:a7:85:aa:ea:4d:35:28:c2:8c:8b:1e:ca:c7:
                    7a:50:56:31:6b:78:bc:75:ac:d0:93:70:3f:8e:e6:
                    fd:ee:6f:af:2b:25:e1:1f:0a:e7:9a:e6:81:b6:70:
                    69:aa:b4:f6:02:b7:b3:18:75:50:d7:ea:a4:7a:1d:
                    b9:f9:06:b7:a4:d0:8a:06:7a:a1:df:5e:7c:10:fd:
                    2f:b1:91:62:04:fa:56:10:a9:e6:21:d4:ff:7a:3d:
                    9c:e4:2d:77:12:ea:18:6f:ec:cd:bf:ee:72:12:4b:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9D:8F:CD:2E:16:4A:A8:FD:57:35:E4:A0:AA:3C:A9:D6:0C:23:6D
            X509v3 Authority Key Identifier:
                keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:8f:47:25:33:28:de:af:a1:92:ff:df:b4:cf:8f:cb:ec:
         16:09:ec:6b:50:d3:5d:3f:bb:86:37:4c:19:0d:ba:9c:77:8b:
         8e:c4:8e:58:58:bc:3f:3d:e4:f0:b4:1c:57:3a:d7:fd:07:09:
         17:71:e0:9c:aa:5f:b5:9b:22:79:50:59:2a:5a:08:fe:23:9e:
         de:23:a5:bb:d1:41:86:08:ed:11:c9:e4:d8:64:24:ad:50:d2:
         ca:5e:51:99:7b:92:29:03:39:f2:26:77:34:2c:dd:71:54:de:
         4a:10:37:d1:72:83:b1:da:12:4c:50:a9:f3:fe:a8:96:55:5e:
         62:df:17:01:53:e3:3e:2c:71:fa:d9:af:b6:4a:f7:b2:67:e7:
         3f:4e:ad:4f:fb:24:a9:07:68:ef:29:ab:8e:03:99:61:9f:8e:
         dd:43:ff:8f:5d:19:a4:f9:78:d6:3e:cc:b4:76:6d:97:08:fc:
         91:21:ce:d8:bf:a1:36:d7:d1:b6:58:55:98:b6:86:de:84:6d:
         77:61:af:d1:7e:4c:46:fe:c1:17:64:a7:16:bd:00:d1:f7:ca:
         a6:2e:f3:b4:92:b9:de:3c:ac:a2:4b:5c:1c:9e:30:58:43:c3:
         f7:03:fb:1f:6f:66:af:0f:cd:74:00:26:84:07:24:d7:b8:7e:
         e0:28:b1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:28 2026 by rpki-client