Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          yPTVZVR9QtgCMQmFKaPb9tNHFOvAlflSNAjB/IgN2ZE=
Subject key identifier:   E4:F4:B9:2A:81:64:40:4A:8D:2C:02:B1:BD:13:9A:A5:A3:6C:BA:6C
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       019F91DA1CC21853633D7FD4473AA989A812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 02:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:18 +0000
Files and hashes:         1: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (hash: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: lJeRLsHf/sTzO4K/5/bjI3WoZFUy5U8Pd5m2UJtF3F8=)
                          3: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (hash: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M=)
                          4: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (hash: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8=)
                          5: xoTCt08cS7BgB_IaDphUNXFIRxo.roa (hash: s3xQf9aSy+8qTNIu1cEAABJrY28zwSkcrisFpnI+ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:1c:c2:18:53:63:3d:7f:d4:47:3a:a9:89:a8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Jul 24 02:00:18 2026 GMT
            Not After : Jul 25 02:00:18 2026 GMT
        Subject: CN=e4f4b92a8164404a8d2c02b1bd139aa5a36cba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:d4:c2:d9:ca:f9:66:25:4a:42:81:1c:84:
                    92:1c:38:c9:8a:69:64:21:c1:0f:8c:8e:99:3e:0a:
                    eb:da:38:68:f0:bc:ac:b1:c5:d7:4c:3a:38:0e:8e:
                    91:44:c9:6f:c2:f0:1e:3b:ad:f6:c0:ae:ce:e2:d4:
                    35:f6:6d:2a:91:b3:1e:04:4a:db:5e:de:7e:72:6b:
                    6d:94:65:6d:e5:83:8e:4c:c0:3f:fb:6e:81:41:b2:
                    af:48:34:73:eb:d4:02:44:05:92:7e:57:7f:61:21:
                    fd:b3:aa:55:2d:04:b5:d5:e9:6b:f8:5b:42:8b:cc:
                    50:d8:3f:5c:df:55:ee:78:87:b1:d6:17:6c:fe:6f:
                    83:f4:63:a2:9a:61:30:f8:07:ab:ba:bb:57:5b:f0:
                    21:39:c9:2c:a1:77:07:33:10:7a:04:35:52:8e:9f:
                    df:1e:ed:d5:35:2b:4b:6c:04:c1:76:3e:fd:63:b1:
                    20:d5:ed:e9:18:b2:7d:42:6c:2d:43:7c:95:55:b7:
                    29:0b:d5:dc:2e:df:f5:6d:53:35:68:ae:5a:2f:19:
                    5d:d5:ed:d5:e9:da:0c:7c:0e:9e:c9:cf:74:53:bc:
                    24:17:e2:19:3b:80:55:77:d4:52:a5:fe:c9:1c:cf:
                    d0:de:c5:70:59:92:e0:f4:c6:71:5b:d0:ec:70:5d:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F4:B9:2A:81:64:40:4A:8D:2C:02:B1:BD:13:9A:A5:A3:6C:BA:6C
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b4:fe:b7:e3:24:3d:d0:f4:b7:16:23:2d:79:d6:3e:db:a6:
         f7:05:9a:ef:eb:f2:36:d8:4d:a5:7d:3c:5c:41:38:78:c2:50:
         ed:27:64:98:d6:a6:42:77:95:d6:08:48:49:8e:69:c0:3f:4e:
         0b:5f:75:a9:ac:38:e2:4b:e6:cb:9c:fb:d2:7a:82:61:52:af:
         71:b3:5b:03:49:5e:6f:27:a4:71:b7:a1:ac:5c:f7:70:1b:61:
         38:2a:13:32:78:8d:54:45:ba:ae:48:aa:1e:98:e7:c0:05:3e:
         d8:ab:68:92:47:61:5e:79:ab:86:d4:24:c8:11:75:b0:ac:d0:
         ba:01:c3:29:f2:69:38:19:aa:6b:89:09:48:c8:0f:4b:3f:49:
         be:90:8c:7b:60:e8:b1:35:38:cd:36:f3:1e:f3:d1:01:b7:90:
         67:1c:8b:28:38:cc:1a:7f:a3:0e:35:01:48:55:84:98:aa:69:
         1c:a1:cb:26:6e:e9:8d:5f:6a:40:99:52:d1:9a:f0:db:bf:ec:
         de:4f:b5:eb:54:e9:1f:dd:ff:65:12:b4:6c:8e:4d:e1:e6:af:
         22:dd:1b:fb:4f:13:89:ee:ac:24:16:17:c2:b5:14:12:55:a9:
         40:a7:5d:dd:b2:df:9b:e0:0c:bc:1b:bd:82:05:fd:ed:10:e0:
         66:6e:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:41 2026 by rpki-client