Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File:                     giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier:          hPCcoMCNkIc7MRhHm9oP1dRYc3Gv5AcbEc5kqRRj56Y=
Subject key identifier:   9C:AE:A9:4D:8E:84:1D:F5:28:1A:07:7E:92:7E:08:8E:0D:36:13:17
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer:       /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial:       019F916C4AFE498784C7F1DA94542678E9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number:          1957
Signing time:             Fri 24 Jul 2026 00:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:20 +0000
Files and hashes:         1: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: iHy+ug3mcmF5isBwnNUFvZ/vceF9uuAVKziso512iBE=)
                          2: zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa (hash: LZDUp9nuJRfFK7K/b0GgwAZrAzR3hWtlaKiCODrTlMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:4a:fe:49:87:84:c7:f1:da:94:54:26:78:e9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
        Validity
            Not Before: Jul 24 00:00:20 2026 GMT
            Not After : Jul 25 00:00:20 2026 GMT
        Subject: CN=9caea94d8e841df5281a077e927e088e0d361317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:5b:ef:7a:cb:3f:07:c4:a6:fd:6c:8b:0d:
                    26:46:a3:aa:7a:1f:69:0d:0a:4d:de:64:89:95:2a:
                    8c:01:54:a8:9e:e3:b3:f0:5e:6c:90:e2:d5:8d:fe:
                    c0:8c:da:f5:3e:47:2b:86:8e:b9:8d:bd:61:1a:06:
                    7e:8f:23:19:58:5e:a8:27:5e:7f:83:e2:26:88:70:
                    19:ac:b9:45:61:4d:fa:90:aa:2b:f3:18:5d:17:e9:
                    92:95:86:ca:ec:4c:7b:1e:64:e6:e4:46:36:0a:d1:
                    bf:c7:b6:c3:b7:c7:78:97:fb:f9:50:f3:13:0e:95:
                    e4:81:44:85:8a:6b:46:67:80:89:b5:be:fe:17:8b:
                    8d:c5:15:bb:7c:e8:a4:c9:84:77:4d:7d:64:76:8c:
                    14:87:d6:b7:e4:8c:39:f1:a1:14:97:66:ec:cf:d2:
                    58:e3:c9:f4:8a:cc:5f:d4:ea:7c:92:59:42:50:44:
                    6d:83:61:bb:ba:31:c7:21:11:cd:46:00:c6:75:d4:
                    5f:ff:27:33:f5:99:14:26:26:1e:cc:3e:88:a5:4d:
                    73:f9:ea:bf:d2:28:a6:52:2c:f9:35:0c:39:93:3e:
                    ac:2a:cf:9a:ef:fd:4f:e2:91:5f:b3:e5:d7:9f:f2:
                    d7:b0:7f:29:42:23:60:de:2c:ce:a0:a6:5b:30:89:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AE:A9:4D:8E:84:1D:F5:28:1A:07:7E:92:7E:08:8E:0D:36:13:17
            X509v3 Authority Key Identifier:
                keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:cd:81:69:69:30:7c:25:2e:44:b0:87:94:bd:65:bb:4b:b7:
         17:1a:6f:5d:5b:00:77:56:94:5e:24:f6:68:47:ed:3e:0b:57:
         cf:40:95:7f:37:97:f4:71:c8:87:29:97:46:21:bc:da:36:99:
         21:72:9e:62:7e:66:fe:45:a3:83:f4:2f:00:0f:7b:9a:bc:d3:
         f5:ee:ea:a0:0c:cf:d1:61:b7:0a:ac:76:62:e2:5e:22:c0:bf:
         65:91:85:fe:74:b8:ac:d0:c7:7e:0f:74:7b:85:9a:db:24:21:
         40:b9:0f:89:54:0e:0b:90:3e:36:1d:a6:3e:04:59:a9:7e:d4:
         2f:7f:56:b9:c0:92:47:bb:5a:0e:e2:61:c0:3d:ae:d7:28:c0:
         6c:70:a9:a1:cc:d4:37:ad:53:a8:13:2e:50:13:a5:4d:64:57:
         21:ea:64:5d:92:b6:7d:d2:a7:59:f5:ca:e1:51:83:d8:30:f3:
         cf:26:7d:f0:2a:b6:60:ae:c5:9c:92:96:84:cd:6a:47:fc:6e:
         76:45:11:5b:e3:42:6a:d9:38:46:4e:a7:b4:60:3e:b6:84:da:
         4d:98:c1:97:af:cd:44:54:98:e5:8f:c4:f7:5f:0a:a7:d3:48:
         69:0a:da:59:d3:41:39:c8:7a:55:b3:a5:2c:ec:7b:44:ca:06:
         dd:d7:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:23 2026 by rpki-client