Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          mMZjdby8uOmNsmlQmhbvHbTaWVmQ6DEwJCqbF99LIZc=
Subject key identifier:   3D:10:2F:E0:55:C9:68:BA:8C:23:04:17:52:C4:97:DE:AF:DC:16:F7
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       019F92ECEEC96B7B0DE545BCAE77A3E3F87E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0E46
Signing time:             Fri 24 Jul 2026 07:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:28 +0000
Files and hashes:         1: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (hash: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs=)
                          2: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: eM/EXg0mFCKyB2VkTnDom/Fc2U+Yrx6VbuZ2TNoQRE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:ee:c9:6b:7b:0d:e5:45:bc:ae:77:a3:e3:f8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Jul 24 07:00:28 2026 GMT
            Not After : Jul 25 07:00:28 2026 GMT
        Subject: CN=3d102fe055c968ba8c23041752c497deafdc16f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:24:07:fb:63:63:8b:54:12:12:89:3f:ac:
                    9d:59:98:2f:41:02:3c:c4:f4:f2:57:d3:d4:15:b5:
                    88:0f:cf:58:a7:fd:45:f3:3c:c3:45:92:4a:63:95:
                    f9:2b:14:cb:f3:b0:89:6a:1d:6b:e3:a9:45:d9:3f:
                    e7:5e:54:0e:03:8b:30:1f:80:ea:13:89:83:dd:8b:
                    bc:ff:db:44:3b:c1:4d:6d:eb:d6:83:42:8d:b2:87:
                    12:ad:63:fb:f7:c3:86:f3:dc:50:a9:dc:bb:77:3a:
                    3d:da:5e:13:20:33:0c:c6:96:f4:ba:16:b8:99:42:
                    e6:0f:18:3a:b3:65:3f:be:67:af:a2:23:24:f0:42:
                    e4:7c:71:76:a7:9b:cd:fb:d9:07:34:11:93:4c:a9:
                    f4:26:57:ad:f7:1a:28:3f:3a:1c:69:28:d2:de:7e:
                    b3:2b:cc:20:52:8f:b8:44:ca:24:e8:82:95:a7:2d:
                    af:7a:18:93:ec:f8:9a:24:33:c8:d8:e8:b7:06:8b:
                    66:03:7b:1e:94:1f:2f:93:85:1a:b0:07:ee:40:bf:
                    aa:83:83:c4:e1:f7:ae:c1:6e:90:1e:4c:60:a4:e4:
                    3d:02:27:b0:40:4b:6c:e1:c8:37:7c:b4:d0:96:5a:
                    15:f7:71:a3:8d:78:31:bd:51:b6:56:15:4a:71:84:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:10:2F:E0:55:C9:68:BA:8C:23:04:17:52:C4:97:DE:AF:DC:16:F7
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:6a:f3:3b:75:46:10:59:62:14:e8:55:5f:05:0c:2a:bb:
         5f:67:5e:1c:23:f9:4e:71:44:85:3e:07:12:ff:5d:46:70:db:
         72:e7:2b:39:76:34:28:35:40:74:2f:92:46:10:08:ff:84:79:
         66:5b:43:0c:a2:0c:f8:66:cd:fe:9e:e0:bb:be:e9:44:4a:35:
         76:05:25:6a:a3:d8:bd:8e:ae:4c:25:43:38:38:2c:c6:5a:9c:
         b5:b5:35:f4:8d:c8:cd:bc:53:06:d6:de:eb:5b:34:31:f1:1d:
         a2:2c:93:5e:95:66:4b:45:99:6f:34:58:5f:d6:b8:52:a1:4e:
         04:f9:d4:75:60:e7:4a:04:13:b1:5c:b2:d8:c7:06:78:51:a1:
         84:7f:06:09:9a:a1:00:88:d0:a4:0b:39:71:e9:9a:41:d4:ce:
         6f:42:41:9a:a2:95:14:6f:e3:23:e2:43:ec:e8:c4:3f:93:1d:
         f3:9a:f8:2a:61:ed:50:f4:b9:41:17:a1:fb:88:68:0a:76:46:
         29:0e:04:c5:e5:24:82:b4:05:28:37:20:1b:d4:84:3c:c4:2e:
         fa:24:53:5a:be:7f:53:8b:c8:f2:ec:b4:1c:ba:73:68:d3:fb:
         e3:0a:af:6d:14:3d:8e:4d:e9:ea:83:ba:ef:14:44:92:da:ac:
         9a:57:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:10 2026 by rpki-client