Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File:                     GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier:          ho9wfcdJZTBm/SLVLF69dlYaGr6esdGOTWiw7R334e4=
Subject key identifier:   7A:D3:21:0E:B4:BD:A8:17:C8:D8:D0:56:22:65:2B:52:56:5E:C3:42
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer:       /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial:       019F932403C1FE7051A100F788FACDDE26CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number:          027B
Signing time:             Fri 24 Jul 2026 08:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:38 +0000
Files and hashes:         1: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
                          2: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: 8dViSWjlnMh7r6dlgbozYPytK4COUHpF+OB4hzOvvZQ=)
                          3: REiaLPFJMgnbb32-B6MU-uTjIlI.roa (hash: nKuK7TPAmuzDf184++qSMR2f3U6nDVTJDG8nEA5Zshs=)
                          4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
                          5: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
                          6: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
                          7: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:03:c1:fe:70:51:a1:00:f7:88:fa:cd:de:26:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
        Validity
            Not Before: Jul 24 08:00:38 2026 GMT
            Not After : Jul 25 08:00:38 2026 GMT
        Subject: CN=7ad3210eb4bda817c8d8d05622652b52565ec342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:51:55:b0:6c:db:91:bd:f8:8d:17:19:0a:
                    1a:7e:b8:b9:98:83:5a:89:7e:ed:ee:7a:84:08:93:
                    b4:05:bb:25:d6:cd:73:d0:13:cc:e7:c9:e3:62:4b:
                    a5:0f:68:51:d1:dd:b2:46:02:7a:7d:25:1b:5b:1c:
                    ce:72:c4:ed:a3:41:85:53:60:f8:ea:8e:31:5d:96:
                    f6:84:8c:10:08:67:69:15:94:34:ad:e0:30:ba:ce:
                    aa:24:5a:fd:29:06:57:d3:64:cc:2f:61:c9:30:2e:
                    f9:9d:a9:5d:fe:a6:6b:90:ac:e5:51:99:4f:65:2d:
                    c1:86:d1:c7:7f:aa:8c:b2:32:85:c9:3b:06:73:83:
                    c6:58:03:bd:7b:47:4e:d4:c6:a7:76:76:ff:a8:8f:
                    25:07:40:79:59:8a:fc:ac:34:fe:e7:ed:f2:e2:3b:
                    b0:24:bd:9d:82:f1:c7:f0:df:b6:77:4d:c0:24:a3:
                    ff:aa:89:e4:d3:0a:cd:ed:8e:58:c9:ee:db:bf:0f:
                    6b:2b:d7:f2:8d:60:81:df:59:85:29:02:c1:a4:b7:
                    fb:9e:55:fe:98:01:62:f6:12:bb:bf:90:ee:cf:7a:
                    50:0c:5a:b8:46:ef:a6:34:21:75:d0:c0:ab:95:1d:
                    44:59:d2:a4:28:fc:42:21:20:c5:1a:42:cf:ad:71:
                    77:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D3:21:0E:B4:BD:A8:17:C8:D8:D0:56:22:65:2B:52:56:5E:C3:42
            X509v3 Authority Key Identifier:
                keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fc:dd:28:dc:1d:41:7a:25:cb:6d:8a:86:a6:8e:a1:33:f7:
         73:1c:2e:1b:4a:56:ef:6c:0c:a6:61:f8:22:2e:4c:1e:4b:b2:
         0c:de:2e:fe:4d:61:ed:b9:de:74:c1:b3:38:01:a2:db:b9:ff:
         22:95:87:14:1b:75:bb:94:34:43:6b:61:73:1b:1c:34:21:66:
         00:33:cb:69:74:5b:2b:64:71:91:bb:b5:71:e7:7c:3e:35:1f:
         64:8c:57:29:27:24:98:45:2c:9c:d6:82:bb:1a:05:06:da:5b:
         fe:bb:c4:d0:58:7d:8c:7a:93:6b:54:29:4f:f7:f0:8f:38:0f:
         04:f5:d1:2d:6d:f7:e3:48:e9:e4:3a:07:3c:6b:38:f2:c2:85:
         e1:48:84:55:4d:c7:16:01:ea:0a:13:a6:4a:2f:37:35:bc:0d:
         d4:01:43:86:b8:23:40:8b:d6:d8:0e:7b:c2:b0:d3:6c:b2:ef:
         ba:26:cd:8e:b6:3e:c7:6b:7e:24:fa:c7:68:72:a9:c2:8a:cc:
         f3:24:20:51:41:86:25:7d:72:d2:4e:6f:04:54:62:68:df:fb:
         56:c3:91:da:d6:29:f2:64:0a:8c:6b:c1:3a:b4:d5:82:02:b3:
         16:13:3b:ea:91:68:73:3c:61:82:7d:32:33:0f:65:31:f4:44:
         19:43:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:39 2026 by rpki-client