Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File:                     gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier:          nZOP4GMHrBnRWSS/eEVxuayJ+ejQEC/LhheUAqPL4+g=
Subject key identifier:   3A:58:CE:E6:DA:92:B7:27:E0:93:A2:6B:92:D7:81:79:CF:A1:32:13
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer:       /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial:       019F92B5D9691CFA966786CE01FFC19FFD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number:          1340
Signing time:             Fri 24 Jul 2026 06:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:18 +0000
Files and hashes:         1: OJQiev2wZVG1ocXpX4-0xyIDLu8.roa (hash: P2/t8LDWw8ZhLGGXRvorDGL2cHxIBux66GV2OQKjLoE=)
                          2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: lsHes4esL/v3M4NsWdr1LvQvSs/Sq9/gtem9UOOTfJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:d9:69:1c:fa:96:67:86:ce:01:ff:c1:9f:fd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
        Validity
            Not Before: Jul 24 06:00:18 2026 GMT
            Not After : Jul 25 06:00:18 2026 GMT
        Subject: CN=3a58cee6da92b727e093a26b92d78179cfa13213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:6d:19:80:f4:49:6a:09:d5:a4:b2:ba:3b:
                    02:6d:c5:ca:12:ca:b7:a4:fa:e4:55:11:9a:a5:e9:
                    b2:17:8e:78:61:6a:d4:ed:9e:6f:44:89:95:79:58:
                    09:5b:6c:72:ad:bd:dd:c4:df:04:a6:52:99:aa:6d:
                    f3:26:d7:86:7f:78:35:a3:58:2c:d2:78:f3:32:bd:
                    3c:a2:95:9d:49:ca:6f:ec:21:fb:2d:ba:63:6c:e4:
                    ba:11:19:62:ef:d2:6d:97:8f:1f:fa:16:55:21:5c:
                    58:64:7b:50:56:61:86:df:07:05:db:82:89:8a:0d:
                    49:45:1c:7b:04:cf:d9:c2:97:93:37:0f:f3:f9:f0:
                    d4:fe:a0:fa:29:e5:9b:57:d4:9d:16:e7:0a:77:04:
                    0e:5d:68:c7:e5:1b:b4:87:c2:0d:ec:6e:51:03:9e:
                    b1:ea:b4:7c:73:8a:ae:21:d9:dd:e0:c2:4d:43:33:
                    f4:0c:8e:0b:52:9c:6a:20:c4:90:21:b6:c7:a5:3a:
                    bd:67:33:9c:ef:15:15:1d:e5:41:b1:4c:d5:52:48:
                    86:92:cd:96:c2:37:f5:0a:bb:c2:da:60:ed:94:ec:
                    75:ec:f9:ac:57:8c:24:93:f3:74:38:41:d7:18:97:
                    8e:0d:64:1a:48:2b:fb:d2:40:15:69:31:03:93:2a:
                    54:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:58:CE:E6:DA:92:B7:27:E0:93:A2:6B:92:D7:81:79:CF:A1:32:13
            X509v3 Authority Key Identifier:
                keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:43:28:87:a2:2e:d9:a9:cc:ad:cc:1a:39:d6:a0:e4:37:f7:
         99:34:b7:f5:17:9e:6f:d4:f7:28:73:df:e5:09:7c:27:02:c9:
         14:59:97:47:e3:a4:4e:c3:a3:99:ba:75:f5:35:d4:c7:8f:ff:
         14:c0:6a:db:d0:b1:be:25:74:a6:61:01:bc:9a:15:74:96:4e:
         93:35:df:13:ab:61:da:eb:d5:fc:5e:7f:0f:f7:93:cb:fe:fd:
         04:57:d1:11:39:db:03:db:3e:d9:e4:81:6e:8f:ab:e2:b1:22:
         35:7f:28:b0:88:4f:4e:23:47:45:0f:10:3d:20:fc:fd:b8:b9:
         29:a4:b1:50:6e:e8:04:19:e9:cf:3b:54:17:f3:6b:54:98:dc:
         26:27:a7:83:3c:82:02:0e:35:ca:01:f8:2d:41:4d:4c:3e:93:
         63:dc:aa:fb:96:98:5b:99:63:7b:54:92:1f:51:3b:b7:79:de:
         14:29:77:f0:93:10:a2:27:8a:ba:44:a3:17:05:ed:93:ff:84:
         ba:52:1f:4a:86:8f:16:d3:bb:e2:f7:df:46:84:fb:30:9a:f8:
         9e:de:63:95:61:7f:0a:cf:04:9c:ff:b2:55:80:87:ed:95:73:
         e8:b2:e9:57:a0:85:99:a6:57:b2:f0:75:28:f6:d4:7d:b3:ad:
         43:6d:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:46:39 2026 by rpki-client