Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File:                     G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier:          5wkMmi1uEPa1EQObcJ7FZUz7/fn0xSCG1pes1xuXafo=
Subject key identifier:   7A:90:AA:3E:2B:50:44:E1:50:10:38:3A:6C:BE:41:09:0A:84:8C:AD
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer:       /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial:       019E32981D98FD96A9073CFDD2DCD34CD758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number:          1657
Signing time:             Sat 16 May 2026 21:01:30 +0000
Manifest this update:     Sat 16 May 2026 21:01:30 +0000
Manifest next update:     Sun 17 May 2026 21:01:30 +0000
Files and hashes:         1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: x8026onx9hzXH37ef8kHqtX8ssNCDOnOBcmxB1iF1tk=)
                          2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
                          3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
                          4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:98:1d:98:fd:96:a9:07:3c:fd:d2:dc:d3:4c:d7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
        Validity
            Not Before: May 16 21:01:30 2026 GMT
            Not After : May 17 21:01:30 2026 GMT
        Subject: CN=7a90aa3e2b5044e15010383a6cbe41090a848cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:1c:f1:f8:f9:68:bd:ff:7c:e4:31:38:8a:
                    14:0c:f9:2f:56:48:20:07:02:6e:b8:30:5e:89:1c:
                    8a:d0:a4:77:90:e2:87:e4:cc:19:66:85:ad:f8:f3:
                    35:00:5e:8f:05:b9:13:d3:7c:91:34:8f:7e:1d:ff:
                    ac:79:6b:2a:b7:99:07:95:7a:88:a4:ab:fd:f3:8b:
                    33:32:2d:3c:53:71:5b:73:08:59:a5:8d:64:4d:e8:
                    e3:7e:fa:c1:5b:11:ed:88:2a:04:47:57:72:49:a6:
                    bf:a4:27:2f:f7:bc:2c:69:73:67:e9:14:6d:c2:65:
                    3a:95:4c:40:e7:02:03:e8:08:5f:e3:a9:a8:1d:98:
                    24:dc:07:c3:21:f3:95:d0:b8:b4:cd:bb:30:c1:02:
                    db:6f:86:a9:ed:5f:28:5a:63:18:5e:02:62:9b:af:
                    99:c3:b8:2d:87:4c:81:9a:cc:95:da:b6:c0:0a:2d:
                    f5:90:56:fd:48:1a:b4:52:72:a5:77:d3:3b:c1:46:
                    a5:61:b3:1a:d9:93:8c:af:2e:47:13:fd:3d:97:08:
                    9a:be:53:c1:81:a2:ec:40:e1:63:bf:13:6d:dd:29:
                    02:9d:f9:79:64:c3:e2:b1:73:58:ee:48:08:e2:10:
                    d6:76:08:32:39:3a:f5:0d:a5:12:69:c6:fa:25:5e:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:90:AA:3E:2B:50:44:E1:50:10:38:3A:6C:BE:41:09:0A:84:8C:AD
            X509v3 Authority Key Identifier:
                keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f7:2d:1a:5a:14:f0:da:41:4d:0f:ac:f6:df:2a:0e:c7:18:
         c4:5e:4e:c9:bf:36:71:3d:d6:e8:41:b6:fe:94:24:57:48:5c:
         e9:f6:c2:86:d0:d0:30:60:b7:8c:30:6b:0a:15:2e:75:a1:42:
         1b:b7:a6:b2:a1:1a:98:be:a5:d3:21:46:5a:2a:69:2c:c1:2a:
         c8:ea:29:e1:1c:1b:c2:fe:54:e1:1a:7f:9d:61:cc:ba:3b:3f:
         87:b1:82:7b:07:18:eb:e1:4f:08:31:a4:45:95:bb:bd:a7:d8:
         e5:71:3c:10:2b:de:c1:40:56:db:30:d2:21:a7:4a:c0:88:ce:
         df:24:37:b9:15:e6:5a:5c:20:50:43:ae:5e:f5:90:d1:39:f1:
         25:e1:10:7e:9c:b3:9d:3b:55:84:0b:7b:55:be:38:22:67:60:
         97:79:31:0a:3d:28:45:bb:9b:6d:37:ec:88:1b:f0:b8:49:4f:
         2c:18:97:b1:e2:01:f2:d4:93:33:bf:80:4e:93:d4:c2:0b:b5:
         53:94:76:38:29:cf:7e:30:a7:75:fb:28:7e:32:53:56:67:36:
         fc:4a:ad:f9:b9:f9:bd:7a:34:84:0b:38:d0:4f:91:65:8b:03:
         cd:15:ff:07:73:a7:21:af:1d:e1:8a:11:c0:71:0e:5f:3c:a0:
         90:7b:96:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ymB2Y/ZapBzz90tzTTNdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYzE5OTRlYTYzZDUwZGJjOGI0M2FjZWNhZDI4NDJiNGRj
MTU3NTkwHhcNMjYwNTE2MjEwMTMwWhcNMjYwNTE3MjEwMTMwWjAzMTEwLwYDVQQD
Eyg3YTkwYWEzZTJiNTA0NGUxNTAxMDM4M2E2Y2JlNDEwOTBhODQ4Y2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Ac8fj5aL3/fOQxOIoUDPkvVkgg
BwJuuDBeiRyK0KR3kOKH5MwZZoWt+PM1AF6PBbkT03yRNI9+Hf+seWsqt5kHlXqI
pKv984szMi08U3FbcwhZpY1kTejjfvrBWxHtiCoER1dySaa/pCcv97wsaXNn6RRt
wmU6lUxA5wID6Ahf46moHZgk3AfDIfOV0Li0zbswwQLbb4ap7V8oWmMYXgJim6+Z
w7gth0yBmsyV2rbACi31kFb9SBq0UnKld9M7wUalYbMa2ZOMry5HE/09lwiavlPB
gaLsQOFjvxNt3SkCnfl5ZMPisXNY7kgI4hDWdggyOTr1DaUSacb6JV6+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqQqj4rUEThUBA4Omy+QQkKhIytMB8GA1UdIwQY
MBaAFBvBmU6mPVDbyLQ6zsrShCtNwVdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYt
YWY1ODY3NDc2MzA5LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYtYWY1ODY3NDc2MzA5
LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvctGloU
8NpBTQ+s9t8qDscYxF5Oyb82cT3W6EG2/pQkV0hc6fbChtDQMGC3jDBrChUudaFC
G7emsqEamL6l0yFGWippLMEqyOop4Rwbwv5U4Rp/nWHMujs/h7GCewcY6+FPCDGk
RZW7vafY5XE8ECvewUBW2zDSIadKwIjO3yQ3uRXmWlwgUEOuXvWQ0TnxJeEQfpyz
nTtVhAt7Vb44Imdgl3kxCj0oRbubbTfsiBvwuElPLBiXseIB8tSTM7+ATpPUwgu1
U5R2OCnPfjCndfsofjJTVmc2/Eqt+bn5vXo0hAs40E+RZYsDzRX/B3OnIa8d4YoR
wHEOXzygkHuWVw==
-----END CERTIFICATE-----
Generated at Sun May 17 00:29:34 2026 by rpki-client