Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          Xb6xlqcL6nI8Gh8LLaNpHLi3XDHUF2zQZGIhUNBwdhM=
Subject key identifier:   CF:87:44:7D:B7:64:60:2D:54:D9:4C:A8:9B:D7:30:58:95:76:4B:CA
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       019EB80F0B0BF6B14AA3CAEFD3D0DDB7726E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 19:00:53 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:53 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:53 +0000
Files and hashes:         1: BCswXhh13-96UzaS6jsy6o1xQtA.roa (hash: ZcV3c026LJ5PD6nm+askgP2WeXj6YnsPaEau8hz76oA=)
                          2: Bl5slAIXRPgWtIinsLCmL3-jbzk.roa (hash: i6BHS+hInLwE4GPTdlCdthLjEksUt9oFXu6hrkt0YCc=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: aZsfjMCeKgWqZI0nT4cQ8eeZduMyyFAQhL/OHQx/ThY=)
                          4: MULF19ROPV0W_fTYRqeyOCt3Yeg.roa (hash: JLSm0NR2yp/7sLvwbHrccBHG0dmWFI9G+KuJqUy4oRE=)
                          5: osuY-cnY6vhLD6H1gcoPAxb709k.roa (hash: uqRcFkq6jjVYOzdkGQsiVwhb9Q+ozJsUHkALBpXOot0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:0b:0b:f6:b1:4a:a3:ca:ef:d3:d0:dd:b7:72:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Jun 11 19:00:53 2026 GMT
            Not After : Jun 12 19:00:53 2026 GMT
        Subject: CN=cf87447db764602d54d94ca89bd7305895764bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:f7:f8:a1:aa:cb:c0:b4:a1:67:c6:99:10:
                    ba:da:b1:65:80:56:6e:ef:4c:fd:e7:4c:ff:4c:16:
                    6b:44:eb:60:89:1a:ec:19:2b:49:bb:ea:ad:41:f1:
                    94:d4:6e:31:52:5d:f2:37:8b:94:eb:df:61:7c:3f:
                    e0:21:cb:c5:3a:1c:e8:47:30:e9:ac:88:e2:f2:59:
                    42:7f:86:8a:89:d7:23:85:06:ef:9e:61:5b:26:47:
                    be:49:87:08:3f:fc:34:6d:33:69:37:b2:58:02:9c:
                    72:65:29:cb:22:2a:08:41:af:99:97:83:a8:b9:0e:
                    0f:fb:89:20:ac:63:c6:02:83:a8:5d:2f:d7:af:87:
                    ac:ef:78:f1:15:f9:9a:a3:65:6b:ac:6b:0e:12:17:
                    65:08:69:51:a4:2a:2a:86:4d:f3:ff:63:61:75:67:
                    5c:da:3c:62:86:0d:71:c1:15:77:a9:92:27:2b:11:
                    c2:de:93:33:34:69:0c:a1:44:a8:65:42:ac:95:2e:
                    95:10:bb:a1:19:27:0e:d1:29:cb:2d:bd:3e:3c:92:
                    91:61:9e:89:aa:0f:29:76:56:31:1c:f6:77:9c:87:
                    9c:8e:5f:87:dd:84:0c:08:6c:be:c5:02:ed:d0:b6:
                    f2:e7:df:4c:4d:f2:1e:ed:83:fd:d9:d9:63:86:02:
                    54:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:44:7D:B7:64:60:2D:54:D9:4C:A8:9B:D7:30:58:95:76:4B:CA
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:97:b7:ac:60:ff:4e:30:9b:51:ea:38:84:6c:11:c1:bd:
         09:56:7c:2c:df:7b:52:a2:6f:05:8a:4a:5c:5e:78:4f:39:f5:
         7a:2d:86:9d:59:32:09:e6:f0:2c:34:22:16:b3:b0:fb:21:a8:
         24:3d:e5:78:27:ce:9b:70:9d:f6:cd:c1:3e:73:a7:e6:06:93:
         13:e1:68:54:e1:80:ba:44:aa:26:5e:76:5f:96:60:75:1d:a2:
         8f:26:34:6d:57:e1:7d:94:ee:e6:34:9c:2f:19:d4:ef:4a:a7:
         ce:af:5a:18:19:90:93:4b:c7:2c:6b:4a:9a:e5:dd:f9:ea:b3:
         4d:47:c8:b1:3e:47:74:83:c6:11:18:2f:d1:9f:8d:01:46:eb:
         2a:4c:64:35:fe:1d:e7:7f:69:96:ad:80:e7:c2:5e:70:78:65:
         77:64:7a:b5:fb:89:ca:c5:45:e3:4f:f4:fd:20:4c:71:04:20:
         ce:25:c9:5e:e2:31:aa:7e:5c:5c:f0:f4:af:04:10:b0:f8:10:
         e6:c7:28:2d:df:b6:8e:fc:64:6c:98:8a:39:52:79:fd:54:69:
         5b:ae:6c:a8:46:7d:5a:e8:64:86:30:cd:52:6f:ad:79:5a:06:
         35:3a:da:58:90:4c:c4:c6:ea:69:71:2c:13:33:34:f3:dd:a9:
         9d:6b:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:58 2026 by rpki-client