Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File:                     gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier:          COaldi/hIH99mSZH7iHIJY96Tww68N2ncCBIfjX7Cgs=
Subject key identifier:   F4:C9:A5:FD:F5:0E:35:86:CF:2C:46:A9:E5:9B:21:75:66:57:5B:01
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer:       /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial:       019EE556475514EEE179353BF2D93DDF9AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number:          0AB4
Signing time:             Sat 20 Jun 2026 14:01:37 +0000
Manifest this update:     Sat 20 Jun 2026 14:01:37 +0000
Manifest next update:     Sun 21 Jun 2026 14:01:37 +0000
Files and hashes:         1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: AAQbjjVRNtFLM89dRQ7qSnrpwLRekDpft/q1dPh2jso=)
                          2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e5:56:47:55:14:ee:e1:79:35:3b:f2:d9:3d:df:9a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
        Validity
            Not Before: Jun 20 14:01:37 2026 GMT
            Not After : Jun 21 14:01:37 2026 GMT
        Subject: CN=f4c9a5fdf50e3586cf2c46a9e59b217566575b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:8f:f0:0e:27:a3:d5:f7:d3:b7:25:cf:bf:
                    50:a1:aa:41:8f:45:a1:95:1a:56:41:b5:e0:53:22:
                    c6:72:f4:27:62:b9:ca:16:ac:52:25:eb:0e:3d:d2:
                    6c:88:55:c9:21:91:92:2b:ba:f5:6c:f6:5c:7d:63:
                    e3:d4:c4:77:b1:ae:cd:09:e2:fc:30:97:27:33:e3:
                    7d:9d:ac:60:f3:dc:98:fc:fc:c5:57:47:8d:18:8c:
                    15:e0:e0:91:be:c9:b5:39:90:7d:a3:39:2f:0c:89:
                    d6:5f:e1:94:b7:81:0f:f5:69:08:c2:f8:e8:8e:47:
                    29:05:88:a5:4c:0d:4c:f2:ac:62:b5:40:1e:da:47:
                    8a:a6:50:0c:0e:2b:30:13:5d:95:5d:85:a2:15:86:
                    95:72:56:34:ce:94:8c:9e:e8:f3:f0:ad:bf:52:ef:
                    08:4b:c5:14:c6:70:2d:0c:9c:75:ec:ad:ce:fd:4f:
                    4a:57:9b:58:86:ff:93:7c:39:1b:0b:95:18:d3:6e:
                    0b:fe:88:49:87:68:32:88:07:75:dd:56:6e:33:9f:
                    be:0e:7f:10:3f:91:c2:8f:12:01:e2:e4:42:68:f1:
                    a9:24:78:6c:78:6f:7c:32:4f:0f:82:b7:00:e4:dc:
                    12:4b:c4:b9:21:5a:60:52:c8:e6:b1:cd:32:c8:f0:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C9:A5:FD:F5:0E:35:86:CF:2C:46:A9:E5:9B:21:75:66:57:5B:01
            X509v3 Authority Key Identifier:
                keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3f:22:06:fe:e0:a2:85:4c:e8:a0:c9:41:89:f9:04:94:e5:
         15:21:e4:fb:15:29:be:c9:95:64:73:34:1b:32:d1:a4:67:15:
         78:47:ff:37:d7:6d:7c:68:8f:fb:c3:70:a5:49:74:52:5c:c7:
         b3:69:43:f2:80:57:67:7b:80:e1:f7:e1:27:d2:f6:7c:26:28:
         ad:6e:90:e8:fb:0b:6f:c8:7e:e4:e9:7d:94:56:5a:b9:25:ff:
         5b:18:b8:3b:d9:10:47:1a:66:9e:50:98:7d:85:76:93:b8:93:
         6e:e9:e1:92:97:10:20:b4:81:b2:78:aa:87:06:93:6e:76:0a:
         e1:f1:97:3a:e1:97:33:52:2a:43:d7:4d:57:bb:5a:cf:16:4d:
         2c:ba:1d:f2:38:94:d7:78:f2:70:20:09:bd:b5:91:1a:f1:a4:
         82:cf:dd:29:dc:c8:bc:51:89:de:2b:3f:dc:97:f7:d3:ff:0b:
         90:7f:4c:96:98:35:41:ed:d2:8b:44:18:13:ab:0d:da:ea:55:
         ba:7b:14:00:ad:a8:9d:8c:a5:dd:75:df:bb:dc:ef:8e:73:62:
         02:17:42:e3:8e:d0:b7:41:bd:7e:13:10:41:2c:84:cf:d8:29:
         09:61:9d:50:78:34:7a:94:0a:71:05:08:54:4f:a2:c6:f7:be:
         fc:2b:7f:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7lVkdVFO7heTU78tk935qtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0
MThkZjYwHhcNMjYwNjIwMTQwMTM3WhcNMjYwNjIxMTQwMTM3WjAzMTEwLwYDVQQD
EyhmNGM5YTVmZGY1MGUzNTg2Y2YyYzQ2YTllNTliMjE3NTY2NTc1YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdWP8A4no9X307clz79QoapBj0Wh
lRpWQbXgUyLGcvQnYrnKFqxSJesOPdJsiFXJIZGSK7r1bPZcfWPj1MR3sa7NCeL8
MJcnM+N9naxg89yY/PzFV0eNGIwV4OCRvsm1OZB9ozkvDInWX+GUt4EP9WkIwvjo
jkcpBYilTA1M8qxitUAe2keKplAMDiswE12VXYWiFYaVclY0zpSMnujz8K2/Uu8I
S8UUxnAtDJx17K3O/U9KV5tYhv+TfDkbC5UY024L/ohJh2gyiAd13VZuM5++Dn8Q
P5HCjxIB4uRCaPGpJHhseG98Mk8PgrcA5NwSS8S5IVpgUsjmsc0yyPCA9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTJpf31DjWGzyxGqeWbIXVmV1sBMB8GA1UdIwQY
MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct
NjNkZjYwMzE2MWM5LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5
LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAD8iBv7g
ooVM6KDJQYn5BJTlFSHk+xUpvsmVZHM0GzLRpGcVeEf/N9dtfGiP+8NwpUl0UlzH
s2lD8oBXZ3uA4ffhJ9L2fCYorW6Q6PsLb8h+5Ol9lFZauSX/Wxi4O9kQRxpmnlCY
fYV2k7iTbunhkpcQILSBsniqhwaTbnYK4fGXOuGXM1IqQ9dNV7tazxZNLLod8jiU
13jycCAJvbWRGvGkgs/dKdzIvFGJ3is/3Jf30/8LkH9Mlpg1Qe3Si0QYE6sN2upV
unsUAK2onYyl3XXfu9zvjnNiAhdC447Qt0G9fhMQQSyEz9gpCWGdUHg0epQKcQUI
VE+ixve+/Ct/xQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 16:53:58 2026 by rpki-client