Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File:                     G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier:          kbPSeB5w+vHZZ0714JTGnvBQpH1a0Y1wijVZs1yCVLc=
Subject key identifier:   F6:C1:B7:81:AF:F9:D6:BB:92:0C:C9:B7:D3:78:68:6F:B4:0C:BE:A1
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer:       /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial:       019EE21EE5BA1BF42D7242B68114BA720A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number:          196E
Signing time:             Fri 19 Jun 2026 23:02:16 +0000
Manifest this update:     Fri 19 Jun 2026 23:02:16 +0000
Manifest next update:     Sat 20 Jun 2026 23:02:16 +0000
Files and hashes:         1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
                          2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: tqKkg3+70tXFruvQDY+weo7N0K4TKNGIXtYm53vKICA=)
                          3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:1e:e5:ba:1b:f4:2d:72:42:b6:81:14:ba:72:0a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
        Validity
            Not Before: Jun 19 23:02:16 2026 GMT
            Not After : Jun 20 23:02:16 2026 GMT
        Subject: CN=f6c1b781aff9d6bb920cc9b7d378686fb40cbea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:2f:b6:a3:7d:90:54:24:73:71:07:3d:9d:
                    a8:c8:c3:d3:8e:e8:cf:40:47:57:77:9a:7f:7a:09:
                    cb:93:94:24:09:fc:3a:27:6a:9a:be:ad:8c:12:ab:
                    5f:d9:f7:c5:df:28:02:29:d1:6c:e9:94:4b:6c:1b:
                    5a:90:e1:86:5a:a1:04:a3:05:32:6f:00:cb:ac:77:
                    67:b6:d9:26:54:1a:8a:ac:78:e2:ca:63:6e:8b:43:
                    17:6c:66:ae:aa:8f:b3:a3:ee:18:7b:c8:73:45:a9:
                    89:14:80:92:a4:69:0e:16:17:af:dc:3b:9f:45:bd:
                    df:41:9a:35:79:9f:93:4c:da:0a:ed:02:49:23:91:
                    28:f3:c5:00:ad:eb:2d:29:fa:db:5e:cd:95:da:38:
                    7a:d3:f3:6a:30:77:1d:fe:90:89:30:a7:57:25:f8:
                    1d:c0:dd:d5:b7:9e:16:6d:57:7a:f4:3a:31:3e:76:
                    55:0e:03:f2:3b:8c:99:d9:b2:cf:e0:40:f9:41:8c:
                    ac:20:f9:65:f3:cd:81:ac:08:ba:b0:42:f6:83:26:
                    72:1b:ac:2a:e6:0d:d0:71:1b:ee:4a:a9:e6:ec:0c:
                    57:6d:d9:87:ef:b8:14:de:d3:14:a2:0b:0c:00:2a:
                    e5:94:d6:34:72:56:db:05:42:8b:23:83:ed:f5:c9:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C1:B7:81:AF:F9:D6:BB:92:0C:C9:B7:D3:78:68:6F:B4:0C:BE:A1
            X509v3 Authority Key Identifier:
                keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:44:32:fc:07:f9:61:1c:90:b0:46:2c:cb:69:10:c0:3e:58:
         b7:fe:02:5b:36:c4:3d:98:ec:8f:6a:69:e1:63:fa:74:4e:09:
         8a:f5:55:f5:76:d9:9c:5e:72:fd:d7:e4:e0:34:60:a3:c8:a5:
         45:5a:8c:b6:35:40:bb:c7:86:83:12:a6:bb:32:5e:b1:0c:80:
         22:e1:b0:13:4e:3d:9d:4d:b2:79:bc:4d:79:29:81:02:90:2f:
         46:c8:00:50:3c:6c:c6:2b:8b:6e:04:c7:e2:41:64:9b:c0:98:
         e3:f2:96:b6:24:b9:4a:ea:33:78:f4:e8:e9:fc:ff:59:a4:1d:
         55:bd:97:d4:0a:94:3a:5e:e8:c3:48:aa:fc:6e:10:c1:f0:43:
         57:3f:33:f5:ee:77:c3:08:a6:5a:cc:f0:3d:e2:cf:7b:aa:00:
         c6:43:66:17:22:50:02:93:77:e4:59:50:7b:bd:e5:15:05:c4:
         48:97:d8:0e:fb:00:5b:e4:c2:48:fb:c5:90:8a:50:f1:0c:54:
         4f:65:0b:6f:2f:93:ac:88:ab:35:31:60:e1:69:a4:44:be:8e:
         dc:f3:3d:e1:33:11:3d:b9:92:e7:ce:0a:71:6a:7d:bb:7a:f8:
         9d:dd:9a:e7:f4:9d:07:5a:21:f1:fb:cd:83:da:0a:91:73:d7:
         48:a9:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:25:29 2026 by rpki-client