Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File:                     1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier:          4GqVOB5BFyiNpXbP4wwz4+yK8IAIHxXMSCrSozvjIOY=
Subject key identifier:   76:AB:F4:53:B7:20:CE:3C:85:37:A8:A6:8B:02:E6:33:D4:FB:B6:77
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer:       /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial:       019F189E69AA260CFB16EC01A2731F546DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number:          13B8
Signing time:             Tue 30 Jun 2026 13:01:02 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:02 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:02 +0000
Files and hashes:         1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: AFbEWFQ0qYCbfCx8kRkUFuoh/CBT8Aa4tAWa5LApLP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:69:aa:26:0c:fb:16:ec:01:a2:73:1f:54:6d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
        Validity
            Not Before: Jun 30 13:01:02 2026 GMT
            Not After : Jul  1 13:01:02 2026 GMT
        Subject: CN=76abf453b720ce3c8537a8a68b02e633d4fbb677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:48:b2:43:6d:9d:69:2e:e9:ea:e0:f2:a3:
                    de:09:6a:89:57:6d:22:ed:98:f0:3e:14:d8:50:22:
                    01:35:26:46:68:f2:99:4e:66:ba:72:9a:8c:2d:23:
                    99:2f:9a:b3:b4:26:91:eb:4c:32:9f:59:3c:02:b1:
                    5a:6c:de:4e:95:20:74:20:95:a5:44:10:61:b8:ff:
                    23:06:8c:b9:c8:a0:33:46:8c:cc:a0:42:51:64:f1:
                    e5:d0:db:81:d6:38:f4:39:0b:6d:e4:e7:e1:2a:7d:
                    4b:49:81:94:94:9e:c2:d0:e8:be:ed:62:4b:54:a9:
                    1f:81:92:a1:2c:e8:43:3d:98:13:1f:7a:d0:0a:cb:
                    a8:5b:ce:d9:39:98:1e:e5:14:b9:8f:6f:97:4b:53:
                    4d:03:0c:dd:f3:c7:4e:7f:e0:5a:69:dd:3a:2b:20:
                    fc:81:63:51:07:e8:97:21:bb:3d:d3:93:6b:46:cb:
                    86:4e:60:ac:f6:c3:49:c1:0f:a3:e4:b6:55:67:42:
                    42:a0:1f:c5:cc:21:13:8c:fb:e3:a6:73:d5:99:68:
                    1f:38:bb:fd:ca:8d:b9:b5:4e:f7:3a:3a:27:2d:aa:
                    a1:9d:35:a3:85:7c:ea:d7:54:77:97:ee:5a:e5:62:
                    12:c8:ba:f2:cc:17:37:dd:73:0c:6d:e8:76:78:fb:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AB:F4:53:B7:20:CE:3C:85:37:A8:A6:8B:02:E6:33:D4:FB:B6:77
            X509v3 Authority Key Identifier:
                keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:61:01:a8:25:68:33:75:89:49:cb:72:78:2e:44:be:69:
         15:8c:bd:d5:34:b3:70:00:d3:37:8f:29:37:e9:77:62:fc:68:
         db:8d:47:13:62:e3:aa:61:16:c3:68:ce:da:56:52:81:92:ad:
         02:28:72:7d:db:48:a7:ad:2f:64:54:e9:8b:ae:1a:c4:1b:cc:
         2b:9f:fe:c3:68:08:6e:95:54:d2:3b:fb:f4:fb:a8:1d:68:45:
         b6:bf:c0:fd:46:f2:ec:09:03:d2:8e:14:12:20:72:27:36:95:
         34:6a:4b:f1:b2:43:90:35:0f:e7:75:d0:e4:2f:0c:1f:43:fe:
         97:f1:18:ec:65:d1:32:e8:7e:f3:56:61:96:08:37:f6:ee:e5:
         d1:61:57:bb:fb:21:85:67:9b:7a:4e:c2:16:80:c4:ff:17:50:
         6f:49:cd:15:89:a2:34:85:6d:e3:12:b3:09:01:58:43:20:10:
         9f:3e:cd:60:54:99:50:28:90:b1:d0:8c:66:e7:f6:58:a6:31:
         73:71:cb:18:75:a1:3a:1e:ff:e7:7c:a5:2a:dd:9c:92:31:e9:
         c9:97:d4:bf:b1:d7:45:d0:43:47:34:a1:38:7c:bc:c5:ce:41:
         19:7c:05:4c:53:10:1a:69:95:8b:41:0d:c8:b1:46:fd:72:81:
         05:8f:43:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnmmqJgz7FuwBonMfVG3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk4NjdkMWQ2OTNlNzlhNmE1ZWU5MDE0ZTQxM2YwMzll
YjUwZDgwHhcNMjYwNjMwMTMwMTAyWhcNMjYwNzAxMTMwMTAyWjAzMTEwLwYDVQQD
Eyg3NmFiZjQ1M2I3MjBjZTNjODUzN2E4YTY4YjAyZTYzM2Q0ZmJiNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu5IskNtnWku6erg8qPeCWqJV20i
7ZjwPhTYUCIBNSZGaPKZTma6cpqMLSOZL5qztCaR60wyn1k8ArFabN5OlSB0IJWl
RBBhuP8jBoy5yKAzRozMoEJRZPHl0NuB1jj0OQtt5OfhKn1LSYGUlJ7C0Oi+7WJL
VKkfgZKhLOhDPZgTH3rQCsuoW87ZOZge5RS5j2+XS1NNAwzd88dOf+Baad06KyD8
gWNRB+iXIbs905NrRsuGTmCs9sNJwQ+j5LZVZ0JCoB/FzCETjPvjpnPVmWgfOLv9
yo25tU73OjonLaqhnTWjhXzq11R3l+5a5WISyLryzBc33XMMbeh2ePtwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHar9FO3IM48hTeoposC5jPU+7Z3MB8GA1UdIwQY
MBaAFNRphn0daT55pqXukBTkE/A561DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iNDg1ZDktZWVkYy00NzA2LWE5ZTYt
NDFkZTk3ZGM5YjZjLzEvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iNDg1ZDktZWVkYy00NzA2LWE5ZTYtNDFkZTk3ZGM5YjZj
LzEvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgphAagl
aDN1iUnLcnguRL5pFYy91TSzcADTN48pN+l3Yvxo241HE2LjqmEWw2jO2lZSgZKt
AihyfdtIp60vZFTpi64axBvMK5/+w2gIbpVU0jv79PuoHWhFtr/A/Uby7AkD0o4U
EiByJzaVNGpL8bJDkDUP53XQ5C8MH0P+l/EY7GXRMuh+81Zhlgg39u7l0WFXu/sh
hWebek7CFoDE/xdQb0nNFYmiNIVt4xKzCQFYQyAQnz7NYFSZUCiQsdCMZuf2WKYx
c3HLGHWhOh7/53ylKt2ckjHpyZfUv7HXRdBDRzShOHy8xc5BGXwFTFMQGmmVi0EN
yLFG/XKBBY9Dxw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:56 2026 by rpki-client