Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File:                     GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier:          KqyoSVi4uXBrRyJmHv9kEw1yPbAcLe+8Lf2M6LEIbfQ=
Subject key identifier:   7D:4C:89:24:CF:16:D5:F1:6D:C5:32:F0:0D:7C:FC:65:9F:2A:7D:65
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer:       /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial:       019F1AFAA38B08E8EC86C291C9E5655273D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number:          1987
Signing time:             Wed 01 Jul 2026 00:01:01 +0000
Manifest this update:     Wed 01 Jul 2026 00:01:01 +0000
Manifest next update:     Thu 02 Jul 2026 00:01:01 +0000
Files and hashes:         1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: U3G2i0Uszq8LjZvuHTSomy3973UVgAvG/oZdY6Puu38=)
                          2: TF0dSC0QLLTkTEwt9luFemTVApI.roa (hash: diyfKwUJkYthuVIKND7w8w0AKfmlP8CVwmqLuMhQpO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fa:a3:8b:08:e8:ec:86:c2:91:c9:e5:65:52:73:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
        Validity
            Not Before: Jul  1 00:01:01 2026 GMT
            Not After : Jul  2 00:01:01 2026 GMT
        Subject: CN=7d4c8924cf16d5f16dc532f00d7cfc659f2a7d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:8b:38:83:81:d3:a4:13:cb:4c:bf:8d:8c:
                    61:36:a9:a3:c7:c8:f2:bf:f7:11:1f:42:f8:f9:61:
                    a8:f6:43:8a:bf:77:68:1b:b6:e7:3d:f7:56:18:5a:
                    e6:3c:d1:e0:50:72:66:fa:31:33:9a:47:33:ff:d1:
                    e9:cb:75:7c:92:49:0a:46:b9:fe:ef:92:3d:43:96:
                    a1:e3:75:7a:0d:57:72:79:ef:8b:a7:28:42:34:33:
                    d9:65:f5:f2:d5:d9:d1:5e:cf:a9:87:49:1b:64:5b:
                    74:6e:e0:bc:a4:35:bf:9a:b6:ef:5e:ed:47:d3:a7:
                    66:ce:3d:cf:2a:f7:cd:4e:72:b5:c4:ad:15:41:72:
                    4d:f5:5e:de:02:c9:a0:0e:3f:e2:0c:ac:79:dd:5e:
                    42:c0:42:7c:2f:95:b4:3d:97:8a:c0:41:e9:1e:5a:
                    63:d9:52:c1:74:43:d4:7b:e4:d6:85:1e:47:0d:8e:
                    6a:b7:cc:14:7e:64:f0:ce:ca:28:f8:48:b3:6a:1e:
                    30:65:f2:63:fd:d9:76:5f:8c:86:c9:d3:3e:bf:fb:
                    a3:30:5c:7e:e3:61:49:a5:79:5e:b0:a1:f9:3e:b7:
                    7a:d1:46:1a:14:8e:e7:79:d8:fd:0e:e3:44:92:8f:
                    7f:f9:ac:7d:3b:e9:fc:8b:0b:69:b7:8e:94:1a:f4:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4C:89:24:CF:16:D5:F1:6D:C5:32:F0:0D:7C:FC:65:9F:2A:7D:65
            X509v3 Authority Key Identifier:
                keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:1e:5c:03:41:9d:1a:7d:a0:78:21:55:0f:ee:32:b0:30:
         cc:d1:4e:0b:e6:ad:88:c8:68:37:85:e3:78:ed:b6:21:75:3c:
         b8:98:ee:69:3d:3c:26:59:66:71:d8:01:ec:00:b7:56:18:86:
         7e:37:b7:b4:cb:64:e4:e5:25:ce:62:d3:4c:d0:5b:90:f5:2e:
         05:57:8b:6d:f1:d0:e9:98:00:54:e0:bb:08:3d:15:ee:d7:ae:
         9e:f6:61:b2:1a:f8:1d:df:12:3d:be:94:01:7a:a5:6f:d9:2f:
         55:92:37:b7:b5:a1:97:32:63:a1:c9:3c:03:c2:88:31:5e:0e:
         b5:ee:33:31:eb:de:a8:b2:b0:d9:81:d0:55:d8:c7:b8:33:17:
         0f:da:a1:0b:26:a1:f1:8d:3a:09:3e:1d:02:88:50:f2:d7:83:
         3c:5e:ab:65:87:e2:7d:0e:16:0d:d6:67:40:0a:c5:0d:3d:31:
         9c:0a:15:44:70:e8:44:a0:21:75:28:45:ef:50:2a:bf:39:2d:
         e1:8a:5c:34:d0:4d:ef:41:c5:79:06:78:38:b1:11:c6:14:a6:
         17:f0:f8:01:83:15:08:68:3b:87:4a:b0:ae:54:e8:e0:a4:1a:
         eb:f8:00:45:bf:16:f6:90:9f:52:e7:0e:e3:3d:23:80:cc:40:
         2a:36:8a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:40:46 2026 by rpki-client