Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          7Iqt5kaGu6uzO4vPdxtXygcY5OnRFkQOLFEiXwqfYZM=
Subject key identifier:   DD:FA:FE:22:70:0B:3E:7C:FB:37:4E:ED:14:72:AD:8D:58:A3:02:4D
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       019F11C0865F620F4AF9F690F46C5C3658E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          1991
Signing time:             Mon 29 Jun 2026 05:00:57 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:57 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:57 +0000
Files and hashes:         1: GvVv96JrRLH22YKSK9VfEbCaaP0.roa (hash: Qk3itIJYOZGxOb9KSpcwss8K3JcW4s+BHAT7y+BPQUI=)
                          2: XfAxSlgwCTxzDzqz1F5GSiHcht8.asa (hash: cUvj7YaZEThgC8DmFBrpKSpjIZNpn5XqKRaVt6kdn/Y=)
                          3: ZYu3qwDD62OQjK-0MY1GhTTV3L0.roa (hash: jwdnKx0rMKE4+yxjFPdAO7oEDuayA2F4huzOqBo8dhI=)
                          4: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: 9wrrhSUrcCKmqVt/vLyMlEs9b7m7O3uudWe8umEkOT4=)
                          5: uXeyuyNFTLdI8bGRmbqj8zikNy8.roa (hash: 3g5uGaWB0/TdoVSPoOBbNodtyn53Sd/iS2fmmUAB/ic=)
                          6: wIFSdDIn69QjGp9-x0gmnkeBqoI.asa (hash: 6G8K5jievPqmLDZE/wjQxWQa/PGUOa8AwCZQ1np/zp4=)
                          7: wywENrgV9cTNnEJt2kyjfxZDgWw.asa (hash: +Yfj1V4ldVnWd67CebIjZgHqSDXzdBkKkOBcRyvVlgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:86:5f:62:0f:4a:f9:f6:90:f4:6c:5c:36:58:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Jun 29 05:00:57 2026 GMT
            Not After : Jun 30 05:00:57 2026 GMT
        Subject: CN=ddfafe22700b3e7cfb374eed1472ad8d58a3024d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:00:f7:9b:32:f8:68:68:6a:06:c4:4e:1f:
                    8c:e3:34:ca:71:92:e8:f8:40:f4:4a:ef:3d:8a:7f:
                    6b:d8:37:87:5d:e1:e0:9e:da:1b:f7:d5:45:d3:76:
                    97:d0:83:b7:a4:90:fd:8f:d7:12:49:b6:d6:70:89:
                    41:ef:46:04:d1:9a:e8:f2:fe:12:c5:5b:4e:f6:6a:
                    55:f6:0d:7c:d0:41:50:af:8e:31:e9:af:ca:1f:9d:
                    ef:89:f2:60:1b:a3:8d:f5:11:3a:3b:60:be:fc:7c:
                    5d:50:a7:f5:7a:bb:39:16:56:0a:3a:6d:be:74:50:
                    96:97:9e:dc:0f:c0:61:5a:e6:64:1a:39:20:3f:1e:
                    65:c6:61:d3:32:51:29:97:74:04:48:10:b2:ea:ef:
                    09:84:6b:42:bd:79:c6:d8:b7:54:4e:6b:12:db:9e:
                    46:45:a3:e7:d7:41:75:8e:bc:9c:af:a5:05:39:39:
                    ec:62:ce:8e:4c:8b:bd:6c:96:cd:92:b3:c9:d6:31:
                    31:01:8c:02:1d:86:21:8f:d3:e1:aa:9d:9d:6a:59:
                    f4:8a:a8:5a:3b:3f:9d:9c:1b:0a:bd:4c:dd:15:86:
                    ca:99:8e:fa:c3:f5:ef:0f:a0:24:34:dd:40:f2:9a:
                    a9:d0:da:4b:6b:1e:17:a9:fd:06:83:84:9e:b7:28:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FA:FE:22:70:0B:3E:7C:FB:37:4E:ED:14:72:AD:8D:58:A3:02:4D
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:20:2e:3f:0a:f4:4b:b5:d9:e5:18:a4:9c:cb:ed:3d:0b:b3:
         1a:63:9b:18:ae:be:66:6c:22:46:f8:9f:cf:74:aa:71:e6:cf:
         e1:a0:03:cf:ca:81:3f:b0:8b:73:27:c0:bd:2e:b8:ca:07:6a:
         21:41:b6:8f:a4:80:a3:7b:33:4a:ab:51:ba:a2:f4:cb:dd:e8:
         b6:ee:a7:15:ad:8e:aa:da:2a:21:f2:3d:17:e4:95:ca:be:0c:
         c8:46:0f:ac:9c:fe:9d:1f:98:ee:81:b8:98:d4:02:c9:dd:bd:
         13:27:60:c0:df:6b:1b:75:47:73:ce:27:ea:3c:ed:10:93:56:
         58:9d:2c:29:f0:2f:47:76:e7:a8:0f:71:eb:b8:98:a5:ac:cf:
         d9:20:87:c4:4e:a5:60:27:f7:7a:b7:51:a9:46:f6:5a:f0:f5:
         f1:64:6c:08:bb:af:f9:24:e6:41:7a:99:3f:c3:d8:ee:f0:81:
         c7:b2:b9:4f:26:72:bf:35:54:eb:36:c3:f7:87:04:3f:f0:fc:
         06:e8:3c:a4:4b:91:9d:22:69:8d:04:32:b7:84:6f:7b:d2:d1:
         5a:a7:e9:65:20:62:f4:67:2c:3b:51:d6:3f:9c:f2:f1:f0:4e:
         09:f1:d4:ed:e3:80:a8:ea:60:96:2c:fa:5e:6c:8e:c1:e6:db:
         15:cd:4e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwIZfYg9K+faQ9GxcNljhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjlhMjRiZDI2Y2M4MjE3NTE4YTExZjU5OGU2MzcyMDI1
ZThhZTkwHhcNMjYwNjI5MDUwMDU3WhcNMjYwNjMwMDUwMDU3WjAzMTEwLwYDVQQD
EyhkZGZhZmUyMjcwMGIzZTdjZmIzNzRlZWQxNDcyYWQ4ZDU4YTMwMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaoA95sy+GhoagbETh+M4zTKcZLo
+ED0Su89in9r2DeHXeHgntob99VF03aX0IO3pJD9j9cSSbbWcIlB70YE0Zro8v4S
xVtO9mpV9g180EFQr44x6a/KH53vifJgG6ON9RE6O2C+/HxdUKf1ers5FlYKOm2+
dFCWl57cD8BhWuZkGjkgPx5lxmHTMlEpl3QESBCy6u8JhGtCvXnG2LdUTmsS255G
RaPn10F1jrycr6UFOTnsYs6OTIu9bJbNkrPJ1jExAYwCHYYhj9Phqp2daln0iqha
Oz+dnBsKvUzdFYbKmY76w/XvD6AkNN1A8pqp0NpLax4Xqf0Gg4SetyhM1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN36/iJwCz58+zdO7RRyrY1YowJNMB8GA1UdIwQY
MBaAFID5okvSbMghdRihH1mOY3ICXorpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mYjIxMmEtN2E3Ni00MmUyLTg5ODkt
OTY1NTI5ZjIwZDExLzEvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mYjIxMmEtN2E3Ni00MmUyLTg5ODktOTY1NTI5ZjIwZDEx
LzEvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCAuPwr0
S7XZ5RiknMvtPQuzGmObGK6+ZmwiRvifz3SqcebP4aADz8qBP7CLcyfAvS64ygdq
IUG2j6SAo3szSqtRuqL0y93otu6nFa2OqtoqIfI9F+SVyr4MyEYPrJz+nR+Y7oG4
mNQCyd29EydgwN9rG3VHc84n6jztEJNWWJ0sKfAvR3bnqA9x67iYpazP2SCHxE6l
YCf3erdRqUb2WvD18WRsCLuv+STmQXqZP8PY7vCBx7K5TyZyvzVU6zbD94cEP/D8
Bug8pEuRnSJpjQQyt4Rve9LRWqfpZSBi9GcsO1HWP5zy8fBOCfHU7eOAqOpgliz6
XmyOwebbFc1OUg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:34:00 2026 by rpki-client