Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
File:                     G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft (raw, json)
Hash identifier:          piIgiZ8O6FKObyrTx7muQgDgC+nOE6ECSyshFs6lXnk=
Subject key identifier:   34:88:88:56:61:6F:99:B2:5D:6F:D6:75:66:7D:48:18:AE:BC:04:FE
Authority key identifier: 1B:56:48:D7:86:5E:F6:5C:47:78:D8:23:DF:BF:EA:0B:AB:1A:DD:08
Certificate issuer:       /CN=1b5648d7865ef65c4778d823dfbfea0bab1add08
Certificate serial:       019F126631A6A65C211C864B11525F0B8BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
Manifest number:          7F
Signing time:             Mon 29 Jun 2026 08:01:54 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:54 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:54 +0000
Files and hashes:         1: G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl (hash: C/2YBujM2/elZsKIOtITj9y34Ju+HHT0GzgL7ajQUJ8=)
                          2: VW-yfyXm2BfDYOtGsIByfba8GjY.roa (hash: m5w3Cs66lipJPg61wjza2fM59lMVwR2ZUJBgpGXqP/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 08:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:66:31:a6:a6:5c:21:1c:86:4b:11:52:5f:0b:8b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b5648d7865ef65c4778d823dfbfea0bab1add08
        Validity
            Not Before: Jun 29 08:01:54 2026 GMT
            Not After : Jun 30 08:01:54 2026 GMT
        Subject: CN=34888856616f99b25d6fd675667d4818aebc04fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:86:58:47:00:97:03:86:37:20:47:11:72:93:
                    3c:fa:5d:2a:ef:d8:78:b6:d3:6b:3f:c4:b9:d4:c7:
                    18:b6:56:06:ca:84:35:f6:bc:c9:1a:07:ca:06:a8:
                    d1:18:22:6d:b0:4c:a7:69:67:b0:04:61:21:01:e0:
                    9d:85:23:bb:56:dd:ee:82:b7:99:c0:e5:7e:3c:98:
                    41:71:67:a0:7d:be:c3:36:f1:e6:f5:8b:eb:50:5e:
                    cb:0b:2b:d2:11:cc:5a:95:cf:92:0d:5a:d7:a5:86:
                    79:d0:28:72:08:5c:1a:4d:bb:5e:37:a3:ba:79:e9:
                    20:57:48:a1:81:b0:5c:3c:c2:ad:6d:80:3d:c4:62:
                    f2:0d:de:65:2f:a3:03:cc:73:b9:c1:8b:c5:1a:15:
                    52:c5:99:47:82:6b:4c:08:cd:91:f6:12:22:06:26:
                    28:03:6e:70:23:77:94:de:cf:ee:89:c8:76:b9:db:
                    25:3e:b0:5c:c9:03:35:49:78:c3:ae:ca:d3:ad:65:
                    5e:7b:f7:fd:da:f1:5d:37:01:da:91:29:66:ec:b2:
                    ef:ab:19:c5:68:2d:16:a5:71:c0:df:2d:ee:d4:ad:
                    7a:16:04:3c:56:b1:18:bf:07:1a:bd:d8:89:3b:a4:
                    03:27:43:2c:8e:99:0b:bf:4a:46:1e:64:ed:1d:f7:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:88:88:56:61:6F:99:B2:5D:6F:D6:75:66:7D:48:18:AE:BC:04:FE
            X509v3 Authority Key Identifier:
                keyid:1B:56:48:D7:86:5E:F6:5C:47:78:D8:23:DF:BF:EA:0B:AB:1A:DD:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0c:1f:8a:b0:84:6a:32:b9:ff:aa:43:ff:ac:ea:2e:2d:d0:
         90:67:97:b8:c7:db:6f:4d:fa:ed:73:27:8d:d5:e2:88:9a:78:
         06:5d:ad:a0:2f:b1:1b:dc:e1:ba:ba:0b:aa:89:ea:7b:48:e7:
         77:89:fb:53:b3:85:72:f1:66:cb:c1:64:d5:d0:cf:40:2a:53:
         fa:50:f1:2b:a2:fd:4f:36:6f:40:de:6f:d7:1d:35:a5:2a:68:
         6e:00:c8:a4:25:cb:35:5a:ae:2e:a2:72:98:27:1e:c8:e5:fc:
         92:95:4b:fe:24:1a:d4:8e:da:c7:f7:2d:59:1a:c0:17:23:be:
         5b:fe:e1:ea:3a:81:b2:34:82:30:c9:95:9e:c6:af:1c:71:48:
         9e:de:a6:ed:a8:31:9f:ae:1c:64:d7:91:4b:9b:9f:d9:28:fb:
         d4:81:be:4f:e8:6a:c0:91:cb:96:2b:a0:48:cd:86:dc:e5:a7:
         fd:de:ac:86:34:3c:41:35:fd:3c:e1:97:65:b3:8d:c2:5c:4f:
         aa:f8:70:fb:11:39:cd:e5:4e:c0:a5:54:4f:10:fb:f4:0c:2f:
         d5:32:98:35:0b:21:48:6f:22:e2:32:fd:e9:15:5c:ed:1e:fe:
         81:04:0a:92:e4:e6:3e:1a:be:21:2b:38:43:36:78:ba:aa:79:
         e9:9b:71:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZjGmplwhHIZLEVJfC4umMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTY0OGQ3ODY1ZWY2NWM0Nzc4ZDgyM2RmYmZlYTBiYWIx
YWRkMDgwHhcNMjYwNjI5MDgwMTU0WhcNMjYwNjMwMDgwMTU0WjAzMTEwLwYDVQQD
EygzNDg4ODg1NjYxNmY5OWIyNWQ2ZmQ2NzU2NjdkNDgxOGFlYmMwNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oZYRwCXA4Y3IEcRcpM8+l0q79h4
ttNrP8S51McYtlYGyoQ19rzJGgfKBqjRGCJtsEynaWewBGEhAeCdhSO7Vt3ugreZ
wOV+PJhBcWegfb7DNvHm9YvrUF7LCyvSEcxalc+SDVrXpYZ50ChyCFwaTbteN6O6
eekgV0ihgbBcPMKtbYA9xGLyDd5lL6MDzHO5wYvFGhVSxZlHgmtMCM2R9hIiBiYo
A25wI3eU3s/uich2udslPrBcyQM1SXjDrsrTrWVee/f92vFdNwHakSlm7LLvqxnF
aC0WpXHA3y3u1K16FgQ8VrEYvwcavdiJO6QDJ0MsjpkLv0pGHmTtHffBlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSIiFZhb5myXW/WdWZ9SBiuvAT+MB8GA1UdIwQY
MBaAFBtWSNeGXvZcR3jYI9+/6gurGt0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFaSTE0WmU5bHhIZU5najM3X3FDNnNhM1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82NmFjYjQtN2EwYy00MWE1LTk1YWQt
MTIzYmYxZjBhOWMxLzEvRzFaSTE0WmU5bHhIZU5najM3X3FDNnNhM1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82NmFjYjQtN2EwYy00MWE1LTk1YWQtMTIzYmYxZjBhOWMx
LzEvRzFaSTE0WmU5bHhIZU5najM3X3FDNnNhM1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAwfirCE
ajK5/6pD/6zqLi3QkGeXuMfbb0367XMnjdXiiJp4Bl2toC+xG9zhuroLqonqe0jn
d4n7U7OFcvFmy8Fk1dDPQCpT+lDxK6L9TzZvQN5v1x01pSpobgDIpCXLNVquLqJy
mCceyOX8kpVL/iQa1I7ax/ctWRrAFyO+W/7h6jqBsjSCMMmVnsavHHFInt6m7agx
n64cZNeRS5uf2Sj71IG+T+hqwJHLliugSM2G3OWn/d6shjQ8QTX9POGXZbONwlxP
qvhw+xE5zeVOwKVUTxD79Awv1TKYNQshSG8i4jL96RVc7R7+gQQKkuTmPhq+ISs4
QzZ4uqp56Ztx5A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 16:37:35 2026 by rpki-client