Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          MjjnbxxWalySEpfQyPZuO6hera8F/wF7Sud7H1TqkUs=
Subject key identifier:   44:B0:9B:06:FF:12:A2:6A:E9:54:38:20:B5:0B:0D:56:64:28:4E:95
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       019FA1F2874AE59F5E4EF87658E4775AFC3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          1925
Signing time:             Mon 27 Jul 2026 05:00:53 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:53 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:53 +0000
Files and hashes:         1: AovjLMzZvMdo98oRLMX3UQFhYGU.roa (hash: Pirq+8jQHRZFAz4jyR41JVpLGoXjS83ipQMbfBRQoac=)
                          2: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: WpdSQD8qtUvXMNj6/bNe7VKxAcnbA6AKChuGxFpLyOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:87:4a:e5:9f:5e:4e:f8:76:58:e4:77:5a:fc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: Jul 27 05:00:53 2026 GMT
            Not After : Jul 28 05:00:53 2026 GMT
        Subject: CN=44b09b06ff12a26ae9543820b50b0d5664284e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:80:02:2b:56:13:bb:c4:68:5f:07:a3:29:
                    7b:65:17:3f:53:8f:60:3a:7d:53:8e:63:cd:f3:12:
                    c9:e7:69:64:78:cc:39:28:d6:da:d4:c3:6d:42:fb:
                    c9:6e:ec:50:bb:0d:75:17:02:20:c7:10:68:78:0a:
                    2e:c7:aa:e1:fd:91:96:7c:ff:7f:99:4e:a9:d0:29:
                    ba:2a:2d:ad:d8:5c:47:7c:18:34:5b:6e:56:42:99:
                    ca:c2:86:8f:23:39:e6:b1:59:31:6d:6e:0c:ba:92:
                    47:9e:e9:5b:a3:a2:f9:43:41:82:3a:c1:43:18:71:
                    bd:f3:d6:35:db:71:16:e6:89:33:06:44:81:a4:8c:
                    9e:21:a3:92:95:05:2a:b7:9e:9e:c9:8d:e5:42:5e:
                    e2:c4:8d:43:80:39:bb:48:a1:6a:4c:5d:d6:a8:dd:
                    76:cc:80:0b:73:6f:6c:92:64:98:0a:12:66:f5:a8:
                    3c:d5:a9:98:01:0e:e8:0e:5e:1c:26:d7:67:4f:dc:
                    5f:8e:e7:b1:57:7e:39:1e:63:38:71:7c:02:43:36:
                    05:55:7a:19:9b:c1:1d:73:b2:b7:e3:12:e4:c5:65:
                    78:30:d1:25:a6:ef:c5:78:b6:7b:03:2b:8e:c0:28:
                    35:3f:5e:57:63:c5:3b:a8:b1:06:e4:fc:68:4e:1b:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B0:9B:06:FF:12:A2:6A:E9:54:38:20:B5:0B:0D:56:64:28:4E:95
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:99:a5:57:b4:91:ef:56:2d:46:ea:db:f1:05:26:a5:7a:00:
         99:74:54:c0:fc:06:79:91:88:e7:c4:06:99:0d:94:54:5c:f1:
         63:ba:bf:b8:f4:8c:c5:69:ad:b7:a0:21:29:d9:64:c6:50:09:
         ad:3c:ab:98:df:ab:aa:bc:bc:e0:69:41:7b:f9:a1:c8:9b:26:
         79:1f:bc:46:89:d4:30:67:91:71:d5:0d:03:61:b0:f8:dd:c1:
         e7:47:50:ed:a1:c2:66:be:fa:40:f4:7f:82:aa:45:96:4d:5a:
         2b:2b:b8:df:08:bd:3f:fe:f6:d5:3b:13:02:75:38:ad:fb:45:
         1d:c2:27:b1:5e:23:3e:7b:13:4b:f3:d1:fb:f6:3e:a0:45:c0:
         8d:e1:6c:3a:9c:c9:19:3c:08:f9:9e:4a:26:23:6b:0b:a6:6f:
         29:e3:8d:4c:22:b3:bb:8d:cb:20:1b:29:fb:f9:59:33:22:fc:
         93:b2:3e:24:14:00:55:79:b0:2a:61:37:0a:3b:95:20:67:af:
         93:77:89:7d:18:95:2a:a5:64:87:7f:01:27:78:7c:df:df:8e:
         5d:b6:d7:55:da:fa:38:bb:45:47:d4:be:18:e0:f6:98:a7:00:
         34:02:56:79:fb:81:c3:30:60:93:8e:aa:73:05:79:55:7b:b6:
         2b:b2:3a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8odK5Z9eTvh2WOR3Wvw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTM0ZDQ3YWQ4ZGI1ODk0YTVmYzkzNDJlNDU1OGY5NGU0
ZjE3ZjEwHhcNMjYwNzI3MDUwMDUzWhcNMjYwNzI4MDUwMDUzWjAzMTEwLwYDVQQD
Eyg0NGIwOWIwNmZmMTJhMjZhZTk1NDM4MjBiNTBiMGQ1NjY0Mjg0ZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsryAAitWE7vEaF8Hoyl7ZRc/U49g
On1TjmPN8xLJ52lkeMw5KNba1MNtQvvJbuxQuw11FwIgxxBoeAoux6rh/ZGWfP9/
mU6p0Cm6Ki2t2FxHfBg0W25WQpnKwoaPIznmsVkxbW4MupJHnulbo6L5Q0GCOsFD
GHG989Y123EW5okzBkSBpIyeIaOSlQUqt56eyY3lQl7ixI1DgDm7SKFqTF3WqN12
zIALc29skmSYChJm9ag81amYAQ7oDl4cJtdnT9xfjuexV345HmM4cXwCQzYFVXoZ
m8Edc7K34xLkxWV4MNElpu/FeLZ7AyuOwCg1P15XY8U7qLEG5PxoThtbowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESwmwb/EqJq6VQ4ILULDVZkKE6VMB8GA1UdIwQY
MBaAFBtTTUetjbWJSl/JNC5FWPlOTxfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYt
MzI2Njk3MzdjNTE3LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYtMzI2Njk3MzdjNTE3
LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpmlV7SR
71YtRurb8QUmpXoAmXRUwPwGeZGI58QGmQ2UVFzxY7q/uPSMxWmtt6AhKdlkxlAJ
rTyrmN+rqry84GlBe/mhyJsmeR+8RonUMGeRcdUNA2Gw+N3B50dQ7aHCZr76QPR/
gqpFlk1aKyu43wi9P/721TsTAnU4rftFHcInsV4jPnsTS/PR+/Y+oEXAjeFsOpzJ
GTwI+Z5KJiNrC6ZvKeONTCKzu43LIBsp+/lZMyL8k7I+JBQAVXmwKmE3CjuVIGev
k3eJfRiVKqVkh38BJ3h839+OXbbXVdr6OLtFR9S+GOD2mKcANAJWefuBwzBgk46q
cwV5VXu2K7I6aw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:26 2026 by rpki-client