Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
File:                     GvvUSIkW-uz94nr2PPmEUblnL_Y.mft (raw, json)
Hash identifier:          Qg/FFky83b2tuoCJXuK0XXdOZtKO7uH4thcxKQGTb7c=
Subject key identifier:   6D:1B:FC:4E:EE:FD:6A:74:06:AE:94:41:CA:D1:6A:92:0A:83:5B:6C
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Certificate issuer:       /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial:       019F0AAC941601D09F673A90D2DB14BF3147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
Manifest number:          0128
Signing time:             Sat 27 Jun 2026 20:01:50 +0000
Manifest this update:     Sat 27 Jun 2026 20:01:50 +0000
Manifest next update:     Sun 28 Jun 2026 20:01:50 +0000
Files and hashes:         1: 5mT67kFjlP1wkk9g_jI3qMhMAos.roa (hash: TtmKjHns8FuXUxAAkflnuu+59X1NLHR2HU6aq/7SgEY=)
                          2: GvvUSIkW-uz94nr2PPmEUblnL_Y.crl (hash: Ccoe5BR08uDKI37Me/N3+jLoWuwczy+UapRNVEa6LSI=)
                          3: LxeehfG4ABL-Mjofqe-m1zgbRF8.roa (hash: G0fIhVP6EAMZqllSYGxKMKH7WM5clIvSUyRbvtMaMHc=)
                          4: ow3C5kl0IE5FmZEL6wAizeHsfF0.roa (hash: 1LUERdwWct9ixO2+9tq0i32to/X7fxuaqayb1CcvapM=)
                          5: zfEcWQPqi-VdMvuQ8qSI2Po_taM.roa (hash: jrPqy9eqPGYuqZqd/WHKMilLyac7mNSPcvUdK8y/DAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0a:ac:94:16:01:d0:9f:67:3a:90:d2:db:14:bf:31:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
        Validity
            Not Before: Jun 27 20:01:50 2026 GMT
            Not After : Jun 28 20:01:50 2026 GMT
        Subject: CN=6d1bfc4eeefd6a7406ae9441cad16a920a835b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:cf:01:e9:b5:34:b2:62:41:47:09:42:ae:
                    d7:a6:27:d3:75:79:5c:0e:77:90:ba:48:20:2c:92:
                    10:a1:3f:e1:73:29:40:af:a0:df:49:81:dc:94:39:
                    dd:fd:52:8a:80:f6:68:3b:ef:95:e6:fa:81:cf:92:
                    c0:0c:97:75:63:93:3e:d1:65:06:84:f2:ea:65:9b:
                    59:4f:08:46:74:86:ae:5c:6b:3c:f0:c0:b9:be:fe:
                    41:28:2e:ee:5b:a1:71:0e:6a:e4:af:ec:bc:19:86:
                    32:a3:96:92:bd:38:50:ec:f3:38:30:44:95:35:59:
                    14:95:08:e5:0f:e2:3d:c3:b1:e7:22:b3:05:67:6c:
                    8a:73:f6:6b:82:90:31:74:68:99:aa:d0:24:03:02:
                    81:c8:89:1c:83:f9:9e:e3:23:9e:01:f6:b3:75:0e:
                    31:0c:86:70:78:1b:7a:72:a7:eb:7c:c9:e1:ae:52:
                    02:87:72:13:06:90:6f:6f:d4:e7:ad:22:5c:96:ca:
                    15:95:24:0e:c3:6a:d4:d4:9d:a0:38:9e:b1:e8:13:
                    f1:c5:71:47:a8:3d:e3:bb:0b:ec:54:c6:a5:69:65:
                    61:0c:60:08:40:2a:9b:0a:71:08:f9:a4:a8:7a:f5:
                    44:a1:9e:57:58:f8:2d:d5:e4:33:f2:49:27:ec:dd:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1B:FC:4E:EE:FD:6A:74:06:AE:94:41:CA:D1:6A:92:0A:83:5B:6C
            X509v3 Authority Key Identifier:
                keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:10:28:8c:20:0e:8e:12:c1:a6:db:8e:c4:84:f4:90:50:
         27:3d:ac:f0:bd:ad:05:ef:83:2d:23:0c:54:74:93:1c:9f:52:
         d8:f1:e7:ba:6a:35:ae:c4:b6:10:55:47:23:f6:c7:89:1d:82:
         7f:f4:ff:67:28:db:f0:26:a9:4f:a8:bc:5e:ac:30:6a:e4:71:
         39:ef:f2:dd:5d:cb:d0:25:8c:28:76:46:30:2f:9b:8b:db:ee:
         0b:c5:d7:b9:e3:3d:e3:79:c7:ba:c5:41:ff:5b:93:81:ac:1a:
         ff:9a:e9:2f:ba:c8:d4:81:9c:27:ec:a9:05:65:ba:bc:96:e0:
         8c:bd:a2:26:9d:89:33:57:31:a8:6e:9f:ed:97:87:63:d0:d6:
         cc:ba:b7:90:7e:c7:1e:48:53:32:35:d4:d7:4f:d9:14:94:c3:
         ed:b4:24:9b:01:6c:24:68:15:68:45:2f:eb:5b:24:e6:f0:69:
         7c:3d:a1:43:0d:9e:00:5b:c5:23:c2:6f:69:e7:73:85:52:46:
         e5:20:52:7b:dd:05:5b:ff:31:b8:89:1f:65:76:12:e5:2b:cb:
         17:3a:74:63:07:85:47:a7:13:b8:a5:fe:36:6b:43:25:ae:15:
         84:0a:14:7b:fb:4a:94:56:37:18:bb:4b:73:c9:11:a1:30:35:
         e6:c1:d1:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8KrJQWAdCfZzqQ0tsUvzFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmJkNDQ4ODkxNmZhZWNmZGUyN2FmNjNjZjk4NDUxYjk2
NzJmZjYwHhcNMjYwNjI3MjAwMTUwWhcNMjYwNjI4MjAwMTUwWjAzMTEwLwYDVQQD
Eyg2ZDFiZmM0ZWVlZmQ2YTc0MDZhZTk0NDFjYWQxNmE5MjBhODM1YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs7PAem1NLJiQUcJQq7XpifTdXlc
DneQukggLJIQoT/hcylAr6DfSYHclDnd/VKKgPZoO++V5vqBz5LADJd1Y5M+0WUG
hPLqZZtZTwhGdIauXGs88MC5vv5BKC7uW6FxDmrkr+y8GYYyo5aSvThQ7PM4MESV
NVkUlQjlD+I9w7HnIrMFZ2yKc/ZrgpAxdGiZqtAkAwKByIkcg/me4yOeAfazdQ4x
DIZweBt6cqfrfMnhrlICh3ITBpBvb9TnrSJclsoVlSQOw2rU1J2gOJ6x6BPxxXFH
qD3juwvsVMalaWVhDGAIQCqbCnEI+aSoevVEoZ5XWPgt1eQz8kkn7N2ZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0b/E7u/Wp0Bq6UQcrRapIKg1tsMB8GA1UdIwQY
MBaAFBr71EiJFvrs/eJ69jz5hFG5Zy/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lYWE3ODctYTI0OS00ODVmLWI3NTAt
NjcwNjJmYWVmODAyLzEvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lYWE3ODctYTI0OS00ODVmLWI3NTAtNjcwNjJmYWVmODAy
LzEvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjwQKIwg
Do4SwabbjsSE9JBQJz2s8L2tBe+DLSMMVHSTHJ9S2PHnumo1rsS2EFVHI/bHiR2C
f/T/Zyjb8CapT6i8XqwwauRxOe/y3V3L0CWMKHZGMC+bi9vuC8XXueM943nHusVB
/1uTgawa/5rpL7rI1IGcJ+ypBWW6vJbgjL2iJp2JM1cxqG6f7ZeHY9DWzLq3kH7H
HkhTMjXU10/ZFJTD7bQkmwFsJGgVaEUv61sk5vBpfD2hQw2eAFvFI8JvaedzhVJG
5SBSe90FW/8xuIkfZXYS5SvLFzp0YweFR6cTuKX+NmtDJa4VhAoUe/tKlFY3GLtL
c8kRoTA15sHR/w==
-----END CERTIFICATE-----
Generated at Sun Jun 28 00:31:55 2026 by rpki-client