Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File:                     G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier:          cOMAgO1tPdb8coKnd+eOKW21UjfeeQq8638XIl23rKs=
Subject key identifier:   7E:21:64:45:63:35:69:63:3F:60:7E:8A:8A:44:D9:D4:25:FC:6F:E5
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer:       /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial:       019DCC065C698E66FEE372EAB2B37BF55C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number:          14C5
Signing time:             Sun 26 Apr 2026 23:01:02 +0000
Manifest this update:     Sun 26 Apr 2026 23:01:02 +0000
Manifest next update:     Mon 27 Apr 2026 23:01:02 +0000
Files and hashes:         1: 6qBOGIzy7SiE5aHoDtHWinTh2oI.roa (hash: KwYB7/zyOeuIegeDk01/5M8IIa6sVcCvAJ0ZuQL1yIE=)
                          2: A3dfbS-b6385QXbD4gqPyZDygnI.roa (hash: eMk+m8VzfNpB4AhSwjxnwTq5SWYabewWTjTtFBj+jG4=)
                          3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: dkuQUFg6g5+Fo0XqRJoOdFygSvDq+CFxeUZwSTdWvZw=)
                          4: M3X3dm-8It7aMXQj1y54UfL58OM.roa (hash: 7bUApRHysWlBDgJo+0traB3WXa7dB6bicxRUCK/I0eI=)
                          5: RxzZhT8fBiEGIwzJcpEaVq4187g.roa (hash: hquVSPsZNeqlCDz0r9h6cmg+2UHwUyJ0mqDqk+VOViY=)
                          6: URKvTjDp4aRxdSZ3jqDjwv8D8go.roa (hash: 0rxLDrLwqqP9CnkuagDXnUpxuRr/vAmcV/9SQj91sog=)
                          7: VIoe5vtniIMNu_oPEWff-lwSqrw.roa (hash: 3k0VjZdIDMeiSnCUwM6+f+LSTU02mg7Bx1Owb60WuIE=)
                          8: _eOaEicMkKKbiwUmCfYmS46987o.roa (hash: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=)
                          9: bSb1vKlFqm6Lgoy9mUt1MbjszKU.roa (hash: 8Rm1aKWGejiopvOQal7M9IGwEZUMfEE7E/dgp4snH3E=)
                          10: ecI9WwfCcCzWrmDmHhs2EyFDQJM.roa (hash: F5YXv2pp9vRYKIztKcSv4xzwJ07F66Zhmicw5zjO8J8=)
                          11: ft0VCR9IS3VMAgUDh10GOu9PLZE.roa (hash: 2folTB1j+SZaT+1+FVh+nOf0J1JfCJxhCtpk4te0AZM=)
                          12: ktxPtq6QBIdiSOZ68pA9GADZGkA.roa (hash: nKwrZvWFwYhUKsU2Xr6N7bIKsHUx8g94vR6U6JSn7Rw=)
                          13: oDF8isOJjyEJhYEJCgEsnjBbHWk.roa (hash: 6eDaCiZYBtD9bJDiBCS6z1HiWa8aHX6Yc2oe3UfDymI=)
                          14: wdbxHLFVBNdWh2qGHilCZZD7-g0.roa (hash: 90fXHeqU2neAZl01CJ/fB5l+GTvQAN5HQEWOMc2pyGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:06:5c:69:8e:66:fe:e3:72:ea:b2:b3:7b:f5:5c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
        Validity
            Not Before: Apr 26 23:01:02 2026 GMT
            Not After : Apr 27 23:01:02 2026 GMT
        Subject: CN=7e216445633569633f607e8a8a44d9d425fc6fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:01:32:58:f3:0b:a9:44:0d:a8:16:29:99:
                    6d:41:15:6d:75:58:84:c1:f1:cb:26:0f:c2:3b:72:
                    d6:37:90:0e:76:e0:19:a5:b5:57:1d:5a:8b:4e:8e:
                    38:e3:3b:fd:46:37:3b:4d:f7:e0:6e:a7:90:d3:78:
                    ad:49:6e:76:bb:a2:ce:10:ef:5a:f6:0a:d1:25:b6:
                    87:68:94:a9:79:1f:c3:f6:ff:d2:e2:30:d0:2e:80:
                    40:94:99:e7:90:6b:10:03:bf:4c:63:6d:6d:cf:9a:
                    0e:61:f0:29:69:50:ab:b4:5e:b0:b4:98:6b:a7:69:
                    7d:b5:1a:01:5f:63:0c:62:03:fb:76:ed:65:f2:4e:
                    95:47:80:b3:0e:2b:e2:ed:50:76:fb:ea:ad:b9:c5:
                    74:04:23:ef:e1:07:51:d5:7c:86:6e:52:9f:90:e3:
                    fe:8c:49:df:53:66:8f:58:7d:e1:0b:5d:b5:0d:4e:
                    d9:41:30:0b:f5:fc:ea:74:bd:d1:21:47:c4:60:3c:
                    03:f5:28:4b:5d:ef:b8:72:ad:79:3c:c5:a2:2d:0f:
                    fc:ff:55:58:c9:89:bc:4e:e8:49:89:e2:d7:fa:cb:
                    b0:d9:1f:29:90:ff:12:6e:8a:39:e6:39:b6:e6:06:
                    bb:6b:45:a9:ab:28:f1:ca:09:46:e3:58:19:55:75:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:21:64:45:63:35:69:63:3F:60:7E:8A:8A:44:D9:D4:25:FC:6F:E5
            X509v3 Authority Key Identifier:
                keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:70:29:cb:3f:79:ac:bb:3a:95:69:ee:c4:95:ff:1f:17:
         33:85:58:8a:f0:13:26:46:f2:20:86:78:b0:ba:1a:a5:d6:94:
         bd:58:43:67:f3:34:a4:b8:e5:b9:c8:d1:de:f0:fc:f7:93:52:
         13:d3:7c:31:96:47:80:90:1e:c8:ba:08:00:cb:c3:29:a8:a2:
         a1:b3:40:b1:9e:ea:9b:14:9e:49:d1:ca:bf:39:22:07:d8:8c:
         79:b6:bb:14:3b:be:69:c7:81:ea:7e:15:09:50:60:33:a1:9f:
         8b:b0:c5:2b:16:76:44:ea:6d:8f:2a:f0:4d:56:e0:70:1d:67:
         a8:98:a0:3d:5f:86:ff:83:10:2a:fa:81:de:4a:db:da:a6:e7:
         fd:e3:1f:9c:7f:4d:9b:ce:ee:5f:b7:c0:4a:27:58:bb:82:eb:
         41:53:ca:14:39:7c:43:9b:39:5b:a7:1d:3c:07:7d:0c:4a:34:
         d4:f9:46:ec:c5:ea:ea:35:5c:f4:a0:a5:98:ec:0b:c4:f0:97:
         36:10:0e:72:e7:c3:21:ae:e4:d9:5b:07:eb:53:58:6e:28:29:
         64:d3:6c:ab:c0:43:1c:16:3f:f5:4c:2d:ad:f9:e2:9b:4e:24:
         77:f7:0b:87:8c:ff:0a:ef:ae:0a:71:f3:e2:bd:9a:a7:74:f1:
         42:cb:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:32:01 2026 by rpki-client