Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          dALn07CsD1QC9kykZP6MlrtvvP+dxH+HUrcAc8O9MFI=
Subject key identifier:   E9:3B:FD:D7:7B:A1:12:58:D3:07:9F:0B:F0:06:00:F0:3F:0B:C5:9A
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019F1AFA9DF52C0C0610B11AC12326B3549A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          19A8
Signing time:             Wed 01 Jul 2026 00:00:59 +0000
Manifest this update:     Wed 01 Jul 2026 00:00:59 +0000
Manifest next update:     Thu 02 Jul 2026 00:00:59 +0000
Files and hashes:         1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
                          2: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
                          3: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
                          4: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
                          5: Z9B94VUuwMzLp1J1_UmV3P3-Bog.roa (hash: b0gWVuQa3wcBnwLUc4jIKMufXEjkfGFHau8pBV9DYlo=)
                          6: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: KP62JzCGFbUkqvZCjF7ZzrsuoSsjyozKNIJIYqi7ZAI=)
                          8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
                          9: x0_-uqsHWcjbfW_hfshaOvwbb1c.roa (hash: eircYIt1XhTSC/xdu+VsYyP07LVygp/amJt3YsTVS8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fa:9d:f5:2c:0c:06:10:b1:1a:c1:23:26:b3:54:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Jul  1 00:00:59 2026 GMT
            Not After : Jul  2 00:00:59 2026 GMT
        Subject: CN=e93bfdd77ba11258d3079f0bf00600f03f0bc59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:ad:25:52:19:66:ef:a7:17:f9:00:40:a4:
                    5f:7c:20:6d:3e:dd:00:4a:bb:52:fe:78:db:2d:f9:
                    c3:da:de:51:00:4a:5e:97:63:25:87:4f:b1:f4:a0:
                    05:63:af:78:11:8f:ec:f5:d2:89:f1:1c:67:a4:4e:
                    db:18:2f:b1:a8:5c:e4:75:46:11:2d:ba:6d:53:8b:
                    ad:76:46:65:80:52:4e:0b:71:6e:74:1b:f2:3a:30:
                    23:95:87:93:c2:3c:66:e2:d7:dc:54:2b:64:bd:e8:
                    83:cf:cd:0e:8c:8b:3a:17:e3:43:6d:5e:0a:d0:e1:
                    0c:79:7d:fd:aa:18:8d:f5:2e:1d:de:e3:29:66:94:
                    c0:4e:20:80:70:35:e2:19:5b:4e:19:d7:e9:3a:a1:
                    a7:4e:c5:d4:2a:c9:17:32:0a:d3:41:f3:2e:71:6d:
                    b4:a7:4d:3b:9c:52:38:a5:e5:ad:e6:71:a7:9d:85:
                    31:64:72:a4:55:c5:09:24:d8:cc:a4:af:68:be:ba:
                    06:e6:07:8e:6d:eb:b2:11:e4:bd:96:74:b1:f6:59:
                    5f:f0:29:56:ab:5d:1b:a8:fa:98:e0:53:b8:ee:16:
                    73:6a:fa:3b:05:88:cc:5b:96:f9:92:46:04:cb:05:
                    ad:2f:0e:88:14:5c:d4:7e:60:52:ab:5f:14:18:6c:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:FD:D7:7B:A1:12:58:D3:07:9F:0B:F0:06:00:F0:3F:0B:C5:9A
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:59:31:10:dc:d9:d3:1a:fe:a8:c0:f0:9a:5e:a1:d6:19:
         0c:70:b1:48:81:e9:dd:88:79:1c:bf:0b:4c:b4:98:38:8b:d8:
         b4:22:ef:2d:88:48:05:21:0f:78:75:fa:70:6f:18:c6:fb:ef:
         59:c8:28:c8:19:34:f7:75:7e:00:90:26:b8:53:29:38:02:38:
         4b:60:fd:56:33:fc:d3:c5:c7:81:90:ed:6d:a3:cc:ba:3d:c1:
         83:da:12:c3:b7:41:95:d5:bd:d5:1c:53:66:55:3a:b5:9a:a2:
         d0:48:b2:2c:67:45:33:23:99:54:42:69:55:de:a0:6e:36:23:
         3e:9e:d2:e0:cf:12:3e:aa:28:23:a8:52:c5:ae:d3:93:2f:62:
         48:01:69:72:c7:2f:7a:51:77:de:ea:2c:16:4d:87:87:14:6d:
         e8:6b:be:e2:13:c8:9f:6a:db:89:fb:31:3f:6e:c2:f8:11:f0:
         ce:95:19:73:a9:1d:f4:48:49:75:06:ff:ec:e4:26:13:a2:14:
         18:95:58:1d:c2:50:c9:47:07:a3:d4:6c:f0:22:3e:2a:ea:9d:
         bb:8b:61:54:9b:06:27:5e:a5:8e:1e:15:79:dc:77:ca:a7:3b:
         c9:7f:6e:44:9a:11:84:af:b1:2c:b2:1b:0c:b3:c3:bc:67:4c:
         2b:9a:df:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8a+p31LAwGELEawSMms1SaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk
Y2UyMDUwHhcNMjYwNzAxMDAwMDU5WhcNMjYwNzAyMDAwMDU5WjAzMTEwLwYDVQQD
EyhlOTNiZmRkNzdiYTExMjU4ZDMwNzlmMGJmMDA2MDBmMDNmMGJjNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZmtJVIZZu+nF/kAQKRffCBtPt0A
SrtS/njbLfnD2t5RAEpel2Mlh0+x9KAFY694EY/s9dKJ8RxnpE7bGC+xqFzkdUYR
LbptU4utdkZlgFJOC3FudBvyOjAjlYeTwjxm4tfcVCtkveiDz80OjIs6F+NDbV4K
0OEMeX39qhiN9S4d3uMpZpTATiCAcDXiGVtOGdfpOqGnTsXUKskXMgrTQfMucW20
p007nFI4peWt5nGnnYUxZHKkVcUJJNjMpK9ovroG5geObeuyEeS9lnSx9llf8ClW
q10bqPqY4FO47hZzavo7BYjMW5b5kkYEywWtLw6IFFzUfmBSq18UGGxTZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk7/dd7oRJY0wefC/AGAPA/C8WaMB8GA1UdIwQY
MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et
ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx
LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqxZMRDc
2dMa/qjA8JpeodYZDHCxSIHp3Yh5HL8LTLSYOIvYtCLvLYhIBSEPeHX6cG8Yxvvv
WcgoyBk093V+AJAmuFMpOAI4S2D9VjP808XHgZDtbaPMuj3Bg9oSw7dBldW91RxT
ZlU6tZqi0EiyLGdFMyOZVEJpVd6gbjYjPp7S4M8SPqooI6hSxa7Tky9iSAFpcscv
elF33uosFk2HhxRt6Gu+4hPIn2rbifsxP27C+BHwzpUZc6kd9EhJdQb/7OQmE6IU
GJVYHcJQyUcHo9Rs8CI+Kuqdu4thVJsGJ16ljh4Vedx3yqc7yX9uRJoRhK+xLLIb
DLPDvGdMK5rfnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 1 02:37:16 2026 by rpki-client