Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File:                     gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier:          ajQrKn1K/jIJlJgjog62MS5OgOhDSdu+lE4MSU+4Y4U=
Subject key identifier:   E3:A0:E1:E8:5B:11:23:C2:CC:6C:C1:7E:27:FC:88:E1:DC:55:89:42
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer:       /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial:       019F0C9A5DDB0D1FD679F03DCE10E6525F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number:          193B
Signing time:             Sun 28 Jun 2026 05:01:10 +0000
Manifest this update:     Sun 28 Jun 2026 05:01:10 +0000
Manifest next update:     Mon 29 Jun 2026 05:01:10 +0000
Files and hashes:         1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
                          2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
                          3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
                          4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
                          5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
                          6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
                          7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
                          8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: 4BRC3JbnLpefJBavsR813kyrUW7DzIVd8rIze6c0YXE=)
                          9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0c:9a:5d:db:0d:1f:d6:79:f0:3d:ce:10:e6:52:5f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
        Validity
            Not Before: Jun 28 05:01:10 2026 GMT
            Not After : Jun 29 05:01:10 2026 GMT
        Subject: CN=e3a0e1e85b1123c2cc6cc17e27fc88e1dc558942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:01:ce:55:26:a1:1a:9f:bf:89:fc:3c:d1:
                    40:1a:ff:0b:37:6a:da:7d:bd:9b:d9:55:c9:48:3b:
                    59:6e:87:0f:90:b6:9a:1f:75:0a:c5:80:2f:8a:73:
                    cd:ad:2c:a2:2c:b2:f1:cd:08:99:21:02:27:62:f6:
                    09:74:61:db:3a:27:1b:78:5f:54:57:62:bf:cb:11:
                    f0:1f:17:89:ff:a8:67:2b:a0:54:2a:c7:8d:bd:67:
                    a8:9b:d3:4b:a5:78:83:d0:71:0f:74:0d:78:a0:ca:
                    22:d5:aa:df:da:57:2e:4c:81:c5:50:85:b2:65:cf:
                    5a:30:6d:16:22:da:e5:d6:02:71:36:eb:fa:af:66:
                    fc:d6:03:4a:ba:5e:30:0f:f4:1a:a6:33:9f:39:f9:
                    45:7b:26:30:e2:5e:95:09:4a:90:b0:51:5f:8b:77:
                    65:01:40:4b:75:09:d1:7d:e3:45:1b:13:8a:89:0d:
                    cf:6c:a2:c1:28:37:95:79:fb:76:71:07:5e:c0:0e:
                    00:eb:6a:49:d7:88:1f:73:d4:b5:60:97:d7:69:8e:
                    d4:15:3e:17:4a:22:b2:e7:86:a8:36:c9:31:5a:48:
                    75:64:a9:dd:64:0b:38:0a:7c:4f:92:4a:ec:40:ed:
                    56:9e:b6:44:78:a4:84:6e:91:4a:1c:83:ff:ab:45:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:E1:E8:5B:11:23:C2:CC:6C:C1:7E:27:FC:88:E1:DC:55:89:42
            X509v3 Authority Key Identifier:
                keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0b:8d:dc:c6:67:b5:87:56:ad:6a:f4:a6:12:39:f8:3d:91:
         8a:da:41:e2:03:7c:87:7b:28:40:3c:07:13:59:09:3b:f5:9d:
         4c:00:89:fe:13:6b:af:4d:64:6a:a1:e2:f1:89:f6:d9:7d:12:
         39:96:c6:63:84:df:d4:03:49:34:4f:b8:5f:2d:b2:5e:8b:bc:
         ac:ac:eb:15:a1:e7:69:38:1f:5f:b9:2d:8c:56:27:6e:1d:eb:
         7e:c6:14:15:d1:85:64:ad:cd:3b:23:68:ab:02:2a:8c:48:73:
         9a:77:34:81:c9:4f:ac:fd:da:ec:b9:7b:d5:6f:64:6d:2b:d0:
         6b:79:a0:ea:7e:5c:9e:e3:c1:f2:19:98:36:a9:58:f6:01:f5:
         96:12:e6:9c:18:6d:fd:fb:d7:7b:90:09:38:48:7c:71:84:34:
         13:ef:59:57:33:3c:0e:b1:d2:23:2d:eb:75:ff:68:ec:76:b4:
         2f:27:ec:67:31:e0:a9:14:c3:65:e3:35:5d:86:d2:7d:bf:51:
         bd:43:97:47:a3:1e:a8:c0:a8:86:0c:8f:aa:39:ea:0c:cb:82:
         6d:1b:a2:18:2d:d5:6f:ca:8e:07:fc:66:10:72:2e:1d:63:b0:
         b2:5c:e5:87:53:f5:ad:79:1c:b3:4c:46:a5:9a:89:fe:d2:1e:
         90:07:9e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Mml3bDR/WefA9zhDmUl83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4
YjlkODcwHhcNMjYwNjI4MDUwMTEwWhcNMjYwNjI5MDUwMTEwWjAzMTEwLwYDVQQD
EyhlM2EwZTFlODViMTEyM2MyY2M2Y2MxN2UyN2ZjODhlMWRjNTU4OTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwMBzlUmoRqfv4n8PNFAGv8LN2ra
fb2b2VXJSDtZbocPkLaaH3UKxYAvinPNrSyiLLLxzQiZIQInYvYJdGHbOicbeF9U
V2K/yxHwHxeJ/6hnK6BUKseNvWeom9NLpXiD0HEPdA14oMoi1arf2lcuTIHFUIWy
Zc9aMG0WItrl1gJxNuv6r2b81gNKul4wD/QapjOfOflFeyYw4l6VCUqQsFFfi3dl
AUBLdQnRfeNFGxOKiQ3PbKLBKDeVeft2cQdewA4A62pJ14gfc9S1YJfXaY7UFT4X
SiKy54aoNskxWkh1ZKndZAs4CnxPkkrsQO1WnrZEeKSEbpFKHIP/q0Vw6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOg4ehbESPCzGzBfif8iOHcVYlCMB8GA1UdIwQY
MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt
Y2Q5NzQwNDI2NDlmLzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm
LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnguN3MZn
tYdWrWr0phI5+D2RitpB4gN8h3soQDwHE1kJO/WdTACJ/hNrr01kaqHi8Yn22X0S
OZbGY4Tf1ANJNE+4Xy2yXou8rKzrFaHnaTgfX7ktjFYnbh3rfsYUFdGFZK3NOyNo
qwIqjEhzmnc0gclPrP3a7Ll71W9kbSvQa3mg6n5cnuPB8hmYNqlY9gH1lhLmnBht
/fvXe5AJOEh8cYQ0E+9ZVzM8DrHSIy3rdf9o7Ha0LyfsZzHgqRTDZeM1XYbSfb9R
vUOXR6MeqMCohgyPqjnqDMuCbRuiGC3Vb8qOB/xmEHIuHWOwslzlh1P1rXkcs0xG
pZqJ/tIekAeeRw==
-----END CERTIFICATE-----
Generated at Sun Jun 28 07:28:14 2026 by rpki-client