Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File:                     GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier:          qvGJDqiQ0w0rTvRKlWbi6u5bI5ZzebgVDyLQ1G7w2X8=
Subject key identifier:   AB:0B:AA:67:4F:4C:D7:AF:62:DC:46:94:36:81:B1:33:E4:C0:C5:2D
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer:       /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial:       019FF8A34E87D6886C29457ED051B3B466E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number:          0C66
Signing time:             Thu 13 Aug 2026 01:01:19 +0000
Manifest this update:     Thu 13 Aug 2026 01:01:19 +0000
Manifest next update:     Fri 14 Aug 2026 01:01:19 +0000
Files and hashes:         1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: ak0Or+/7KXlIwRr5CDSJUcw+M/4wQ9cPBW+edKIjqL0=)
                          2: GYVpw44ITOKKpdgG8Chd41R_mz0.asa (hash: J5xgubX/Yds4qbv3CrQ+J1gCPs+v23KHp5e5VO0cLRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:a3:4e:87:d6:88:6c:29:45:7e:d0:51:b3:b4:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
        Validity
            Not Before: Aug 13 01:01:19 2026 GMT
            Not After : Aug 14 01:01:19 2026 GMT
        Subject: CN=ab0baa674f4cd7af62dc46943681b133e4c0c52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:9b:cc:28:82:e3:5d:53:f5:cc:ad:cc:40:
                    7a:27:bf:d5:b2:59:19:07:f3:c1:fc:54:50:59:83:
                    ed:c1:1a:cb:7d:d6:fe:4a:d8:39:6b:2b:a6:5f:a3:
                    b0:ff:f4:de:65:a4:28:57:16:6a:74:f2:19:91:b7:
                    8f:6d:08:6d:72:33:b0:e0:b8:d9:92:af:0c:31:1e:
                    55:4f:91:4f:e6:f6:3a:76:ad:22:62:f0:05:ac:62:
                    bb:84:9f:0e:4c:df:cf:0e:52:13:18:ac:81:4f:41:
                    6c:df:d4:5f:55:e0:37:e9:2e:99:72:15:ec:4c:7c:
                    ab:d2:66:cd:0f:8f:2b:7e:8a:22:dd:22:37:3b:03:
                    89:fe:3a:c1:7b:78:09:87:85:aa:09:47:f2:58:b8:
                    ff:83:9c:4e:0d:d5:ca:a9:ee:92:a8:f4:e9:b6:d4:
                    13:5e:d6:5c:3e:ba:77:7e:c6:8c:cb:da:68:7f:8d:
                    3e:43:bc:0e:ae:95:ad:3b:2d:f0:6e:b7:45:92:5f:
                    57:9a:8d:d8:f9:c1:c9:fa:25:0d:48:a7:92:30:11:
                    95:12:69:1c:ac:12:6c:09:d5:cb:58:e3:86:73:00:
                    8e:6b:a7:74:9e:ca:02:64:c5:b5:9d:12:9b:6f:a3:
                    64:47:37:d5:68:0b:58:aa:49:aa:44:37:f7:f4:81:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0B:AA:67:4F:4C:D7:AF:62:DC:46:94:36:81:B1:33:E4:C0:C5:2D
            X509v3 Authority Key Identifier:
                keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ee:54:4f:ba:20:92:8f:d3:a9:eb:84:83:7f:d4:83:41:30:
         4f:f1:89:21:d0:56:ab:e3:d2:f8:11:e0:b4:77:a7:5e:6c:e6:
         89:d5:f8:48:5a:76:d2:55:e6:f5:db:ab:85:fc:ce:31:5e:20:
         10:3d:29:9c:d7:e5:e6:98:62:8f:ea:e8:05:50:d1:af:c1:a0:
         9d:0c:21:1b:f2:18:53:7c:cc:21:11:6b:2a:a9:3b:7a:65:70:
         ad:4d:74:26:02:f0:d1:56:98:db:a9:02:45:61:cc:fc:1c:60:
         45:38:20:b1:3e:87:c4:bb:4c:9a:7d:02:97:f9:45:21:ad:1e:
         f4:0a:95:4c:b5:b1:55:73:a7:29:f1:29:ea:4f:aa:2c:b0:27:
         fc:d7:0d:87:fb:77:87:f3:fd:13:1e:06:a2:76:90:6f:85:db:
         06:b7:79:fe:69:d0:19:b5:26:71:a0:d2:40:b7:c1:12:cf:31:
         ff:90:fe:ec:12:85:fc:c3:92:d3:7a:19:9d:a4:26:f3:99:ad:
         33:05:ed:e9:d8:46:79:24:de:9b:2f:95:bc:a1:ab:dc:93:7e:
         fc:54:a9:7d:ad:c8:28:b9:fd:c8:a3:91:99:e7:3e:04:68:fb:
         80:ac:09:dc:3f:dd:ae:9a:17:89:9b:73:16:14:32:00:35:da:
         df:8b:cc:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4o06H1ohsKUV+0FGztGbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDlmNjBjOGI4NWVmZWQzNjFkZjViNmI1MWM5ZmVkYWUx
YzdmOTYwHhcNMjYwODEzMDEwMTE5WhcNMjYwODE0MDEwMTE5WjAzMTEwLwYDVQQD
EyhhYjBiYWE2NzRmNGNkN2FmNjJkYzQ2OTQzNjgxYjEzM2U0YzBjNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaubzCiC411T9cytzEB6J7/VslkZ
B/PB/FRQWYPtwRrLfdb+Stg5ayumX6Ow//TeZaQoVxZqdPIZkbePbQhtcjOw4LjZ
kq8MMR5VT5FP5vY6dq0iYvAFrGK7hJ8OTN/PDlITGKyBT0Fs39RfVeA36S6ZchXs
THyr0mbND48rfooi3SI3OwOJ/jrBe3gJh4WqCUfyWLj/g5xODdXKqe6SqPTpttQT
XtZcPrp3fsaMy9pof40+Q7wOrpWtOy3wbrdFkl9Xmo3Y+cHJ+iUNSKeSMBGVEmkc
rBJsCdXLWOOGcwCOa6d0nsoCZMW1nRKbb6NkRzfVaAtYqkmqRDf39IFtYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsLqmdPTNevYtxGlDaBsTPkwMUtMB8GA1UdIwQY
MBaAFBkJ9gyLhe/tNh31trUcn+2uHH+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMt
NThlN2RiMzBlYTQ0LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMtNThlN2RiMzBlYTQ0
LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADe5UT7og
ko/TqeuEg3/Ug0EwT/GJIdBWq+PS+BHgtHenXmzmidX4SFp20lXm9durhfzOMV4g
ED0pnNfl5phij+roBVDRr8GgnQwhG/IYU3zMIRFrKqk7emVwrU10JgLw0VaY26kC
RWHM/BxgRTggsT6HxLtMmn0Cl/lFIa0e9AqVTLWxVXOnKfEp6k+qLLAn/NcNh/t3
h/P9Ex4GonaQb4XbBrd5/mnQGbUmcaDSQLfBEs8x/5D+7BKF/MOS03oZnaQm85mt
MwXt6dhGeSTemy+VvKGr3JN+/FSpfa3IKLn9yKORmec+BGj7gKwJ3D/drpoXiZtz
FhQyADXa34vMMw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:58:57 2026 by rpki-client