Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File:                     gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier:          jZIa4sE2Q1qIA9Eg1K1ywItfD8BlYICU4Isd7hkYFA8=
Subject key identifier:   E7:91:FC:6E:AB:E5:CA:EF:36:2D:E0:D5:84:15:AC:D6:B8:A1:69:5D
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer:       /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial:       019E2A39265A523537BA605892DF437F8238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number:          08B8
Signing time:             Fri 15 May 2026 06:00:48 +0000
Manifest this update:     Fri 15 May 2026 06:00:48 +0000
Manifest next update:     Sat 16 May 2026 06:00:48 +0000
Files and hashes:         1: QKjiIqM0UbknWM_0hZSPOOQrhbE.roa (hash: Ym8+l1LE5PwdsL5Z1gyeamQjMBjG/nU2Uc7hHjtf64w=)
                          2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: AS34AX7hFPXqERQjm7991Ts9cEr+RZHroc+jZ1H3r5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:26:5a:52:35:37:ba:60:58:92:df:43:7f:82:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
        Validity
            Not Before: May 15 06:00:48 2026 GMT
            Not After : May 16 06:00:48 2026 GMT
        Subject: CN=e791fc6eabe5caef362de0d58415acd6b8a1695d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:89:6c:be:7f:09:82:0a:26:11:38:e8:6c:
                    93:dc:a8:b2:ab:fe:25:e2:60:41:3b:d8:c5:53:7d:
                    0c:95:23:cb:e9:41:3d:bc:ed:fa:78:8a:d1:f4:fc:
                    97:2d:21:ff:c3:a0:f5:8c:fd:1a:0d:b8:46:d8:a4:
                    fc:6f:e7:63:35:56:01:0f:23:a2:80:e7:fa:40:e6:
                    7b:fb:60:3b:66:e0:99:9b:04:97:60:33:66:22:01:
                    21:6e:14:23:db:7b:e9:cb:46:21:7b:ba:e6:0d:0e:
                    32:c3:6b:35:50:ba:12:04:8e:4c:76:a7:6d:69:57:
                    19:3e:78:1a:75:e5:b4:30:bb:48:5a:70:71:c1:18:
                    9c:83:ad:f3:ca:c9:4b:d8:24:f2:d1:81:a3:7f:d9:
                    9c:4a:dc:ac:2c:cd:44:6a:0e:2d:96:1f:c2:37:7f:
                    a7:99:88:66:0b:3b:59:d2:f3:83:c9:b8:f1:38:5d:
                    36:3f:3e:3d:c0:95:4f:63:b5:4e:e3:09:ef:d8:93:
                    29:d6:9e:be:5e:a1:42:ff:18:1a:8f:d4:b1:fb:e4:
                    c5:24:4a:e3:91:ea:99:e4:5b:cb:29:ef:84:e5:29:
                    9d:4b:cf:f4:ed:56:13:e5:81:ce:e2:bb:c6:8c:3c:
                    b9:ec:2a:fc:96:06:38:98:12:8c:28:27:8c:3b:0c:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:FC:6E:AB:E5:CA:EF:36:2D:E0:D5:84:15:AC:D6:B8:A1:69:5D
            X509v3 Authority Key Identifier:
                keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:06:07:62:7d:c2:de:a8:35:dd:0d:b3:17:2f:93:e3:92:
         8e:50:91:91:9b:da:08:d1:81:1b:e7:af:4f:d5:78:bc:f2:d8:
         ca:77:ac:e2:87:dc:62:93:31:b0:5b:ba:42:f3:94:be:d2:da:
         b8:34:e7:ff:f3:65:94:22:96:ae:36:40:b5:a3:67:14:0d:07:
         1e:f3:fb:5b:bc:b3:17:32:57:44:95:ac:64:da:37:2f:cd:a0:
         13:bf:b0:47:52:69:69:00:b1:27:6d:57:5c:70:2e:d0:9e:8a:
         e4:19:6d:37:4a:9a:99:1b:fe:e1:49:00:e0:77:76:3c:11:3a:
         58:a0:0d:59:f9:3a:c5:56:56:40:63:9d:de:c9:0d:db:50:c8:
         f1:71:f3:f7:d6:9b:59:70:fb:56:82:6b:49:c2:1a:b1:ab:cb:
         b8:8a:35:e4:a5:53:e6:80:c6:93:86:fc:19:30:3e:15:5a:ed:
         70:e0:93:7d:62:61:87:52:3a:6e:27:fe:f2:be:fc:71:5c:9a:
         4f:a6:6d:a4:8c:84:30:c1:5a:01:de:5b:84:03:21:6c:47:d9:
         6c:dd:2f:da:00:fe:91:bd:d4:85:b9:57:0c:1c:9c:c5:85:76:
         31:30:92:c8:79:13:56:c8:76:2c:43:a1:63:3c:ac:22:8f:8a:
         97:12:d9:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qOSZaUjU3umBYkt9Df4I4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzMzMTQ2ZTNlOWQ2ZTExNTQ2MzE3Zjc1MjE5ZWEyMDJj
NWY5MmQwHhcNMjYwNTE1MDYwMDQ4WhcNMjYwNTE2MDYwMDQ4WjAzMTEwLwYDVQQD
EyhlNzkxZmM2ZWFiZTVjYWVmMzYyZGUwZDU4NDE1YWNkNmI4YTE2OTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrqJbL5/CYIKJhE46GyT3Kiyq/4l
4mBBO9jFU30MlSPL6UE9vO36eIrR9PyXLSH/w6D1jP0aDbhG2KT8b+djNVYBDyOi
gOf6QOZ7+2A7ZuCZmwSXYDNmIgEhbhQj23vpy0Yhe7rmDQ4yw2s1ULoSBI5Mdqdt
aVcZPngadeW0MLtIWnBxwRicg63zyslL2CTy0YGjf9mcStysLM1Eag4tlh/CN3+n
mYhmCztZ0vODybjxOF02Pz49wJVPY7VO4wnv2JMp1p6+XqFC/xgaj9Sx++TFJErj
keqZ5FvLKe+E5SmdS8/07VYT5YHO4rvGjDy57Cr8lgY4mBKMKCeMOwypywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeR/G6r5crvNi3g1YQVrNa4oWldMB8GA1UdIwQY
MBaAFIJzMUbj6dbhFUYxf3UhnqICxfktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80ZDVlMTYtNWU2NS00ZWQ4LWJiZTMt
YmFjYjAyODUzOGRjLzEvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80ZDVlMTYtNWU2NS00ZWQ4LWJiZTMtYmFjYjAyODUzOGRj
LzEvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgg4GB2J9
wt6oNd0Nsxcvk+OSjlCRkZvaCNGBG+evT9V4vPLYynes4ofcYpMxsFu6QvOUvtLa
uDTn//NllCKWrjZAtaNnFA0HHvP7W7yzFzJXRJWsZNo3L82gE7+wR1JpaQCxJ21X
XHAu0J6K5BltN0qamRv+4UkA4Hd2PBE6WKANWfk6xVZWQGOd3skN21DI8XHz99ab
WXD7VoJrScIasavLuIo15KVT5oDGk4b8GTA+FVrtcOCTfWJhh1I6bif+8r78cVya
T6ZtpIyEMMFaAd5bhAMhbEfZbN0v2gD+kb3UhblXDBycxYV2MTCSyHkTVsh2LEOh
YzysIo+KlxLZIg==
-----END CERTIFICATE-----
Generated at Fri May 15 09:51:30 2026 by rpki-client