Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          /QNuk1x1ymD5BbtfczeyX+7ejyIZy5hJ4WbsMHPyx+U=
Subject key identifier:   A8:4C:91:F9:E4:CC:E1:15:14:35:1F:35:4C:05:14:73:39:3E:94:96
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       019EB8EAA069B1BBFA06DBB1658D17666042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          1959
Signing time:             Thu 11 Jun 2026 23:00:44 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:44 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:44 +0000
Files and hashes:         1: BW_NoLK8bvq98NW3uQCVBILUjdc.roa (hash: Yv7HzXY6brkJdNWi4vkWfsAkacdbGVR0g6RZPDb2Wbo=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: vUOfHV1NR7ymwOervOmX5KZEVIC7qger9ZSZ2GbUIe4=)
                          3: UvhzMGyTfEF1hpgc3K2nc1IVHoI.roa (hash: cbsC5/gFhJ1QzmTO5tqc9Od4dJZpIwpWSVpRJbM9KoY=)
                          4: vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa (hash: FsUD/qILrBqWkPuIKdZisJEsoMgHswVeHLUrDTTRgbo=)
                          5: wIewyVcuV4glOwAciJdc6xtEcA0.roa (hash: P+orYhZY32r0vN37BZW90hJsNwEYMuvTdq9aVkdcNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:a0:69:b1:bb:fa:06:db:b1:65:8d:17:66:60:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Jun 11 23:00:44 2026 GMT
            Not After : Jun 12 23:00:44 2026 GMT
        Subject: CN=a84c91f9e4cce11514351f354c051473393e9496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:74:b7:bd:e8:99:e4:c8:9c:2c:c3:5b:5a:d9:
                    bf:53:7d:0e:df:c4:7f:6a:8c:ac:22:fb:9b:1f:5c:
                    d4:62:bb:6a:93:6c:6e:bd:99:98:db:a2:04:e4:b3:
                    28:74:30:1f:63:73:7f:cb:48:41:9d:44:45:e5:ec:
                    23:d9:61:b1:0e:4e:c7:fa:82:a9:89:fb:03:82:b3:
                    49:e2:49:9e:d3:e9:4a:8f:4a:6b:54:08:25:a7:f7:
                    4e:01:5c:2a:81:db:71:54:11:ea:77:03:16:5c:6a:
                    17:c2:e7:68:16:b3:68:4a:08:e2:67:37:42:6c:3e:
                    13:63:8c:39:6c:75:55:9d:02:31:85:a1:93:a6:48:
                    f9:2d:cd:0d:cf:55:da:8d:7e:ba:1e:66:6f:41:5b:
                    72:bc:f5:90:12:1d:51:58:8d:93:00:d6:54:a9:8b:
                    e4:79:e7:71:cd:9d:3a:e6:08:c6:25:a6:19:41:a1:
                    3f:11:15:8f:fb:2c:b7:20:e0:fb:42:26:9d:fd:9b:
                    48:cd:eb:e1:29:f5:26:ac:90:19:79:3d:83:82:d4:
                    d5:2a:17:c6:7c:4d:c7:69:ec:c7:1f:f2:16:cd:2f:
                    b3:09:b3:a6:5a:1a:c7:26:39:04:66:c6:72:18:b9:
                    08:99:59:21:13:a0:92:5c:cd:43:df:d1:10:d3:78:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4C:91:F9:E4:CC:E1:15:14:35:1F:35:4C:05:14:73:39:3E:94:96
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b0:0c:28:e1:cb:65:38:56:1d:06:6b:b7:d7:43:3a:4f:f4:
         cf:a2:f3:51:a6:3d:9a:7d:67:06:4e:05:6a:b0:80:a0:db:d6:
         15:79:db:d8:ae:dd:4b:dc:80:b9:84:3f:19:8f:55:bc:05:02:
         6c:6e:d2:96:bf:ee:de:61:dd:10:62:8c:d1:2b:4d:41:75:cb:
         dc:8b:da:ef:54:d1:50:bc:05:87:a5:e7:f2:9b:1d:c2:c8:c5:
         0e:e2:5d:79:88:58:4b:a4:30:67:52:d8:c1:71:43:59:b3:8a:
         83:fe:21:09:66:02:0e:0b:95:b5:28:3b:4f:9d:d6:81:10:78:
         fd:7e:d3:7f:fa:3e:4c:8c:03:c1:c5:58:32:79:45:bf:46:22:
         bb:4b:3c:3a:2c:78:a9:48:90:aa:56:ab:4d:38:de:10:6f:4a:
         08:41:9d:9c:9d:d5:89:20:73:88:6c:1b:0e:52:41:04:5f:e8:
         3a:23:75:a1:bb:88:6c:cb:4d:ee:52:35:a3:0f:26:50:31:07:
         5d:0b:cc:7e:d8:74:96:03:48:78:4f:a2:ab:e4:85:62:91:e2:
         46:78:2d:e1:dd:62:1c:99:20:27:4d:25:fb:ed:f1:26:7a:f2:
         10:d0:9d:76:5d:a1:e6:4c:21:4f:7e:81:85:58:59:d7:b3:6a:
         a3:08:57:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646qBpsbv6BtuxZY0XZmBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Y2FlYjE0YTAxZWUxNmQ4MzY1NjVlMTRmYTUzYjRhYjNj
M2NkMjYwHhcNMjYwNjExMjMwMDQ0WhcNMjYwNjEyMjMwMDQ0WjAzMTEwLwYDVQQD
EyhhODRjOTFmOWU0Y2NlMTE1MTQzNTFmMzU0YzA1MTQ3MzM5M2U5NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3S3veiZ5MicLMNbWtm/U30O38R/
aoysIvubH1zUYrtqk2xuvZmY26IE5LModDAfY3N/y0hBnURF5ewj2WGxDk7H+oKp
ifsDgrNJ4kme0+lKj0prVAglp/dOAVwqgdtxVBHqdwMWXGoXwudoFrNoSgjiZzdC
bD4TY4w5bHVVnQIxhaGTpkj5Lc0Nz1XajX66HmZvQVtyvPWQEh1RWI2TANZUqYvk
eedxzZ065gjGJaYZQaE/ERWP+yy3IOD7Qiad/ZtIzevhKfUmrJAZeT2DgtTVKhfG
fE3HaezHH/IWzS+zCbOmWhrHJjkEZsZyGLkImVkhE6CSXM1D39EQ03j4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhMkfnkzOEVFDUfNUwFFHM5PpSWMB8GA1UdIwQY
MBaAFBjK6xSgHuFtg2Vl4U+lO0qzw80mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYt
ZWRkZjIzYzFiYTZkLzEvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYtZWRkZjIzYzFiYTZk
LzEvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7AMKOHL
ZThWHQZrt9dDOk/0z6LzUaY9mn1nBk4FarCAoNvWFXnb2K7dS9yAuYQ/GY9VvAUC
bG7Slr/u3mHdEGKM0StNQXXL3Iva71TRULwFh6Xn8psdwsjFDuJdeYhYS6QwZ1LY
wXFDWbOKg/4hCWYCDguVtSg7T53WgRB4/X7Tf/o+TIwDwcVYMnlFv0Yiu0s8Oix4
qUiQqlarTTjeEG9KCEGdnJ3ViSBziGwbDlJBBF/oOiN1obuIbMtN7lI1ow8mUDEH
XQvMfth0lgNIeE+iq+SFYpHiRngt4d1iHJkgJ00l++3xJnryENCddl2h5kwhT36B
hVhZ17NqowhX2Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:47 2026 by rpki-client