Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File:                     GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier:          6opaeZCi1B9S9qPil2mtNDl9gpnhw3UT55kiTD+jhNU=
Subject key identifier:   99:47:83:17:47:AE:74:FF:9D:64:67:95:58:34:CF:AE:E6:5F:20:8B
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer:       /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial:       019EC3372A547B58B4A1AF19461D3FB7D5FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number:          1659
Signing time:             Sat 13 Jun 2026 23:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:32 +0000
Files and hashes:         1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: Qhpx7OjxdyMxdtChsQ0dbjUjYTp4NSKAiqc+v2VG3z8=)
                          2: fXd2qSqxEZOV3cRcZOHurquaaX0.roa (hash: NECx1b/w4K5wTYVhS/vbFQNkkaTK5gq/qEzzHsYYuUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:2a:54:7b:58:b4:a1:af:19:46:1d:3f:b7:d5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
        Validity
            Not Before: Jun 13 23:00:32 2026 GMT
            Not After : Jun 14 23:00:32 2026 GMT
        Subject: CN=9947831747ae74ff9d6467955834cfaee65f208b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:c7:63:2e:4b:a2:12:bf:78:e5:99:9e:66:
                    4f:14:c4:f5:a1:3f:19:6e:1c:c3:8f:85:72:a1:91:
                    f8:2b:be:4f:f6:a5:04:21:c8:75:25:5c:f4:1e:c5:
                    c1:52:5f:f0:ba:d3:2c:e5:79:35:05:1d:86:7a:1c:
                    7e:6f:44:42:b2:48:1a:78:4e:04:f6:b2:bb:f2:cf:
                    40:0b:ee:f9:b4:0f:2c:b5:55:65:15:8e:9f:b8:ed:
                    a0:7a:0a:e6:09:81:39:4b:a5:a8:8e:8f:84:ce:04:
                    70:90:bb:b0:5b:2a:c0:dc:4b:db:c8:de:d0:b3:e1:
                    f5:13:8c:f1:36:c5:5c:2f:43:56:34:a5:5a:09:3f:
                    b4:4b:f2:fe:3d:38:e0:88:a6:0e:da:e3:d9:5d:bc:
                    fa:5b:bc:ca:9f:cf:34:10:e5:59:9c:7d:a9:f2:53:
                    60:61:6d:23:4d:bf:98:a4:dd:a8:22:55:19:63:ca:
                    91:e6:6d:6a:7d:0e:61:7e:55:69:f9:74:0d:1d:ef:
                    a9:41:db:de:b5:d4:b4:5d:7a:8c:4c:8e:70:ca:f1:
                    02:a8:73:f4:a6:65:c0:75:6b:ea:ea:4f:9d:a6:88:
                    12:4f:dc:5d:52:a2:2d:f6:04:48:9a:5e:1e:7d:9e:
                    04:93:72:d1:bd:0e:f4:0f:b3:00:a1:57:63:b8:cc:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:83:17:47:AE:74:FF:9D:64:67:95:58:34:CF:AE:E6:5F:20:8B
            X509v3 Authority Key Identifier:
                keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:25:43:8e:2e:ea:8b:47:03:b5:9b:f1:a3:50:68:af:7e:8c:
         84:04:19:f2:47:22:02:ba:6a:5f:59:70:72:76:80:e8:78:09:
         42:c5:f0:fc:99:34:a1:24:98:fa:df:04:c6:73:58:50:d2:31:
         fc:2b:a4:ef:c6:d4:31:69:6a:ad:3d:7e:34:30:bb:04:e2:24:
         e0:cd:04:d2:b6:c2:a3:35:d7:74:eb:cf:fd:7f:7e:d2:55:ba:
         69:83:57:b3:3b:a9:77:cd:00:1a:5d:d0:32:7f:63:8a:8d:95:
         ce:98:55:8a:96:d7:6e:84:27:8b:11:ca:c4:05:92:55:f2:76:
         c7:1d:18:b9:d6:98:d9:f8:d8:f5:38:36:ef:d3:f3:da:c8:a4:
         7d:fb:5c:86:2a:ff:f0:c4:92:89:c1:24:64:c6:85:f9:e9:f7:
         33:b9:42:f1:cb:97:7b:49:38:29:2f:0b:4b:fa:39:21:fb:9d:
         37:4a:ca:f1:34:c9:ea:fb:7b:3d:44:2d:ad:32:66:91:1c:a5:
         a9:48:07:63:11:1a:b6:60:44:0d:47:98:63:7c:0e:30:19:c2:
         95:84:8d:9c:a1:36:eb:a9:99:58:6b:8f:af:90:19:1f:06:61:
         e1:54:09:6a:19:d1:d7:ce:a0:aa:c5:7b:56:2e:d9:0d:55:4d:
         c5:2c:d9:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DNypUe1i0oa8ZRh0/t9X+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNjBiOTY2NzA4OTNmYzNkNjM3MWY2YzU3NDZjNWYyNmI2
YTIwM2QwHhcNMjYwNjEzMjMwMDMyWhcNMjYwNjE0MjMwMDMyWjAzMTEwLwYDVQQD
Eyg5OTQ3ODMxNzQ3YWU3NGZmOWQ2NDY3OTU1ODM0Y2ZhZWU2NWYyMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCHHYy5LohK/eOWZnmZPFMT1oT8Z
bhzDj4VyoZH4K75P9qUEIch1JVz0HsXBUl/wutMs5Xk1BR2Gehx+b0RCskgaeE4E
9rK78s9AC+75tA8stVVlFY6fuO2gegrmCYE5S6Wojo+EzgRwkLuwWyrA3EvbyN7Q
s+H1E4zxNsVcL0NWNKVaCT+0S/L+PTjgiKYO2uPZXbz6W7zKn880EOVZnH2p8lNg
YW0jTb+YpN2oIlUZY8qR5m1qfQ5hflVp+XQNHe+pQdvetdS0XXqMTI5wyvECqHP0
pmXAdWvq6k+dpogST9xdUqIt9gRIml4efZ4Ek3LRvQ70D7MAoVdjuMzPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlHgxdHrnT/nWRnlVg0z67mXyCLMB8GA1UdIwQY
MBaAFBpguWZwiT/D1jcfbFdGxfJraiA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjkt
NmE2MTM5NGY2MjY5LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjktNmE2MTM5NGY2MjY5
LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSVDji7q
i0cDtZvxo1Bor36MhAQZ8kciArpqX1lwcnaA6HgJQsXw/Jk0oSSY+t8ExnNYUNIx
/Cuk78bUMWlqrT1+NDC7BOIk4M0E0rbCozXXdOvP/X9+0lW6aYNXszupd80AGl3Q
Mn9jio2VzphVipbXboQnixHKxAWSVfJ2xx0YudaY2fjY9Tg279Pz2sikfftchir/
8MSSicEkZMaF+en3M7lC8cuXe0k4KS8LS/o5IfudN0rK8TTJ6vt7PUQtrTJmkRyl
qUgHYxEatmBEDUeYY3wOMBnClYSNnKE266mZWGuPr5AZHwZh4VQJahnR186gqsV7
Vi7ZDVVNxSzZVA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:45 2026 by rpki-client