Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File:                     GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier:          gFUIqA/0U0SZg0WU6kI1mqc7c5l3B00Z+Tw9WAENs/s=
Subject key identifier:   62:05:EF:90:CD:A0:05:DD:87:E8:F0:C6:40:5A:F6:47:C5:66:96:23
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer:       /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial:       019FACACDBE9D6CE36B13B2316927D999B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number:          19DB
Signing time:             Wed 29 Jul 2026 07:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:37 +0000
Files and hashes:         1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=)
                          2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=)
                          3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: oKK5d4Fqi+XT+crcUuJls16QLbl8Hdm/x6KQigQ7tGM=)
                          4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:db:e9:d6:ce:36:b1:3b:23:16:92:7d:99:9b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
        Validity
            Not Before: Jul 29 07:00:37 2026 GMT
            Not After : Jul 30 07:00:37 2026 GMT
        Subject: CN=6205ef90cda005dd87e8f0c6405af647c5669623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:81:b4:22:5b:36:6c:f6:b6:c8:65:47:02:
                    10:71:de:d0:55:ec:5a:83:be:c6:0c:c7:f4:07:68:
                    0c:b6:36:f5:77:b9:ef:1a:56:bc:50:48:50:34:eb:
                    32:91:48:1f:0b:2e:56:30:57:2e:40:22:bb:a6:0a:
                    9a:fe:61:29:de:aa:33:82:e5:73:52:fe:a2:0c:a2:
                    bf:cc:df:cf:2b:df:79:a6:aa:f9:c0:6f:5e:1c:10:
                    3a:e8:3a:3c:00:fb:b9:23:13:c5:eb:f9:4a:4c:66:
                    a1:f2:ed:22:13:54:e2:c5:39:e0:72:35:b6:96:dd:
                    0c:15:48:cd:25:93:41:67:f3:8c:d2:78:17:ae:e7:
                    be:14:91:27:22:03:7a:bd:e1:46:87:18:1f:d1:2e:
                    d7:09:7a:7b:9c:ae:8c:49:19:e6:c8:ec:3e:1b:9c:
                    52:62:c0:c3:85:de:5b:62:f8:8b:77:d4:e8:a1:b2:
                    f2:87:96:79:1f:7c:14:eb:1d:99:89:03:44:9e:3e:
                    dd:ab:e4:8c:69:65:b9:f9:75:58:9c:7c:89:a8:8b:
                    a8:77:49:4e:ea:f9:08:f4:42:6a:67:fe:ff:82:66:
                    93:08:97:13:aa:7e:0b:c1:8f:70:b5:58:a4:fa:d6:
                    e9:48:d2:ae:13:fe:45:1d:61:dd:10:53:84:0d:7d:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:05:EF:90:CD:A0:05:DD:87:E8:F0:C6:40:5A:F6:47:C5:66:96:23
            X509v3 Authority Key Identifier:
                keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:fe:71:7d:51:93:22:97:20:99:80:28:d8:d3:eb:c1:26:
         60:39:57:34:a0:6c:d3:0b:6e:c4:9d:72:d6:0f:a6:f3:b8:7c:
         00:b1:eb:55:83:0c:c3:f3:a3:d8:78:66:75:c9:6d:24:9f:98:
         68:f8:81:99:af:31:07:00:ac:20:5e:c2:3f:9a:3d:aa:91:e4:
         e5:f7:db:af:91:5e:d4:f5:8d:ae:ce:6e:f5:a5:34:f4:98:46:
         42:cc:fa:99:4f:2d:bd:56:d6:19:20:c1:19:cb:41:f7:61:a1:
         d4:c4:f1:a5:13:f5:6f:e9:30:48:d1:1e:28:8b:03:34:02:71:
         4e:62:44:68:8a:db:01:44:f9:72:07:2c:1c:56:9f:95:89:4c:
         9b:7a:ca:b4:4e:22:4d:f7:54:24:ac:11:ae:9e:e1:70:1c:35:
         d8:f1:a4:a9:ea:38:e3:5b:0f:af:18:31:dd:d7:1c:8d:86:6c:
         37:05:81:8c:8a:79:9a:04:be:d6:81:a3:f5:e7:b8:df:aa:5a:
         1f:6d:c7:b4:a2:39:f4:e3:0b:c7:7f:92:c4:88:2d:21:60:98:
         0e:9d:2c:cc:5f:28:03:fb:e5:9a:39:a3:9c:80:ab:ce:1d:fc:
         92:e1:3d:0d:78:25:e0:6d:08:c5:ff:ce:fb:27:8b:f2:fb:7c:
         db:d1:b7:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srNvp1s42sTsjFpJ9mZtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx
NGM1NzEwHhcNMjYwNzI5MDcwMDM3WhcNMjYwNzMwMDcwMDM3WjAzMTEwLwYDVQQD
Eyg2MjA1ZWY5MGNkYTAwNWRkODdlOGYwYzY0MDVhZjY0N2M1NjY5NjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEuBtCJbNmz2tshlRwIQcd7QVexa
g77GDMf0B2gMtjb1d7nvGla8UEhQNOsykUgfCy5WMFcuQCK7pgqa/mEp3qozguVz
Uv6iDKK/zN/PK995pqr5wG9eHBA66Do8APu5IxPF6/lKTGah8u0iE1TixTngcjW2
lt0MFUjNJZNBZ/OM0ngXrue+FJEnIgN6veFGhxgf0S7XCXp7nK6MSRnmyOw+G5xS
YsDDhd5bYviLd9ToobLyh5Z5H3wU6x2ZiQNEnj7dq+SMaWW5+XVYnHyJqIuod0lO
6vkI9EJqZ/7/gmaTCJcTqn4LwY9wtVik+tbpSNKuE/5FHWHdEFOEDX03DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIF75DNoAXdh+jwxkBa9kfFZpYjMB8GA1UdIwQY
MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt
OWQzOTJlZWUwZjY2LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2
LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhr+cX1R
kyKXIJmAKNjT68EmYDlXNKBs0wtuxJ1y1g+m87h8ALHrVYMMw/Oj2HhmdcltJJ+Y
aPiBma8xBwCsIF7CP5o9qpHk5ffbr5Fe1PWNrs5u9aU09JhGQsz6mU8tvVbWGSDB
GctB92Gh1MTxpRP1b+kwSNEeKIsDNAJxTmJEaIrbAUT5cgcsHFaflYlMm3rKtE4i
TfdUJKwRrp7hcBw12PGkqeo441sPrxgx3dccjYZsNwWBjIp5mgS+1oGj9ee436pa
H23HtKI59OMLx3+SxIgtIWCYDp0szF8oA/vlmjmjnICrzh38kuE9DXgl4G0Ixf/O
+yeL8vt829G37Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:36:26 2026 by rpki-client