Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File:                     GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier:          nmfSTaserdWFkWqfse7u/hzmfE9X131qSAWyvIhcC9s=
Subject key identifier:   4C:42:0B:F5:41:9B:EE:8D:D0:8E:9E:72:DC:66:31:B6:54:C8:D5:DF
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer:       /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial:       019EC29273F61E28230548E33CDFCA2859AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number:          1859
Signing time:             Sat 13 Jun 2026 20:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:38 +0000
Files and hashes:         1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: iLlRZ5Qsf5swUI0L4RiN23mB0U6eJZM33ptS+9Rbn+8=)
                          2: Z0_zAV1Qro2ldozAcdxyKQi0OQU.roa (hash: xEsTqLQfCCv7FY6OZ8FW4GDtw57riHCFBltpmR9h+Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:73:f6:1e:28:23:05:48:e3:3c:df:ca:28:59:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
        Validity
            Not Before: Jun 13 20:00:38 2026 GMT
            Not After : Jun 14 20:00:38 2026 GMT
        Subject: CN=4c420bf5419bee8dd08e9e72dc6631b654c8d5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:97:bf:b4:4a:52:2d:35:48:70:ca:ad:60:
                    5c:79:ea:c9:9f:48:bc:6f:24:36:09:35:c1:ca:5e:
                    cc:14:8a:63:94:d2:aa:86:d8:27:33:27:b4:e4:db:
                    d8:de:85:3d:de:f0:8e:7b:55:1d:25:34:08:7c:cc:
                    ea:b2:a6:45:09:01:63:74:4a:7f:8b:c5:0a:89:a1:
                    41:62:61:7b:d5:1a:94:b3:e2:75:8b:a7:78:cf:7c:
                    4c:b2:43:5d:72:d4:d5:3d:0d:cc:d7:24:94:1a:16:
                    e0:ec:14:dd:0f:2f:5b:e8:3c:b1:8c:3d:de:df:83:
                    cb:7f:22:5a:9c:6d:6b:ac:55:41:f3:48:ca:11:35:
                    7c:69:5c:8d:e9:99:95:2e:ee:20:56:4d:34:30:9d:
                    b4:79:06:59:07:96:4f:7a:94:d9:c0:9d:2b:29:31:
                    e6:ad:af:4a:08:3a:dd:d3:ae:5c:d3:f5:2c:83:02:
                    9e:b3:32:4b:27:47:d3:54:b1:e5:25:b5:e3:22:6f:
                    71:29:6d:70:fc:09:ff:12:95:d6:65:f7:0a:47:34:
                    0b:bc:88:95:8f:51:0c:8f:be:5b:de:81:9a:ad:3f:
                    e1:7b:75:7d:45:ec:17:42:27:c9:4d:81:fe:53:67:
                    62:a7:7d:20:5f:ac:ed:35:77:03:67:4d:b0:32:66:
                    9d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:42:0B:F5:41:9B:EE:8D:D0:8E:9E:72:DC:66:31:B6:54:C8:D5:DF
            X509v3 Authority Key Identifier:
                keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:e1:a6:3a:ee:66:14:3b:36:18:87:ab:ac:f6:76:c0:59:
         ea:44:70:a0:2e:a3:01:1c:5d:7e:27:23:48:63:46:27:78:f7:
         aa:ca:45:80:ee:ba:aa:8d:85:79:1a:de:30:94:01:c8:7e:98:
         ff:37:81:c4:d7:0e:35:b3:e8:26:90:8f:de:f7:f9:3a:01:17:
         c1:8f:61:33:bd:11:71:d7:2a:1f:14:ac:5c:58:d4:9c:41:8f:
         db:ed:28:7e:6c:19:81:09:b1:75:3a:bb:96:26:f8:be:1d:0e:
         47:69:82:6e:55:8d:91:31:f5:08:85:0e:5f:1c:b9:83:cf:a2:
         a4:2d:48:9d:71:8d:f0:da:09:4c:15:7d:e2:1a:8a:1c:22:73:
         fa:c7:81:2e:7d:92:49:a6:86:fe:98:40:2b:ed:84:0c:f0:2e:
         75:e2:66:59:03:13:01:f2:89:ee:f9:b1:92:a8:44:d5:f3:c4:
         ae:b4:50:48:c2:d8:b9:23:87:b8:05:f0:de:80:6d:ea:26:47:
         ce:cd:ca:a3:56:e4:ae:cd:87:f3:7e:06:e3:f7:70:94:6a:29:
         3a:97:2c:2d:4c:d6:f7:f7:24:5b:f7:f4:81:8c:84:58:5e:2d:
         c7:8b:bc:a7:81:41:7d:15:f5:18:c6:4a:11:94:3b:ea:42:7d:
         99:72:c9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CknP2HigjBUjjPN/KKFmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YTQzZDgxNjU3YTNjMzhjMTUwZGU1NTc5N2YxYzdiNWYw
YzJlYmIwHhcNMjYwNjEzMjAwMDM4WhcNMjYwNjE0MjAwMDM4WjAzMTEwLwYDVQQD
Eyg0YzQyMGJmNTQxOWJlZThkZDA4ZTllNzJkYzY2MzFiNjU0YzhkNWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiiXv7RKUi01SHDKrWBceerJn0i8
byQ2CTXByl7MFIpjlNKqhtgnMye05NvY3oU93vCOe1UdJTQIfMzqsqZFCQFjdEp/
i8UKiaFBYmF71RqUs+J1i6d4z3xMskNdctTVPQ3M1ySUGhbg7BTdDy9b6DyxjD3e
34PLfyJanG1rrFVB80jKETV8aVyN6ZmVLu4gVk00MJ20eQZZB5ZPepTZwJ0rKTHm
ra9KCDrd065c0/UsgwKeszJLJ0fTVLHlJbXjIm9xKW1w/An/EpXWZfcKRzQLvIiV
j1EMj75b3oGarT/he3V9RewXQifJTYH+U2dip30gX6ztNXcDZ02wMmad+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExCC/VBm+6N0I6ectxmMbZUyNXfMB8GA1UdIwQY
MBaAFBmkPYFlejw4wVDeVXl/HHtfDC67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wZjNjNjEtMDJkZi00YWY3LWI5M2Yt
MDdmNzRjMDE5NzMyLzEvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wZjNjNjEtMDJkZi00YWY3LWI5M2YtMDdmNzRjMDE5NzMy
LzEvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXXhpjru
ZhQ7NhiHq6z2dsBZ6kRwoC6jARxdficjSGNGJ3j3qspFgO66qo2FeRreMJQByH6Y
/zeBxNcONbPoJpCP3vf5OgEXwY9hM70RcdcqHxSsXFjUnEGP2+0ofmwZgQmxdTq7
lib4vh0OR2mCblWNkTH1CIUOXxy5g8+ipC1InXGN8NoJTBV94hqKHCJz+seBLn2S
SaaG/phAK+2EDPAudeJmWQMTAfKJ7vmxkqhE1fPErrRQSMLYuSOHuAXw3oBt6iZH
zs3Ko1bkrs2H834G4/dwlGopOpcsLUzW9/ckW/f0gYyEWF4tx4u8p4FBfRX1GMZK
EZQ76kJ9mXLJkQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:30 2026 by rpki-client