Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          jmd9nU+4KLnQUfJ5xMsFi9AH88lHfKQHh7+J2a6FNuA=
Subject key identifier:   2F:B4:00:56:6F:E5:F8:8E:27:B6:0E:97:4A:70:87:78:FA:59:D0:08
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       019EC06D1029C184EE7EB0B540254DB347A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          19A0
Signing time:             Sat 13 Jun 2026 10:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:33 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: LXtzaN4k6pZjjNzD9TQWXH2u30fOupkmVFt3kY6+/7E=)
                          2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
                          3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
                          4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
                          5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
                          6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
                          7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
                          8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
                          9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
                          10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
                          11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
                          12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
                          13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
                          14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
                          15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
                          16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
                          17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
                          18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
                          19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
                          20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
                          21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
                          22: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
                          23: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:10:29:c1:84:ee:7e:b0:b5:40:25:4d:b3:47:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Jun 13 10:00:33 2026 GMT
            Not After : Jun 14 10:00:33 2026 GMT
        Subject: CN=2fb400566fe5f88e27b60e974a708778fa59d008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:67:60:8d:d2:b3:55:00:a3:f0:bf:7b:73:
                    f3:94:97:61:5a:44:2e:21:e1:74:65:aa:13:e7:b5:
                    21:3c:e6:1a:79:7e:aa:2b:86:4c:29:f7:69:7f:cc:
                    52:e6:c0:18:ea:66:3c:d8:57:82:84:9e:97:c2:a2:
                    37:9a:2d:af:e4:52:f2:f5:fc:28:a7:c0:e3:94:fb:
                    b9:b1:38:32:30:59:51:72:30:2e:65:27:88:24:a1:
                    be:61:92:01:09:84:6b:0b:06:8d:bc:83:f4:7a:c5:
                    ba:c9:42:25:c0:da:2d:60:3d:73:d3:31:cb:a2:d4:
                    e7:87:2a:58:e2:35:7f:30:d4:8b:0c:6f:6e:d4:4e:
                    89:42:4c:96:45:cf:f7:b9:45:0a:0f:12:00:43:7a:
                    39:a5:8c:cc:50:67:bd:47:3d:90:f7:ef:eb:a4:d1:
                    fe:45:73:00:c0:05:0b:e4:cc:92:0d:01:87:75:14:
                    f4:a8:1d:b3:8b:50:79:8b:20:c9:11:48:9c:6e:59:
                    e5:7c:ee:2a:79:ed:5c:29:45:69:08:c0:6e:ad:d5:
                    9d:63:8d:2e:14:07:3a:15:15:77:80:74:27:35:04:
                    4a:fc:f8:d6:87:e9:4a:e8:0d:a9:7a:bd:84:d3:60:
                    69:e7:f0:08:a2:1e:ef:c4:38:4b:c0:0a:6f:89:be:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B4:00:56:6F:E5:F8:8E:27:B6:0E:97:4A:70:87:78:FA:59:D0:08
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:eb:6c:c7:31:19:1d:72:ac:60:01:5f:30:d6:79:fe:93:
         1a:37:c3:35:ed:92:28:02:33:eb:95:f1:72:75:e1:5d:f4:a7:
         11:bb:6c:91:81:a1:e3:db:cb:0a:2c:25:20:ba:7c:33:ec:b5:
         33:89:b2:27:25:7c:29:b4:32:74:79:ee:68:96:ad:74:ff:97:
         d4:c9:fe:02:32:07:9a:c8:34:65:20:ac:66:1e:1f:e4:1b:51:
         f4:43:30:92:3c:9c:b5:7d:0f:64:24:50:b5:f4:47:4e:9b:60:
         db:69:1d:34:d5:5f:80:94:e4:42:2d:88:29:0b:a2:21:b4:6a:
         8a:37:65:8b:de:bf:e6:4d:7b:e8:d9:f2:a9:e8:24:03:46:7a:
         03:aa:be:c8:f7:a4:22:66:c3:70:8b:a7:34:f4:ed:24:49:77:
         e9:38:18:3a:01:93:2d:94:df:1b:34:cc:7a:95:25:ee:fe:34:
         0a:2a:56:2b:76:94:ac:7d:35:f1:23:c9:06:fa:36:57:bc:f4:
         22:de:06:a6:20:3c:10:98:55:60:97:d3:b1:ef:0e:57:be:e2:
         b9:20:6c:7d:cf:c0:04:6e:ff:f1:96:7c:56:6d:d2:86:cf:12:
         35:7b:c9:aa:92:fc:45:f0:7e:5a:f5:3b:da:d8:42:c3:84:5e:
         1c:9c:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:11:58 2026 by rpki-client