Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File:                     G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier:          pOtZZiZ7r1FZVeuoKlUy2J4kE45MRHNrfBHSUx8vFCg=
Subject key identifier:   D4:00:59:AA:4F:41:EE:AC:80:A1:1F:D4:C2:79:EC:94:B0:94:15:6F
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer:       /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial:       019EC1494146CD89600262AC92E5D694B421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 14:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:03 +0000
Files and hashes:         1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
                          2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: Tv19ALvqfL9wmJG/57GuU4IRddGOS/EQuO14tdBhXQY=)
                          3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:41:46:cd:89:60:02:62:ac:92:e5:d6:94:b4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
        Validity
            Not Before: Jun 13 14:01:03 2026 GMT
            Not After : Jun 14 14:01:03 2026 GMT
        Subject: CN=d40059aa4f41eeac80a11fd4c279ec94b094156f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:ce:b0:c1:07:e4:55:c4:07:56:e7:ac:58:
                    4d:87:3b:22:d9:72:fc:54:3b:b7:24:10:ed:f2:7f:
                    4a:36:6f:66:a4:ca:55:2b:be:02:62:b6:73:04:4c:
                    fd:3a:11:33:b1:5d:a1:91:18:1a:c6:85:cf:f0:4c:
                    86:03:9a:ea:8a:80:4b:9d:2b:42:14:f1:15:7e:09:
                    62:df:10:03:60:2f:56:4d:f2:8a:02:42:74:17:2f:
                    86:e3:85:4b:20:58:c4:d7:86:74:5f:27:4d:6c:ad:
                    72:21:69:5d:fb:0d:65:47:31:f1:cb:ac:ef:90:ca:
                    7c:0c:38:d5:9f:9a:6d:59:2d:c2:04:b3:ad:80:da:
                    06:d9:d4:9c:e2:35:a2:7f:28:9a:19:0a:8d:d9:c2:
                    d5:6e:da:a7:9d:19:04:af:bd:05:21:99:4e:1a:a7:
                    17:df:cb:51:4a:66:10:0c:34:00:9f:3b:38:13:1a:
                    15:b2:56:95:cb:e4:c3:85:c4:30:4f:7a:5b:2b:2f:
                    ca:ee:27:f3:c2:41:16:3f:6c:f3:3f:05:d7:f9:15:
                    a1:38:3e:4b:fe:d9:04:17:df:ab:29:d2:9b:96:2f:
                    5b:cb:94:6c:e8:2a:17:88:bd:ee:a5:36:fe:fc:d5:
                    bd:62:15:83:30:55:8b:a2:21:c7:9e:d9:ea:e6:8b:
                    6a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:59:AA:4F:41:EE:AC:80:A1:1F:D4:C2:79:EC:94:B0:94:15:6F
            X509v3 Authority Key Identifier:
                keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:51:2b:55:d0:c6:11:dc:10:78:19:1c:bb:8e:28:79:26:ac:
         23:5b:38:a0:1f:5e:76:b3:30:92:af:e9:39:b2:81:9d:29:fa:
         68:89:08:11:b8:47:3c:98:dd:32:a6:4e:c2:10:d0:f6:ab:20:
         c4:9a:e9:02:a3:53:c6:a6:8d:cb:5f:b0:db:76:66:9a:cd:a8:
         ba:9d:28:97:32:8a:4e:54:90:7f:db:ca:6b:f8:2a:17:42:92:
         8f:4f:3c:81:5c:7f:0d:a0:81:5e:8e:ba:30:c0:90:30:0c:f0:
         9a:a6:01:94:54:09:61:5e:1d:92:7e:47:d6:53:0e:ba:45:3a:
         68:00:94:11:44:e1:d7:41:ab:8a:b8:4a:e1:de:35:e0:b4:e4:
         f4:f4:20:5c:58:1f:af:5c:30:dc:51:d5:f2:d3:44:5b:b1:05:
         8d:6a:5f:35:80:1c:97:3e:d4:a8:c2:49:37:26:49:17:35:b5:
         01:66:92:fb:6e:e4:74:a7:8c:37:c8:b4:4a:d8:71:3f:d3:5c:
         62:66:d9:bd:65:0d:da:6e:30:44:c4:8c:a0:03:91:d0:a6:de:
         7f:3b:58:38:8d:f3:ca:ab:1c:f7:25:f8:87:f3:09:25:4a:2b:
         62:a7:5d:34:fe:c3:41:ef:c8:03:ac:2a:c0:37:bc:41:6d:fa:
         4f:a3:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:20 2026 by rpki-client