Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File:                     GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier:          dDqFzf6wWPNI0Qxc+v+VCl9RachCsGISw9mKoomlmHY=
Subject key identifier:   36:97:23:66:02:40:1D:F7:DF:DB:B2:BA:82:47:5F:C4:6D:49:72:79
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer:       /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial:       019EC36E9A5C1E0191BA4F95FE5409C40A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number:          195D
Signing time:             Sun 14 Jun 2026 00:01:06 +0000
Manifest this update:     Sun 14 Jun 2026 00:01:06 +0000
Manifest next update:     Mon 15 Jun 2026 00:01:06 +0000
Files and hashes:         1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=)
                          2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: y+blCtFXZalOsip6AthPSkg7J5jA8mbyzILlYELSiH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:9a:5c:1e:01:91:ba:4f:95:fe:54:09:c4:0a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
        Validity
            Not Before: Jun 14 00:01:06 2026 GMT
            Not After : Jun 15 00:01:06 2026 GMT
        Subject: CN=3697236602401df7dfdbb2ba82475fc46d497279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:60:9a:ed:a9:42:0b:1d:01:76:28:bd:21:
                    88:0a:54:5c:9f:65:9f:c4:07:b8:ce:10:3f:0a:fd:
                    f5:e8:d8:80:69:22:c8:0b:76:d7:89:9b:f4:42:74:
                    6d:c9:b8:9f:11:8e:8d:40:ec:9c:91:6b:99:5a:13:
                    8d:ad:5c:c6:7e:38:37:38:75:e1:c2:bf:68:3a:fd:
                    80:a6:b5:aa:23:55:12:bb:85:75:38:e2:36:1f:36:
                    e2:3d:48:71:91:34:df:5a:26:fe:95:34:5b:d2:aa:
                    97:0b:3d:9c:55:5f:c0:d7:ea:9f:4f:fd:26:d3:84:
                    7b:1e:73:15:de:34:26:8c:ca:7e:9a:dd:50:c5:40:
                    e3:be:31:f4:f2:26:8f:05:75:12:92:ed:66:ea:f0:
                    c4:cb:2c:a2:9d:10:77:81:d2:a8:c5:8b:15:a0:11:
                    8e:10:23:82:ab:c2:a3:3d:10:91:bf:a8:47:83:ff:
                    8d:6f:15:04:91:98:cc:b0:3d:e1:5d:e6:8f:53:be:
                    b6:24:80:2d:24:17:4b:0d:9c:96:2a:57:04:6f:32:
                    91:f2:3d:fa:a4:ae:f2:67:cc:e6:5b:09:90:7e:f6:
                    40:fd:f0:51:e1:80:0f:3f:2f:a4:08:9e:3e:51:a6:
                    c0:5c:c0:e1:54:6e:45:71:71:26:6e:87:51:ea:5c:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:97:23:66:02:40:1D:F7:DF:DB:B2:BA:82:47:5F:C4:6D:49:72:79
            X509v3 Authority Key Identifier:
                keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:51:c9:81:1b:7e:65:90:d2:b5:19:7c:61:dc:94:27:f0:00:
         9c:07:a2:c6:c5:03:72:58:0d:5b:6a:fc:c8:17:a4:48:27:fe:
         79:bf:60:4b:52:c2:85:95:0b:df:7b:65:06:de:6a:6c:86:39:
         f2:6a:98:d2:af:be:ca:a2:52:7a:bf:46:45:27:01:d7:c1:70:
         70:5a:39:91:df:56:e7:15:dc:ac:09:f8:83:5e:65:27:8e:36:
         59:7d:e7:59:62:a7:1d:da:bf:83:5b:0a:93:86:7d:f0:bf:00:
         90:07:0a:22:7c:43:30:2c:c6:0a:c7:ad:62:8c:79:3b:7f:51:
         de:49:9c:08:66:ec:12:15:fb:36:5a:79:d1:92:c8:70:25:86:
         a7:68:ee:dc:04:53:06:a9:a5:5a:81:d7:42:20:00:2f:58:5a:
         21:71:82:fb:fa:cd:59:12:10:d8:0f:3a:ee:ea:e6:82:c2:5a:
         d2:b5:7c:8a:63:d5:63:6b:50:8a:13:c9:b8:ed:84:0e:a3:bd:
         24:f5:94:a3:96:fa:a9:4f:13:00:8e:b5:8b:54:5a:39:45:1e:
         c7:71:9c:f6:c8:e1:6b:10:c5:7c:96:7f:bc:c6:b4:89:52:4d:
         40:eb:f9:88:59:6e:fd:6d:d2:c5:c8:74:6d:2a:ce:dd:31:96:
         8b:97:43:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DbppcHgGRuk+V/lQJxAo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0
ODk2YWIwHhcNMjYwNjE0MDAwMTA2WhcNMjYwNjE1MDAwMTA2WjAzMTEwLwYDVQQD
EygzNjk3MjM2NjAyNDAxZGY3ZGZkYmIyYmE4MjQ3NWZjNDZkNDk3Mjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi9gmu2pQgsdAXYovSGIClRcn2Wf
xAe4zhA/Cv316NiAaSLIC3bXiZv0QnRtybifEY6NQOyckWuZWhONrVzGfjg3OHXh
wr9oOv2AprWqI1USu4V1OOI2HzbiPUhxkTTfWib+lTRb0qqXCz2cVV/A1+qfT/0m
04R7HnMV3jQmjMp+mt1QxUDjvjH08iaPBXUSku1m6vDEyyyinRB3gdKoxYsVoBGO
ECOCq8KjPRCRv6hHg/+NbxUEkZjMsD3hXeaPU762JIAtJBdLDZyWKlcEbzKR8j36
pK7yZ8zmWwmQfvZA/fBR4YAPPy+kCJ4+UabAXMDhVG5FcXEmbodR6lyUCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaXI2YCQB3339uyuoJHX8RtSXJ5MB8GA1UdIwQY
MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt
NWU3MDBkZDZiOWVlLzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEtNWU3MDBkZDZiOWVl
LzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVHJgRt+
ZZDStRl8YdyUJ/AAnAeixsUDclgNW2r8yBekSCf+eb9gS1LChZUL33tlBt5qbIY5
8mqY0q++yqJSer9GRScB18FwcFo5kd9W5xXcrAn4g15lJ442WX3nWWKnHdq/g1sK
k4Z98L8AkAcKInxDMCzGCsetYox5O39R3kmcCGbsEhX7Nlp50ZLIcCWGp2ju3ART
BqmlWoHXQiAAL1haIXGC+/rNWRIQ2A867urmgsJa0rV8imPVY2tQihPJuO2EDqO9
JPWUo5b6qU8TAI61i1RaOUUex3Gc9sjhaxDFfJZ/vMa0iVJNQOv5iFlu/W3Sxch0
bSrO3TGWi5dDtw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:34:34 2026 by rpki-client