Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File:                     gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier:          FNyCIIRQhvTAOr0VcNe20V+mbr6NWuZ9uZb0JGSjt6I=
Subject key identifier:   4A:17:22:EB:00:5A:79:46:99:D8:BF:44:97:0C:BC:B8:D5:CF:F7:55
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer:       /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial:       019ED4CFCF324691A36533985450FA23FF0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number:          1829
Signing time:             Wed 17 Jun 2026 09:00:49 +0000
Manifest this update:     Wed 17 Jun 2026 09:00:49 +0000
Manifest next update:     Thu 18 Jun 2026 09:00:49 +0000
Files and hashes:         1: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (hash: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE=)
                          2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: dY35lgCV8ztZrCCUPSxCOvNOv4Q1eue89XsVIcjIBd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:cf:cf:32:46:91:a3:65:33:98:54:50:fa:23:ff:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
        Validity
            Not Before: Jun 17 09:00:49 2026 GMT
            Not After : Jun 18 09:00:49 2026 GMT
        Subject: CN=4a1722eb005a794699d8bf44970cbcb8d5cff755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:b4:37:87:a3:43:3d:6a:20:42:86:52:70:
                    f9:8f:db:eb:29:28:2d:ab:f4:4c:7c:2b:2d:cd:be:
                    b3:80:09:34:95:3f:a5:c6:54:be:b7:4b:06:6b:4d:
                    4f:7e:4d:36:85:c8:6f:18:bd:24:53:f1:ed:80:83:
                    ee:16:7c:ce:b0:49:2f:fe:2f:61:d0:6a:2e:cd:66:
                    96:22:b6:0d:32:07:49:e8:b2:e0:1e:fb:19:9d:a5:
                    87:46:6f:15:71:bf:38:85:c7:07:0b:ab:9e:e2:dc:
                    e1:f3:a8:11:1a:02:b1:61:2b:c6:70:0a:80:bb:3f:
                    63:19:33:92:65:84:7c:c6:30:5c:84:87:21:19:a0:
                    d9:d2:e1:c5:83:97:48:21:6d:ed:c1:44:bb:bb:61:
                    a4:29:8d:b7:2f:69:37:f2:f0:f0:ca:cf:35:d2:07:
                    02:ab:26:de:51:d3:a0:04:f6:ba:51:3d:f9:f5:99:
                    9e:0c:0b:0c:ed:fb:6d:e9:50:14:a7:a3:9f:f2:70:
                    11:be:24:5c:80:0b:f3:a5:28:3f:74:88:8c:92:8c:
                    8a:3e:e6:51:2f:07:ff:34:b3:a7:b6:78:b9:4d:44:
                    d0:b4:0e:0e:ac:78:72:a6:f3:7a:e9:0a:0f:31:0d:
                    a6:3a:e5:62:32:d2:27:90:95:6d:98:1c:9e:e6:c2:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:17:22:EB:00:5A:79:46:99:D8:BF:44:97:0C:BC:B8:D5:CF:F7:55
            X509v3 Authority Key Identifier:
                keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a6:f5:54:28:48:36:05:c3:f8:35:92:98:63:55:91:0a:31:
         03:a0:09:92:ad:c4:c2:5e:31:05:71:03:61:a9:d8:8f:2e:21:
         69:0c:d2:4a:e8:08:89:5b:a2:34:de:d6:ac:90:87:cf:4b:d2:
         34:5a:67:42:4e:2a:36:32:be:59:e2:d8:c6:71:b5:3f:f3:cf:
         5a:2a:52:12:44:9e:9d:28:24:43:bc:5a:84:d0:5c:60:e0:cd:
         4a:29:03:89:7a:81:d7:0e:40:73:41:f1:ec:07:b1:d7:33:ee:
         8d:d7:dc:58:71:6f:45:f1:00:b2:d3:ea:40:6f:0c:5e:bd:1a:
         a5:fb:cf:a8:6f:9f:4d:b9:cc:b8:db:61:e8:41:ac:e4:8a:7e:
         ae:a0:9a:35:20:d7:31:1f:be:35:f9:10:b1:4f:5d:db:d0:f0:
         69:c5:b0:6f:a5:d2:b0:78:c0:04:bf:de:80:94:27:62:94:32:
         3a:f8:a6:eb:96:e0:af:7c:49:2e:87:23:ce:11:16:3b:6b:05:
         04:d5:9e:19:de:bb:14:b7:15:85:ad:fa:94:4e:77:ad:0b:98:
         8a:2d:cd:6b:51:1e:bc:91:06:5b:49:ac:89:80:80:7f:c5:ce:
         db:79:6e:10:9f:bc:c3:56:fd:95:47:5e:63:75:2d:97:08:9c:
         a4:60:d1:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Uz88yRpGjZTOYVFD6I/8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1
MmI3ZDAwHhcNMjYwNjE3MDkwMDQ5WhcNMjYwNjE4MDkwMDQ5WjAzMTEwLwYDVQQD
Eyg0YTE3MjJlYjAwNWE3OTQ2OTlkOGJmNDQ5NzBjYmNiOGQ1Y2ZmNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFq0N4ejQz1qIEKGUnD5j9vrKSgt
q/RMfCstzb6zgAk0lT+lxlS+t0sGa01Pfk02hchvGL0kU/HtgIPuFnzOsEkv/i9h
0GouzWaWIrYNMgdJ6LLgHvsZnaWHRm8Vcb84hccHC6ue4tzh86gRGgKxYSvGcAqA
uz9jGTOSZYR8xjBchIchGaDZ0uHFg5dIIW3twUS7u2GkKY23L2k38vDwys810gcC
qybeUdOgBPa6UT359ZmeDAsM7ftt6VAUp6Of8nARviRcgAvzpSg/dIiMkoyKPuZR
Lwf/NLOntni5TUTQtA4OrHhypvN66QoPMQ2mOuViMtInkJVtmBye5sJWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoXIusAWnlGmdi/RJcMvLjVz/dVMB8GA1UdIwQY
MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt
NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj
LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdab1VChI
NgXD+DWSmGNVkQoxA6AJkq3Ewl4xBXEDYanYjy4haQzSSugIiVuiNN7WrJCHz0vS
NFpnQk4qNjK+WeLYxnG1P/PPWipSEkSenSgkQ7xahNBcYODNSikDiXqB1w5Ac0Hx
7Aex1zPujdfcWHFvRfEAstPqQG8MXr0apfvPqG+fTbnMuNth6EGs5Ip+rqCaNSDX
MR++NfkQsU9d29DwacWwb6XSsHjABL/egJQnYpQyOvim65bgr3xJLocjzhEWO2sF
BNWeGd67FLcVha36lE53rQuYii3Na1EevJEGW0msiYCAf8XO23luEJ+8w1b9lUde
Y3UtlwicpGDRAg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:20 2026 by rpki-client