Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File:                     G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier:          TE/6XIL0DqB5f2XbXGrFSkPNJSlwSsacQINFO2gbh3c=
Subject key identifier:   2E:6C:5D:F8:89:6F:10:5A:E9:43:82:90:47:5A:84:4C:8F:0A:3B:59
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer:       /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial:       019DA30AAC44DC952006009E4BC4E9F98338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number:          104B
Signing time:             Sun 19 Apr 2026 00:01:18 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:18 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:18 +0000
Files and hashes:         1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: RUjQqiXO3Q9kRQsWDAORtlYPoiF09hZ1kZPVc2X6wp4=)
                          2: _TZJcz_b9cq-8luNUL6eEZRU19o.roa (hash: XV8xsUjzIwVTNMvOzhZSqDe2iSUDHqLPyeEkThsb7Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:ac:44:dc:95:20:06:00:9e:4b:c4:e9:f9:83:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
        Validity
            Not Before: Apr 19 00:01:18 2026 GMT
            Not After : Apr 20 00:01:18 2026 GMT
        Subject: CN=2e6c5df8896f105ae9438290475a844c8f0a3b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:dc:be:90:cf:14:71:e3:59:b6:5c:70:ae:
                    14:5f:25:50:84:4b:30:f8:9e:c7:23:1a:d3:25:33:
                    f4:1f:3b:b8:97:a6:25:e9:86:2f:6e:31:d7:1e:c2:
                    ce:32:44:a5:98:45:7e:98:7d:32:37:e3:dc:9e:89:
                    ec:2d:83:f7:24:4e:60:14:f8:c2:22:5e:94:05:f5:
                    cb:b1:d0:f0:04:be:31:fd:e4:ba:96:c3:e7:9c:bd:
                    66:06:ed:43:3c:70:8e:be:e8:52:4b:cb:4b:12:2f:
                    88:82:45:8f:96:8a:46:c8:be:29:4e:87:66:54:b9:
                    8b:1b:d7:8e:11:2b:1f:57:93:72:84:a3:18:8a:9d:
                    a5:6f:87:9b:13:4f:22:ac:84:7c:ef:ca:02:50:bc:
                    8b:ea:78:a5:76:cf:ff:dc:ee:9c:41:8b:b5:91:a2:
                    63:1d:05:29:a5:aa:4b:97:d7:ca:a6:90:2c:86:a2:
                    5b:a4:1c:fb:0d:35:a2:f3:41:8a:63:22:39:bc:c9:
                    cd:c6:db:f5:fb:2c:62:d6:9c:84:18:13:59:ec:a8:
                    da:24:83:46:65:4e:5c:b6:eb:bf:7a:5c:08:a0:23:
                    31:53:a7:07:14:98:35:20:9b:b6:a5:fd:d4:8c:c9:
                    ce:66:2c:9b:66:17:eb:6e:6f:5c:02:5b:62:37:a6:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6C:5D:F8:89:6F:10:5A:E9:43:82:90:47:5A:84:4C:8F:0A:3B:59
            X509v3 Authority Key Identifier:
                keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:db:11:8f:97:7a:aa:28:a2:9e:cc:e0:18:b4:4f:61:06:62:
         90:b1:23:16:b6:84:21:72:64:77:cc:e2:e8:64:c2:6e:73:27:
         36:16:d2:2d:0a:29:3b:d4:26:26:3e:5f:01:02:0d:5e:1d:59:
         ae:b3:b0:dc:e6:4d:5b:bb:85:76:ef:47:cd:1a:3f:ea:9e:1f:
         a5:d5:b4:48:3a:59:92:7c:e3:77:59:8e:34:a7:74:b6:b7:16:
         41:16:48:76:a1:0e:2f:7a:3d:e0:cf:cf:d1:32:5a:59:df:ca:
         61:35:44:cd:e3:fe:53:13:42:8a:f1:83:fc:e6:4a:fe:a0:bc:
         bb:e0:24:8b:51:dc:3d:20:4b:cc:38:2e:cc:71:d3:d3:11:49:
         0d:c7:e8:8f:1f:48:50:17:29:3f:3d:5e:fd:43:b7:91:e4:ae:
         bb:20:1d:f6:08:d6:fc:4b:b1:d1:97:d9:80:c2:36:40:85:16:
         0c:08:21:5b:18:00:f5:f1:d1:73:12:45:bc:80:9d:ed:d6:df:
         5c:51:cb:7e:12:cb:e9:64:b0:87:e2:ff:e9:c5:36:5d:bc:56:
         62:ca:ff:53:18:ac:df:62:2a:0f:a0:e8:bb:ae:75:bb:97:ec:
         84:5d:37:6b:2c:90:0e:94:cc:c0:50:77:ee:11:a8:23:c9:40:
         14:ca:27:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCqxE3JUgBgCeS8Tp+YM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0
ZTdkYjYwHhcNMjYwNDE5MDAwMTE4WhcNMjYwNDIwMDAwMTE4WjAzMTEwLwYDVQQD
EygyZTZjNWRmODg5NmYxMDVhZTk0MzgyOTA0NzVhODQ0YzhmMGEzYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCXcvpDPFHHjWbZccK4UXyVQhEsw
+J7HIxrTJTP0Hzu4l6Yl6YYvbjHXHsLOMkSlmEV+mH0yN+PcnonsLYP3JE5gFPjC
Il6UBfXLsdDwBL4x/eS6lsPnnL1mBu1DPHCOvuhSS8tLEi+IgkWPlopGyL4pTodm
VLmLG9eOESsfV5NyhKMYip2lb4ebE08irIR878oCULyL6nilds//3O6cQYu1kaJj
HQUppapLl9fKppAshqJbpBz7DTWi80GKYyI5vMnNxtv1+yxi1pyEGBNZ7KjaJING
ZU5ctuu/elwIoCMxU6cHFJg1IJu2pf3UjMnOZiybZhfrbm9cAltiN6aOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5sXfiJbxBa6UOCkEdahEyPCjtZMB8GA1UdIwQY
MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt
MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi
LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNsRj5d6
qiiinszgGLRPYQZikLEjFraEIXJkd8zi6GTCbnMnNhbSLQopO9QmJj5fAQINXh1Z
rrOw3OZNW7uFdu9HzRo/6p4fpdW0SDpZknzjd1mONKd0trcWQRZIdqEOL3o94M/P
0TJaWd/KYTVEzeP+UxNCivGD/OZK/qC8u+Aki1HcPSBLzDguzHHT0xFJDcfojx9I
UBcpPz1e/UO3keSuuyAd9gjW/Eux0ZfZgMI2QIUWDAghWxgA9fHRcxJFvICd7dbf
XFHLfhLL6WSwh+L/6cU2XbxWYsr/Uxis32IqD6Dou651u5fshF03ayyQDpTMwFB3
7hGoI8lAFMonYA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:48 2026 by rpki-client