Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File:                     GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier:          JpdTuBiWbPqH5lS1nm8O1PpRM804m/za1yO0VOPtU84=
Subject key identifier:   41:69:76:3D:6B:B3:A3:67:0C:13:3D:83:57:52:8E:A3:5C:A9:A9:A3
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer:       /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial:       019DA3E6C184A73E02D4852256BE34B18434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number:          0169
Signing time:             Sun 19 Apr 2026 04:01:42 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:42 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:42 +0000
Files and hashes:         1: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
                          2: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: fBlws3pI1GTHvcilr2SizVvsl7/+vRQBEj9xAsV/nyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:c1:84:a7:3e:02:d4:85:22:56:be:34:b1:84:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
        Validity
            Not Before: Apr 19 04:01:42 2026 GMT
            Not After : Apr 20 04:01:42 2026 GMT
        Subject: CN=4169763d6bb3a3670c133d8357528ea35ca9a9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:25:bb:ec:02:d5:c8:9a:54:ee:7e:28:e6:
                    91:b5:3b:69:f9:e0:c1:6e:60:8b:53:57:63:08:c7:
                    6b:e5:15:f9:54:36:f5:2a:81:25:7f:4d:2e:d5:a6:
                    6d:76:6b:6d:3f:f9:81:3a:9c:a2:ef:eb:a3:b2:50:
                    2f:f3:7d:2b:8f:ed:6c:bb:60:0b:3f:d1:9b:21:2f:
                    a4:56:dd:e8:c2:aa:71:8c:74:68:85:e6:71:2a:d1:
                    42:c7:8a:24:44:cf:01:5d:e9:27:06:b0:8e:03:7a:
                    fc:63:17:48:8c:cb:fa:99:b1:63:b4:af:89:bb:d1:
                    53:94:cf:bd:57:93:91:24:c6:61:93:0f:04:c2:af:
                    34:d4:96:f6:55:89:b8:60:04:de:16:29:50:e6:9a:
                    7a:83:c8:74:a4:62:ec:11:9b:64:12:55:97:10:62:
                    90:c4:ec:2f:9a:d0:d3:8a:8d:a3:00:eb:6e:04:2a:
                    cd:47:c1:b2:1b:37:91:61:4a:ed:46:0d:45:61:40:
                    5d:c6:3c:33:22:07:f3:68:c3:41:07:f7:31:eb:2e:
                    ef:21:14:c1:6d:8e:f0:25:22:f2:dc:e5:3f:69:69:
                    f1:c3:7e:c8:f4:12:2f:7b:87:69:c2:80:48:2c:95:
                    30:fb:e6:e4:71:37:f2:2a:b2:6a:99:c1:9f:9f:c1:
                    51:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:69:76:3D:6B:B3:A3:67:0C:13:3D:83:57:52:8E:A3:5C:A9:A9:A3
            X509v3 Authority Key Identifier:
                keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a1:6c:33:6c:9e:d2:55:82:69:1f:ba:d4:5b:b3:67:97:5a:
         a9:f1:3c:37:79:d9:27:73:fe:da:1b:2e:d6:3f:22:71:4d:74:
         6e:c0:95:b8:11:be:8d:c1:c7:65:9e:ea:4b:09:62:5d:69:3a:
         3a:97:6c:44:0d:8e:ec:7d:79:27:39:5b:44:3b:10:80:f9:60:
         06:db:05:7e:0b:56:38:fa:9b:74:e3:20:ca:9e:0e:f2:22:db:
         6d:42:8b:8c:ed:f4:a5:6f:e0:c5:9f:65:b0:5e:01:c0:0a:a0:
         28:8b:5f:0a:ee:d5:d9:81:7f:65:9d:5f:e3:a6:d2:3b:1a:6d:
         63:75:61:5a:31:c7:b7:e8:ac:72:2d:61:e7:98:a1:2c:a9:b6:
         3a:f8:67:4b:63:26:a4:b0:83:4b:3f:4a:18:d9:f4:b1:91:0b:
         34:1b:e2:e4:4b:9c:ff:cd:9e:d2:73:7c:bb:63:42:d4:1f:68:
         3e:5b:19:a1:39:9a:9d:f4:5a:92:38:12:b5:7c:39:1b:b9:ad:
         3b:00:2d:20:a2:6e:91:85:58:c7:91:29:6c:24:bc:5c:67:11:
         aa:57:53:17:5d:c6:53:13:04:fe:ee:8c:79:3c:b6:b9:3b:6a:
         be:b3:2b:b5:1b:33:db:2a:76:8d:8b:d4:8a:d9:26:0e:9c:5c:
         7f:99:1b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5sGEpz4C1IUiVr40sYQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWIzZjkwOGNlNmUxNzY0NjE3NzMxYjYyNDUzOTQyMWQx
M2M5NGQwHhcNMjYwNDE5MDQwMTQyWhcNMjYwNDIwMDQwMTQyWjAzMTEwLwYDVQQD
Eyg0MTY5NzYzZDZiYjNhMzY3MGMxMzNkODM1NzUyOGVhMzVjYTlhOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+8lu+wC1ciaVO5+KOaRtTtp+eDB
bmCLU1djCMdr5RX5VDb1KoElf00u1aZtdmttP/mBOpyi7+ujslAv830rj+1su2AL
P9GbIS+kVt3owqpxjHRoheZxKtFCx4okRM8BXeknBrCOA3r8YxdIjMv6mbFjtK+J
u9FTlM+9V5ORJMZhkw8Ewq801Jb2VYm4YATeFilQ5pp6g8h0pGLsEZtkElWXEGKQ
xOwvmtDTio2jAOtuBCrNR8GyGzeRYUrtRg1FYUBdxjwzIgfzaMNBB/cx6y7vIRTB
bY7wJSLy3OU/aWnxw37I9BIve4dpwoBILJUw++bkcTfyKrJqmcGfn8FR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFpdj1rs6NnDBM9g1dSjqNcqamjMB8GA1UdIwQY
MBaAFBmbP5CM5uF2RhdzG2JFOUIdE8lNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODIt
MmU5N2FiYTBmYjJjLzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODItMmU5N2FiYTBmYjJj
LzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqFsM2ye
0lWCaR+61FuzZ5daqfE8N3nZJ3P+2hsu1j8icU10bsCVuBG+jcHHZZ7qSwliXWk6
OpdsRA2O7H15JzlbRDsQgPlgBtsFfgtWOPqbdOMgyp4O8iLbbUKLjO30pW/gxZ9l
sF4BwAqgKItfCu7V2YF/ZZ1f46bSOxptY3VhWjHHt+isci1h55ihLKm2OvhnS2Mm
pLCDSz9KGNn0sZELNBvi5Euc/82e0nN8u2NC1B9oPlsZoTmanfRakjgStXw5G7mt
OwAtIKJukYVYx5EpbCS8XGcRqldTF13GUxME/u6MeTy2uTtqvrMrtRsz2yp2jYvU
itkmDpxcf5kbTw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:39 2026 by rpki-client