Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File:                     GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier:          aVJVKT7HAFYZtX5mRyrGRNOz/uolsNHS4nH37InOSsk=
Subject key identifier:   6A:6B:9D:61:51:A1:98:F0:6D:AE:C3:26:3A:FF:7C:07:83:A5:81:55
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer:       /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial:       019EBFC870E74980B97B93428F5820D2233E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number:          01FC
Signing time:             Sat 13 Jun 2026 07:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:44 +0000
Files and hashes:         1: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
                          2: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: nKc1QkFV+dXydB1oxpLFEOaptO3HQexZ7kxnbh7vk0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:70:e7:49:80:b9:7b:93:42:8f:58:20:d2:23:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
        Validity
            Not Before: Jun 13 07:00:44 2026 GMT
            Not After : Jun 14 07:00:44 2026 GMT
        Subject: CN=6a6b9d6151a198f06daec3263aff7c0783a58155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:c2:0c:84:e3:71:7a:f2:7f:ce:21:a1:77:
                    cb:c9:5a:61:8c:8a:86:91:e8:d7:11:7a:3b:21:fd:
                    43:12:11:30:6a:bf:31:30:d6:5c:1a:4d:e0:81:5c:
                    33:02:ea:0d:cf:f6:82:5e:6f:b6:3e:d6:dd:c2:6a:
                    3e:dc:a3:1e:17:96:09:7c:4d:97:cd:da:b4:c1:31:
                    6c:6f:58:92:a6:40:ae:d7:57:46:28:ae:fa:dc:04:
                    3b:54:3c:0a:11:2e:e5:38:ab:24:88:df:a3:b3:23:
                    ff:a1:14:86:d8:1e:3b:ed:28:4e:c3:9e:aa:5c:eb:
                    06:af:79:75:63:ca:31:16:e0:f6:00:79:f0:01:58:
                    49:cb:51:83:d1:a6:ed:d5:0c:41:79:0a:e9:30:dc:
                    5b:8d:39:ae:25:39:de:4d:5f:d3:47:7b:12:b5:84:
                    bc:9c:fe:17:f5:b8:57:dc:90:82:08:bb:1a:c7:0c:
                    4d:7e:cc:c0:4f:3d:28:d5:80:33:78:a2:f9:1d:a3:
                    b0:59:7b:c7:14:2d:e4:3f:33:d9:fe:bf:8d:f6:c0:
                    aa:6f:4f:04:f4:cd:b0:83:a4:f4:7a:8e:a1:3a:38:
                    57:64:ed:72:13:7d:c3:6f:9c:06:a6:0a:d2:8e:40:
                    41:b4:2e:6c:8b:dd:53:4a:c6:4a:0c:cc:a6:9d:c9:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6B:9D:61:51:A1:98:F0:6D:AE:C3:26:3A:FF:7C:07:83:A5:81:55
            X509v3 Authority Key Identifier:
                keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b5:2b:4c:4b:3b:8c:05:73:fd:60:3b:9e:d6:6d:af:12:db:
         2f:b9:59:15:17:c3:6c:51:8d:f8:54:8c:fe:f9:b3:a3:06:ae:
         8d:21:42:fd:6a:7c:b7:6b:91:25:03:2d:a2:26:32:dc:85:ca:
         f0:c5:e5:3d:70:ef:69:e1:a9:01:8f:67:ca:b4:d3:e1:c2:81:
         e9:51:dd:43:41:36:4b:ca:64:49:d6:89:50:a0:32:7c:4a:40:
         4e:18:82:56:ca:6c:0d:6e:53:cb:91:0f:fc:3a:39:ce:b0:84:
         1f:f3:cc:6d:92:02:ca:78:15:5e:60:13:43:68:77:c0:a9:82:
         ef:34:e8:17:74:f5:38:8a:34:ff:30:c9:dc:49:a5:47:1b:f2:
         bd:3e:cc:b1:69:03:cf:6e:a2:93:fd:dc:7b:d3:8a:a8:76:50:
         29:cf:39:2b:d1:bf:ea:b2:f3:b7:67:33:a2:73:ae:5b:2a:ab:
         51:69:6e:86:88:71:c4:80:b6:a8:ef:89:b5:d3:49:e7:4e:04:
         f0:f0:45:3b:f9:18:e8:cf:81:b5:4c:ec:06:f1:7b:36:ee:de:
         df:4e:98:47:a8:30:67:f2:14:f7:c0:2f:49:45:37:18:5f:e9:
         be:43:d4:68:b5:87:2f:d0:e9:63:2a:dd:b4:54:ca:e5:4c:a2:
         ea:77:b6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:51:22 2026 by rpki-client