Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File:                     GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier:          JZIsCciUd3U6yqP9veyKaGYO3tZVYbSRBOOHnq+64zY=
Subject key identifier:   AD:22:00:4D:DD:B5:BC:C4:B1:95:27:15:CD:2F:E5:B5:1A:39:EA:0E
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer:       /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial:       019EC06D2408DD8805388716F280C852CF49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number:          129E
Signing time:             Sat 13 Jun 2026 10:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:38 +0000
Files and hashes:         1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
                          2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: WyM9fxRzavkiYgjT+pP8qPs8Y4wJWZMZMQr49u5TRzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:24:08:dd:88:05:38:87:16:f2:80:c8:52:cf:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
        Validity
            Not Before: Jun 13 10:00:38 2026 GMT
            Not After : Jun 14 10:00:38 2026 GMT
        Subject: CN=ad22004dddb5bcc4b1952715cd2fe5b51a39ea0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:c1:85:e0:28:91:51:e2:59:18:1b:eb:b8:
                    1f:8c:ef:1d:44:b3:fc:6a:d5:5d:49:94:75:c1:cd:
                    c0:c1:ab:3b:56:5f:dd:15:fd:3e:aa:d6:37:6a:21:
                    c1:27:f6:7e:7f:b8:65:ba:bd:ae:c2:ac:cc:aa:76:
                    bb:0b:b6:00:41:23:d6:82:60:10:61:13:71:25:a9:
                    30:49:3c:8b:99:1c:6a:c9:50:a6:36:61:48:be:ed:
                    e8:6f:fd:69:d7:dc:4f:bf:27:25:66:fe:e2:e6:4d:
                    e4:bb:1e:c9:95:39:de:c4:db:b0:d9:f4:4b:5a:4b:
                    d9:7e:23:3a:a8:e9:37:3a:c9:d3:03:8a:0e:f2:2b:
                    ff:98:9c:39:a0:cc:b0:36:6f:61:56:4c:60:b0:41:
                    b7:af:02:6a:2f:4b:06:d4:08:b6:0b:ff:06:e2:11:
                    b4:20:0f:86:df:f6:a3:0d:1f:00:52:5d:15:7d:d5:
                    8c:33:30:76:94:b0:a8:1b:f1:1c:b9:e7:75:1f:4d:
                    ef:cd:65:6b:83:69:8b:11:22:c3:07:3c:a5:98:05:
                    bd:07:b0:77:6b:7a:3a:2c:25:d0:5c:d8:bd:0b:2e:
                    ae:7e:cb:fb:9c:f0:51:c8:a7:16:09:37:02:01:2b:
                    a2:84:12:fd:7a:e9:fa:e0:dc:ba:e7:42:b0:43:de:
                    ab:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:00:4D:DD:B5:BC:C4:B1:95:27:15:CD:2F:E5:B5:1A:39:EA:0E
            X509v3 Authority Key Identifier:
                keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:6c:0e:c6:24:11:ea:79:93:9b:fd:79:39:48:0c:f6:f3:
         6b:8e:9d:f8:1a:91:1d:e7:28:ea:4d:3c:60:97:cf:fe:24:45:
         df:b0:b8:6c:0d:da:d0:e4:7f:d7:88:e5:8e:ca:f3:70:0b:61:
         f5:ae:1d:32:16:ae:7d:48:bd:3a:6c:0d:48:24:18:6b:b4:3b:
         10:e6:97:0b:a5:ad:52:22:d7:67:5e:5b:ba:f2:e5:64:42:3b:
         43:8c:dc:d5:a4:eb:ae:e4:e5:ac:aa:16:84:54:68:84:b1:3c:
         57:0e:c1:39:5e:dd:40:1a:93:3d:7d:db:51:3b:e3:22:b6:96:
         13:01:8a:f3:e8:7c:bf:e8:bb:35:be:f4:1d:ef:ee:8c:28:c0:
         1e:bf:32:74:d8:11:79:97:45:60:70:44:fa:80:8a:59:8b:cd:
         f0:7a:b3:a6:ec:bb:79:e2:dd:2b:23:cd:66:15:60:53:70:48:
         99:65:79:8d:c8:ce:bd:a4:8d:c6:5c:e1:7d:84:f0:2c:dc:71:
         de:dd:fc:aa:58:6e:8e:b6:ce:16:1f:4b:b1:db:9a:19:b3:c9:
         c0:df:91:93:23:11:7c:84:0e:63:56:14:93:5d:65:27:6f:d1:
         fd:e4:00:7a:ac:95:0c:3b:27:0a:d8:75:94:71:c6:5d:4b:65:
         bb:db:ec:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbSQI3YgFOIcW8oDIUs9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw
ZTQwMWQwHhcNMjYwNjEzMTAwMDM4WhcNMjYwNjE0MTAwMDM4WjAzMTEwLwYDVQQD
EyhhZDIyMDA0ZGRkYjViY2M0YjE5NTI3MTVjZDJmZTViNTFhMzllYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9rBheAokVHiWRgb67gfjO8dRLP8
atVdSZR1wc3Awas7Vl/dFf0+qtY3aiHBJ/Z+f7hlur2uwqzMqna7C7YAQSPWgmAQ
YRNxJakwSTyLmRxqyVCmNmFIvu3ob/1p19xPvyclZv7i5k3kux7JlTnexNuw2fRL
WkvZfiM6qOk3OsnTA4oO8iv/mJw5oMywNm9hVkxgsEG3rwJqL0sG1Ai2C/8G4hG0
IA+G3/ajDR8AUl0VfdWMMzB2lLCoG/Ecued1H03vzWVrg2mLESLDBzylmAW9B7B3
a3o6LCXQXNi9Cy6ufsv7nPBRyKcWCTcCASuihBL9eun64Ny650KwQ96rAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0iAE3dtbzEsZUnFc0v5bUaOeoOMB8GA1UdIwQY
MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt
ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz
LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAypsDsYk
Eep5k5v9eTlIDPbza46d+BqRHeco6k08YJfP/iRF37C4bA3a0OR/14jljsrzcAth
9a4dMhaufUi9OmwNSCQYa7Q7EOaXC6WtUiLXZ15buvLlZEI7Q4zc1aTrruTlrKoW
hFRohLE8Vw7BOV7dQBqTPX3bUTvjIraWEwGK8+h8v+i7Nb70He/ujCjAHr8ydNgR
eZdFYHBE+oCKWYvN8Hqzpuy7eeLdKyPNZhVgU3BImWV5jcjOvaSNxlzhfYTwLNxx
3t38qlhujrbOFh9LsduaGbPJwN+RkyMRfIQOY1YUk11lJ2/R/eQAeqyVDDsnCth1
lHHGXUtlu9vsSw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:03:45 2026 by rpki-client