Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          +c4mFMCtBy+3QdvMIc5r/vr5fg2RzVFe67P+iwLAtRI=
Subject key identifier:   39:F3:35:B1:06:81:54:F9:3C:F1:CD:7B:D2:AE:4B:1D:4E:12:77:A1
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       019EC224E3032E9AD8766F747317A04FFA4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 18:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:57 +0000
Files and hashes:         1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
                          2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
                          3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: ty9jXDeDEbGRUT373H5pMjuwTEAKwPuQENO53tK/+tw=)
                          4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
                          5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:e3:03:2e:9a:d8:76:6f:74:73:17:a0:4f:fa:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Jun 13 18:00:57 2026 GMT
            Not After : Jun 14 18:00:57 2026 GMT
        Subject: CN=39f335b1068154f93cf1cd7bd2ae4b1d4e1277a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:4e:f5:f5:8f:bd:e9:5f:d8:de:83:0d:49:
                    49:e1:f0:6c:52:49:63:ea:13:df:43:b2:27:e0:04:
                    64:05:79:36:a8:52:cb:31:77:73:8e:cd:22:4b:0f:
                    d2:3c:0f:66:d6:a9:10:0a:22:1b:0e:26:c1:ec:73:
                    35:5e:49:b2:5b:84:cc:c8:af:83:e0:b6:e0:e9:04:
                    76:ad:f5:46:7c:d7:de:ed:7d:1a:36:9a:4a:81:13:
                    c0:06:e9:43:9b:c3:73:38:36:67:d8:58:37:6e:9b:
                    25:a0:dc:f5:18:46:99:f8:21:cd:c4:15:4b:d2:c5:
                    c6:e9:e4:f1:74:19:42:1f:d6:3c:21:80:12:c4:aa:
                    ba:be:e6:33:63:e5:61:7a:2f:4c:0e:c5:94:6d:a6:
                    26:ed:10:7e:68:18:c4:bf:f2:6c:72:d1:59:40:af:
                    e0:d5:ce:d3:a4:5c:d2:90:b2:fa:36:3b:42:c8:3c:
                    b4:f5:a1:4d:05:77:4d:66:a5:13:7e:7e:a7:cd:fa:
                    ec:6f:24:15:c7:85:0b:bc:5a:59:3c:77:80:c7:77:
                    b9:ef:a7:cd:56:8b:18:1e:bf:d7:6d:03:fc:2c:3d:
                    47:14:41:6c:3d:f0:1c:8e:32:81:57:e7:aa:04:93:
                    ae:16:74:5b:3b:5b:df:fb:ce:2b:01:b4:18:ce:68:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F3:35:B1:06:81:54:F9:3C:F1:CD:7B:D2:AE:4B:1D:4E:12:77:A1
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fc:c1:05:0e:6a:ac:25:18:75:ea:80:ef:20:37:d6:01:55:
         33:64:68:b9:d7:6c:b7:dc:6c:f9:74:fe:81:97:36:f4:09:93:
         b0:bd:69:f9:14:3c:dc:16:ed:87:44:7d:c4:b6:c3:f0:95:b8:
         ce:c5:66:2a:52:8a:35:0b:74:a8:1f:81:a4:98:64:59:da:23:
         ae:1c:1f:c5:c4:75:78:ae:e3:bd:f9:21:a1:3d:9a:32:c4:a2:
         c7:2c:c5:b4:6f:12:6e:4e:66:b5:32:b8:e5:c9:2c:d7:14:55:
         db:13:82:8d:f6:d9:2f:86:e1:64:98:2e:fc:78:3f:39:dd:46:
         42:19:bf:ac:37:04:3f:96:29:a1:17:d7:7b:b8:45:65:24:32:
         d7:4e:ab:81:89:da:8e:e6:88:1f:d0:40:fd:14:47:e4:78:5a:
         8b:a3:46:b0:cf:18:15:c5:5f:ca:33:e9:dc:97:e0:b2:e0:88:
         73:fb:83:75:b3:8b:9c:3a:91:1a:44:eb:a9:b0:52:4d:28:f3:
         b3:68:df:4f:1a:fd:97:a4:bc:3f:0f:67:1b:38:35:42:bb:4e:
         aa:cb:db:04:20:f4:e3:ed:a7:0f:ae:bc:ea:b7:6a:f3:cb:b9:
         60:c8:44:55:b2:e2:5d:68:3f:af:d3:b3:6a:ca:23:40:43:f6:
         91:9d:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:07 2026 by rpki-client