Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          KikoCsyqm0i8IVqNvW/Zzhi0Fi7t2dNhBlF80LqatOw=
Subject key identifier:   FB:F8:9A:DB:1E:51:F4:36:29:93:91:6B:39:1C:27:74:14:0A:DD:B5
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019EBE47BE2A53A9319E7F2C303A3747214B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          1978
Signing time:             Sat 13 Jun 2026 00:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:33 +0000
Files and hashes:         1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
                          2: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
                          3: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
                          4: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
                          5: Z9B94VUuwMzLp1J1_UmV3P3-Bog.roa (hash: b0gWVuQa3wcBnwLUc4jIKMufXEjkfGFHau8pBV9DYlo=)
                          6: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: s0nU84wV8+oOF35b5NNnzahootm0e2A4zy+xijm1qAw=)
                          8: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
                          9: x0_-uqsHWcjbfW_hfshaOvwbb1c.roa (hash: eircYIt1XhTSC/xdu+VsYyP07LVygp/amJt3YsTVS8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:be:2a:53:a9:31:9e:7f:2c:30:3a:37:47:21:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Jun 13 00:00:33 2026 GMT
            Not After : Jun 14 00:00:33 2026 GMT
        Subject: CN=fbf89adb1e51f4362993916b391c2774140addb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:7e:90:d5:01:bc:95:4c:c6:d3:e2:98:97:
                    22:74:83:d8:a2:3c:9b:66:78:37:48:ec:b4:2f:ba:
                    9f:e0:4a:7c:f7:0d:96:34:57:eb:92:09:e7:fd:79:
                    14:0a:40:78:01:3e:23:17:29:43:ce:ef:f0:e3:06:
                    85:f1:e4:8d:7c:b3:19:32:00:0f:4e:e7:ad:2e:6c:
                    8b:bc:2e:58:0b:a2:07:e2:48:04:de:40:bb:62:00:
                    e8:5e:09:01:c1:99:52:41:b2:f0:c8:1d:75:8a:c6:
                    41:24:56:55:53:73:2e:a9:33:28:c9:08:b5:4e:01:
                    62:11:68:61:c3:08:1d:6b:c3:76:14:27:0c:ca:33:
                    b2:ec:d1:9d:84:ed:6d:2c:be:83:ec:66:03:f5:0d:
                    e3:80:76:32:03:62:da:cd:bf:80:c8:92:c6:de:c4:
                    59:25:f7:1d:0f:2b:47:0b:5a:08:d4:00:2b:14:8c:
                    7b:be:68:ac:04:04:d3:45:73:82:31:50:a5:e9:01:
                    ce:04:50:4a:29:4e:aa:dc:fc:f5:5f:c3:93:06:5c:
                    4b:5f:f5:0d:af:05:1c:bd:91:90:5a:fd:b3:73:87:
                    5d:3b:11:56:88:6c:98:1b:e1:e6:58:88:2a:1a:74:
                    ad:ec:26:7b:fb:08:94:5d:31:3e:81:a0:1c:2c:5d:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F8:9A:DB:1E:51:F4:36:29:93:91:6B:39:1C:27:74:14:0A:DD:B5
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:93:d7:4f:a2:a4:c5:ef:b6:0e:2f:e6:c5:e0:34:26:62:2b:
         03:f6:76:d2:dc:36:5e:d8:84:a2:f1:ea:f1:96:b7:0a:5d:c1:
         dd:31:33:67:7b:4c:a1:f3:c5:95:fc:e6:51:cd:c9:fb:a3:85:
         66:5a:98:98:9b:ca:79:63:60:e2:12:f2:91:5d:03:65:c0:8f:
         10:0a:e0:3a:3a:4b:38:34:3e:44:67:62:a2:b6:3f:1f:4d:0f:
         13:33:7c:30:ef:98:39:50:a9:88:8e:4b:a7:69:0c:eb:28:3b:
         71:9e:e6:38:12:26:88:79:78:e7:7a:46:70:2d:b7:2a:e8:8a:
         0b:ba:e4:de:a3:0a:33:8a:19:28:62:d7:cf:7e:91:28:7c:48:
         94:c5:80:71:66:a9:44:21:cc:44:12:b4:ef:f5:e7:13:5b:35:
         4b:a2:9f:d8:05:b7:c3:4e:4f:ab:3f:d4:ff:fc:a4:24:fa:bc:
         f1:58:85:2a:f7:bb:b3:a3:19:cb:ed:23:65:b0:53:a9:0e:dd:
         ac:fb:8b:c3:fe:ee:7b:58:4c:99:68:b4:c3:9e:8f:84:cb:25:
         04:43:ca:cb:2c:9a:74:78:64:fc:0f:dd:27:d7:30:89:3e:54:
         85:66:ab:dc:ba:a7:20:c2:1c:47:ce:1e:78:be:3f:d4:13:c9:
         41:da:e6:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R74qU6kxnn8sMDo3RyFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk
Y2UyMDUwHhcNMjYwNjEzMDAwMDMzWhcNMjYwNjE0MDAwMDMzWjAzMTEwLwYDVQQD
EyhmYmY4OWFkYjFlNTFmNDM2Mjk5MzkxNmIzOTFjMjc3NDE0MGFkZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNV+kNUBvJVMxtPimJcidIPYojyb
Zng3SOy0L7qf4Ep89w2WNFfrkgnn/XkUCkB4AT4jFylDzu/w4waF8eSNfLMZMgAP
TuetLmyLvC5YC6IH4kgE3kC7YgDoXgkBwZlSQbLwyB11isZBJFZVU3MuqTMoyQi1
TgFiEWhhwwgda8N2FCcMyjOy7NGdhO1tLL6D7GYD9Q3jgHYyA2Lazb+AyJLG3sRZ
JfcdDytHC1oI1AArFIx7vmisBATTRXOCMVCl6QHOBFBKKU6q3Pz1X8OTBlxLX/UN
rwUcvZGQWv2zc4ddOxFWiGyYG+HmWIgqGnSt7CZ7+wiUXTE+gaAcLF2JRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv4mtseUfQ2KZORazkcJ3QUCt21MB8GA1UdIwQY
MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et
ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx
LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpPXT6Kk
xe+2Di/mxeA0JmIrA/Z20tw2XtiEovHq8Za3Cl3B3TEzZ3tMofPFlfzmUc3J+6OF
ZlqYmJvKeWNg4hLykV0DZcCPEArgOjpLODQ+RGdiorY/H00PEzN8MO+YOVCpiI5L
p2kM6yg7cZ7mOBImiHl453pGcC23KuiKC7rk3qMKM4oZKGLXz36RKHxIlMWAcWap
RCHMRBK07/XnE1s1S6Kf2AW3w05Pqz/U//ykJPq88ViFKve7s6MZy+0jZbBTqQ7d
rPuLw/7ue1hMmWi0w56PhMslBEPKyyyadHhk/A/dJ9cwiT5UhWar3LqnIMIcR84e
eL4/1BPJQdrm0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:31 2026 by rpki-client