Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File:                     GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier:          zK+zeovs/tqisEMapl8VrWVtyDD2bdJow0OWx3jOyGc=
Subject key identifier:   ED:93:40:7B:0E:2D:E3:FB:23:80:C7:14:F2:16:22:D3:D4:A1:84:3B
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer:       /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial:       019EBDDAA4CEFBD95402367D6BE3B5DD07EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number:          0BC3
Signing time:             Fri 12 Jun 2026 22:01:23 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:23 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:23 +0000
Files and hashes:         1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: Mrl0cu8eSrae+7QJ92ycfgSQr0KniRaKRlEF7w65/D0=)
                          2: GYVpw44ITOKKpdgG8Chd41R_mz0.asa (hash: J5xgubX/Yds4qbv3CrQ+J1gCPs+v23KHp5e5VO0cLRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:a4:ce:fb:d9:54:02:36:7d:6b:e3:b5:dd:07:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
        Validity
            Not Before: Jun 12 22:01:23 2026 GMT
            Not After : Jun 13 22:01:23 2026 GMT
        Subject: CN=ed93407b0e2de3fb2380c714f21622d3d4a1843b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:1f:d4:4b:08:72:78:2e:57:b5:10:cc:16:
                    1f:27:6d:b6:43:62:6f:70:7f:5e:ce:b5:46:25:44:
                    f4:e7:3b:2e:86:d5:38:95:7b:69:8b:06:32:44:bd:
                    bd:5c:3f:2d:f3:91:cb:bf:7f:20:db:0b:cf:99:22:
                    fe:21:69:f8:44:c4:bc:e0:98:61:45:86:1f:60:d1:
                    59:88:e0:91:05:d1:8b:b6:18:43:bd:e6:d3:29:38:
                    a7:41:d6:ec:3a:19:aa:16:af:ca:d9:92:c5:2f:fc:
                    89:94:62:a2:d5:7d:b8:6c:85:1f:03:06:0c:c7:70:
                    5f:b1:f9:5d:c4:4b:80:d0:04:9f:6c:78:25:d2:db:
                    95:cd:07:ab:89:de:20:56:bf:1d:5b:96:74:80:09:
                    69:63:31:2f:7f:0f:ea:9f:fe:bc:e9:2b:8f:bc:13:
                    1c:f3:31:16:40:1d:ac:e4:e1:29:4a:f9:6a:9e:9e:
                    6b:1c:f6:6b:fe:1d:35:c9:41:2f:fa:fa:7b:6b:d0:
                    88:8c:80:23:2f:cb:76:ef:74:e2:84:94:2d:9e:db:
                    77:49:65:b8:d2:4c:a2:d4:4d:c3:be:ad:ae:62:1a:
                    c8:27:e9:cb:f0:a8:9a:1b:cc:5c:67:77:7a:ea:bf:
                    61:7f:e1:a5:36:94:f8:43:8b:f4:6b:55:5f:7e:88:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:93:40:7B:0E:2D:E3:FB:23:80:C7:14:F2:16:22:D3:D4:A1:84:3B
            X509v3 Authority Key Identifier:
                keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:70:37:61:80:44:46:08:87:e4:38:14:d6:eb:06:cd:28:9a:
         0d:49:27:ad:4f:e1:21:bb:76:c4:e8:ac:05:bc:5d:0e:90:eb:
         0c:72:76:84:b1:be:bc:4d:dd:d3:f6:8c:9a:5d:4a:c5:d6:47:
         60:c4:2e:e8:7a:fc:1b:f8:7f:41:f4:57:27:c2:b7:8d:aa:b5:
         20:40:d7:4f:40:b6:92:d8:cb:fd:b2:12:f4:86:23:d3:34:1b:
         98:7b:e7:e6:d5:a3:5e:c6:ee:e9:1b:22:7d:6b:46:c0:ea:8e:
         39:0c:2e:88:40:f0:c0:ee:03:19:4b:0a:da:d7:b4:27:ca:32:
         34:85:b0:65:32:47:eb:ee:3c:eb:f8:0b:2e:ce:00:45:84:b5:
         77:4c:46:e7:d6:c1:8f:22:62:17:4c:ba:aa:04:49:13:c3:29:
         ef:18:3b:39:9d:9d:3e:53:78:54:ea:b8:fe:1b:69:d5:9f:27:
         f7:bd:8f:bd:23:15:32:d9:82:61:79:ae:cd:78:be:01:6a:dc:
         29:ea:70:df:02:92:9f:ea:9d:b0:59:c1:8a:01:25:d5:f9:1f:
         ce:19:c6:9b:1b:51:bb:01:0c:5a:5b:29:88:7d:df:ac:06:4b:
         ad:64:84:bf:a8:79:54:77:be:bc:d4:71:d1:5e:15:b6:dd:b4:
         bb:75:f3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692qTO+9lUAjZ9a+O13QfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDlmNjBjOGI4NWVmZWQzNjFkZjViNmI1MWM5ZmVkYWUx
YzdmOTYwHhcNMjYwNjEyMjIwMTIzWhcNMjYwNjEzMjIwMTIzWjAzMTEwLwYDVQQD
EyhlZDkzNDA3YjBlMmRlM2ZiMjM4MGM3MTRmMjE2MjJkM2Q0YTE4NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBof1EsIcnguV7UQzBYfJ222Q2Jv
cH9ezrVGJUT05zsuhtU4lXtpiwYyRL29XD8t85HLv38g2wvPmSL+IWn4RMS84Jhh
RYYfYNFZiOCRBdGLthhDvebTKTinQdbsOhmqFq/K2ZLFL/yJlGKi1X24bIUfAwYM
x3BfsfldxEuA0ASfbHgl0tuVzQerid4gVr8dW5Z0gAlpYzEvfw/qn/686SuPvBMc
8zEWQB2s5OEpSvlqnp5rHPZr/h01yUEv+vp7a9CIjIAjL8t273TihJQtntt3SWW4
0kyi1E3Dvq2uYhrIJ+nL8KiaG8xcZ3d66r9hf+GlNpT4Q4v0a1VffoivWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2TQHsOLeP7I4DHFPIWItPUoYQ7MB8GA1UdIwQY
MBaAFBkJ9gyLhe/tNh31trUcn+2uHH+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMt
NThlN2RiMzBlYTQ0LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMtNThlN2RiMzBlYTQ0
LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3A3YYBE
RgiH5DgU1usGzSiaDUknrU/hIbt2xOisBbxdDpDrDHJ2hLG+vE3d0/aMml1KxdZH
YMQu6Hr8G/h/QfRXJ8K3jaq1IEDXT0C2ktjL/bIS9IYj0zQbmHvn5tWjXsbu6Rsi
fWtGwOqOOQwuiEDwwO4DGUsK2te0J8oyNIWwZTJH6+486/gLLs4ARYS1d0xG59bB
jyJiF0y6qgRJE8Mp7xg7OZ2dPlN4VOq4/htp1Z8n972PvSMVMtmCYXmuzXi+AWrc
Kepw3wKSn+qdsFnBigEl1fkfzhnGmxtRuwEMWlspiH3frAZLrWSEv6h5VHe+vNRx
0V4Vtt20u3XzyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:02 2026 by rpki-client