Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
File:                     gjwMX13-U9s74NqofrgP8jOghVU.mft (raw, json)
Hash identifier:          v9kPKm7TCd4cNtNnQ2XWJnXR0edkmlCDhd2Dx0KcItU=
Subject key identifier:   D2:BC:A2:09:F4:0E:9C:00:62:C8:D1:1D:04:89:BA:70:D5:59:36:52
Authority key identifier: 82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55
Certificate issuer:       /CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555
Certificate serial:       019EBE47B50EF52523690AE293854944DA35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
Manifest number:          0178
Signing time:             Sat 13 Jun 2026 00:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:30 +0000
Files and hashes:         1: V34l5uFzYw3kKb1sTTfoMorRyxQ.asa (hash: MTaS52CxVyh3Tkcvp3/p/Y0eCYEdwzDZPEbKIi5PiFI=)
                          2: gjwMX13-U9s74NqofrgP8jOghVU.crl (hash: HzSY8WO6ufCfR+c7csnrmvGfawuvRmf/5NCSwAuel+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:b5:0e:f5:25:23:69:0a:e2:93:85:49:44:da:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555
        Validity
            Not Before: Jun 13 00:00:30 2026 GMT
            Not After : Jun 14 00:00:30 2026 GMT
        Subject: CN=d2bca209f40e9c0062c8d11d0489ba70d5593652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:e6:9a:f8:38:11:90:85:53:e8:08:17:bf:
                    32:39:ad:94:f5:a6:d4:b3:46:13:ae:09:53:6d:c9:
                    ab:71:8c:f6:40:e8:63:58:ba:cc:62:7c:7b:ab:ea:
                    6a:ba:3b:d3:d5:79:8c:90:8b:7b:f4:e2:a1:77:48:
                    6c:25:68:2b:9a:be:c9:04:6a:8e:7d:35:de:e3:f5:
                    ad:da:0f:bc:12:37:5c:f8:c1:2a:25:54:ac:45:17:
                    30:8f:fe:13:c2:ea:02:2e:f2:00:b9:8b:7e:5a:cb:
                    a7:33:48:4c:71:2d:8b:e5:ad:fc:4a:24:39:45:ff:
                    b2:f0:3c:c5:6d:61:00:53:f8:54:05:6b:10:4c:7e:
                    ad:29:10:05:61:fc:c2:28:4e:1a:e3:52:e4:1d:bb:
                    53:af:f1:dd:ae:f8:0e:26:a6:90:80:25:5e:63:97:
                    1d:8b:23:2e:b8:eb:16:f0:75:d3:e6:9a:8b:b1:b8:
                    0b:1d:8a:bd:a5:a0:45:eb:a9:10:6f:02:dc:0b:40:
                    39:34:d2:2f:64:bb:9a:aa:9d:fe:d4:6e:4e:a3:76:
                    7a:f5:40:c3:6e:0b:c7:13:17:91:d3:76:e4:fb:f3:
                    d2:6c:09:7d:3a:bd:2c:80:da:97:07:0e:ca:9f:58:
                    5a:e1:d7:7c:2a:d8:66:41:89:65:38:05:e1:50:81:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BC:A2:09:F4:0E:9C:00:62:C8:D1:1D:04:89:BA:70:D5:59:36:52
            X509v3 Authority Key Identifier:
                keyid:82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:50:86:1e:1e:d2:b1:56:2f:71:11:35:32:dc:34:f2:a7:b4:
         d8:e4:01:20:9e:6d:c9:3e:c5:f6:98:33:08:e4:d4:27:c5:06:
         ab:89:22:92:d2:e2:78:af:2a:93:df:ea:22:05:57:18:9d:fa:
         2d:85:12:42:9b:cd:80:c5:bc:45:db:9f:f1:28:86:3d:c3:82:
         39:0b:d6:bb:87:85:06:91:2d:e9:a8:66:a7:e0:86:c9:bf:b4:
         01:77:bc:c6:b3:e4:82:be:10:46:fc:5e:ea:9d:d7:93:94:ed:
         69:25:03:37:ef:aa:b0:c4:d1:07:d1:0f:70:af:cf:19:c3:b3:
         d5:68:f9:48:81:a1:3d:68:72:69:72:12:3f:a5:2e:ad:ec:11:
         20:4b:f7:cd:1d:8e:1d:cf:9b:df:b0:61:df:8c:b2:69:ca:a7:
         9e:05:64:99:5e:9d:23:58:95:11:9b:22:04:16:ce:44:03:c1:
         77:56:2e:9f:8b:e3:41:99:1a:1d:34:fe:ab:8d:15:1d:4e:d5:
         4d:00:39:4c:b1:d8:f6:11:65:da:b8:09:61:1a:b2:4c:00:96:
         25:11:34:13:6c:61:90:99:83:09:7b:91:ce:36:97:c9:c0:a5:
         83:79:4f:74:e9:67:6a:f3:53:82:cb:a5:4f:19:aa:6c:f1:ba:
         5d:6d:c7:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R7UO9SUjaQrik4VJRNo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyM2MwYzVmNWRmZTUzZGIzYmUwZGFhODdlYjgwZmYyMzNh
MDg1NTUwHhcNMjYwNjEzMDAwMDMwWhcNMjYwNjE0MDAwMDMwWjAzMTEwLwYDVQQD
EyhkMmJjYTIwOWY0MGU5YzAwNjJjOGQxMWQwNDg5YmE3MGQ1NTkzNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc3mmvg4EZCFU+gIF78yOa2U9abU
s0YTrglTbcmrcYz2QOhjWLrMYnx7q+pqujvT1XmMkIt79OKhd0hsJWgrmr7JBGqO
fTXe4/Wt2g+8Ejdc+MEqJVSsRRcwj/4TwuoCLvIAuYt+WsunM0hMcS2L5a38SiQ5
Rf+y8DzFbWEAU/hUBWsQTH6tKRAFYfzCKE4a41LkHbtTr/HdrvgOJqaQgCVeY5cd
iyMuuOsW8HXT5pqLsbgLHYq9paBF66kQbwLcC0A5NNIvZLuaqp3+1G5Oo3Z69UDD
bgvHExeR03bk+/PSbAl9Or0sgNqXBw7Kn1ha4dd8KthmQYllOAXhUIGxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK8ogn0DpwAYsjRHQSJunDVWTZSMB8GA1UdIwQY
MBaAFII8DF9d/lPbO+DaqH64D/IzoIVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2It
YmU2NjQyN2VhYmZlLzEvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2ItYmU2NjQyN2VhYmZl
LzEvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVCGHh7S
sVYvcRE1Mtw08qe02OQBIJ5tyT7F9pgzCOTUJ8UGq4kiktLieK8qk9/qIgVXGJ36
LYUSQpvNgMW8Rduf8SiGPcOCOQvWu4eFBpEt6ahmp+CGyb+0AXe8xrPkgr4QRvxe
6p3Xk5TtaSUDN++qsMTRB9EPcK/PGcOz1Wj5SIGhPWhyaXISP6UurewRIEv3zR2O
Hc+b37Bh34yyacqnngVkmV6dI1iVEZsiBBbORAPBd1Yun4vjQZkaHTT+q40VHU7V
TQA5TLHY9hFl2rgJYRqyTACWJRE0E2xhkJmDCXuRzjaXycClg3lPdOlnavNTgsul
TxmqbPG6XW3HDg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:32 2026 by rpki-client