Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File:                     GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier:          KXTOpu2/IRs28QLAbxdpo2CkaRqugpkoEZbVTDt7sKw=
Subject key identifier:   07:4D:8C:CF:10:8A:3C:C6:37:FB:EF:D2:ED:81:9A:59:A0:30:7B:9F
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer:       /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial:       019F9580A3ADAFE6D70FD6B960E4A58F7137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 19:01:03 +0000
Manifest this update:     Fri 24 Jul 2026 19:01:03 +0000
Manifest next update:     Sat 25 Jul 2026 19:01:03 +0000
Files and hashes:         1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=)
                          2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=)
                          3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: OrGGEzaAMT2SsLO2FyDEX8j21q3ntr3L39y4F3iwIT8=)
                          4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:a3:ad:af:e6:d7:0f:d6:b9:60:e4:a5:8f:71:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
        Validity
            Not Before: Jul 24 19:01:03 2026 GMT
            Not After : Jul 25 19:01:03 2026 GMT
        Subject: CN=074d8ccf108a3cc637fbefd2ed819a59a0307b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:61:64:8d:2b:a1:fe:56:bc:34:e6:c5:b1:
                    04:3e:b2:43:c1:b5:c5:d0:d8:cc:c8:40:7d:b1:32:
                    d5:07:29:ad:4f:35:50:dd:b2:d6:c5:09:b9:02:f1:
                    ec:79:70:13:66:28:4d:3d:8b:23:0f:f7:d5:5c:9f:
                    66:b9:9d:fa:aa:c5:43:f7:33:3a:2a:e4:36:bf:53:
                    5c:7b:a7:8c:5e:6a:43:2d:38:13:d0:50:c5:9a:67:
                    f0:37:3b:6d:93:b4:01:99:7d:87:a9:91:4c:51:ff:
                    34:17:3d:07:12:ae:6d:43:eb:a8:56:96:51:5e:c9:
                    8c:37:c2:dd:da:e1:f4:ac:bd:36:26:68:04:43:f5:
                    e9:ea:b7:33:ba:6c:d1:01:66:eb:03:94:7c:0a:68:
                    d0:50:b8:38:1e:9e:f8:f9:5f:fa:e3:98:26:2a:9b:
                    c8:47:dd:88:72:a3:a9:a2:85:38:4e:38:6b:9b:92:
                    f4:d5:c6:2b:20:7d:9d:05:39:b4:de:63:cf:9f:0e:
                    0b:e5:26:11:16:46:c4:2b:02:4f:a3:ca:8f:73:a3:
                    ca:0a:0a:6b:0e:1b:ec:53:9f:e8:ce:a2:df:ba:e4:
                    a2:13:ca:5b:d8:c9:59:c4:28:2c:7b:41:da:59:13:
                    a6:45:4b:62:2a:29:de:c1:96:ca:4e:47:27:47:85:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4D:8C:CF:10:8A:3C:C6:37:FB:EF:D2:ED:81:9A:59:A0:30:7B:9F
            X509v3 Authority Key Identifier:
                keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:f0:0a:76:a6:05:ee:02:96:92:5e:40:fb:62:36:e8:db:
         0d:1f:1a:0d:df:05:4d:c9:8c:2d:29:37:9a:7c:e9:32:02:2f:
         d2:c0:8c:99:a0:96:32:cd:8e:a8:b5:69:de:83:76:85:19:ac:
         51:9c:50:5d:13:21:1f:ab:a8:e6:a5:47:b4:20:91:8a:4d:e1:
         c5:a2:4a:3e:65:b5:cf:2c:73:f8:35:4c:c9:80:40:c4:65:f3:
         77:ad:55:71:84:8a:fc:87:94:f1:ee:b1:50:c5:c4:48:f9:c1:
         0f:11:c3:8d:9c:c8:2c:c5:31:07:60:d8:c5:ff:75:3b:09:d8:
         cf:3c:70:c9:42:15:24:2a:64:0f:11:6c:3c:5c:a0:3f:e9:96:
         02:af:78:17:e7:2b:4b:af:fd:0a:11:3c:b6:9f:ab:3c:c7:72:
         95:55:bc:31:cb:2a:c0:eb:49:d6:48:84:c7:67:2d:e3:5d:83:
         3f:bb:19:b4:9c:fd:22:db:2c:5f:86:b8:cf:a4:31:38:c7:ae:
         b8:bd:14:12:84:dd:54:08:b3:97:1f:38:c4:6b:5a:1f:72:ff:
         2f:2f:e3:c6:dd:99:fd:6d:e5:e7:13:0f:84:b4:90:11:bd:4b:
         c6:f7:56:e8:a0:51:fd:cb:07:74:1c:a0:69:38:17:8f:cc:da:
         fb:8b:a3:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgKOtr+bXD9a5YOSlj3E3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx
NGM1NzEwHhcNMjYwNzI0MTkwMTAzWhcNMjYwNzI1MTkwMTAzWjAzMTEwLwYDVQQD
EygwNzRkOGNjZjEwOGEzY2M2MzdmYmVmZDJlZDgxOWE1OWEwMzA3YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lVhZI0rof5WvDTmxbEEPrJDwbXF
0NjMyEB9sTLVBymtTzVQ3bLWxQm5AvHseXATZihNPYsjD/fVXJ9muZ36qsVD9zM6
KuQ2v1Nce6eMXmpDLTgT0FDFmmfwNzttk7QBmX2HqZFMUf80Fz0HEq5tQ+uoVpZR
XsmMN8Ld2uH0rL02JmgEQ/Xp6rczumzRAWbrA5R8CmjQULg4Hp74+V/645gmKpvI
R92IcqOpooU4Tjhrm5L01cYrIH2dBTm03mPPnw4L5SYRFkbEKwJPo8qPc6PKCgpr
DhvsU5/ozqLfuuSiE8pb2MlZxCgse0HaWROmRUtiKinewZbKTkcnR4UZfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdNjM8QijzGN/vv0u2BmlmgMHufMB8GA1UdIwQY
MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt
OWQzOTJlZWUwZjY2LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2
LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneLwCnam
Be4ClpJeQPtiNujbDR8aDd8FTcmMLSk3mnzpMgIv0sCMmaCWMs2OqLVp3oN2hRms
UZxQXRMhH6uo5qVHtCCRik3hxaJKPmW1zyxz+DVMyYBAxGXzd61VcYSK/IeU8e6x
UMXESPnBDxHDjZzILMUxB2DYxf91OwnYzzxwyUIVJCpkDxFsPFygP+mWAq94F+cr
S6/9ChE8tp+rPMdylVW8McsqwOtJ1kiEx2ct412DP7sZtJz9ItssX4a4z6QxOMeu
uL0UEoTdVAizlx84xGtaH3L/Ly/jxt2Z/W3l5xMPhLSQEb1LxvdW6KBR/csHdByg
aTgXj8za+4ujyA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:14:12 2026 by rpki-client