Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File:                     gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier:          +zU+75uiSkQ0FlSg6BIGsPgcbj8ESTlMZDrUaYRRYXc=
Subject key identifier:   97:3B:CB:E2:A7:50:FD:03:9B:DC:B9:80:45:A8:8C:CB:55:CC:87:9F
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer:       /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial:       019F92EE1021BBE1F956E40DA0C622D38260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 07:01:42 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:42 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:42 +0000
Files and hashes:         1: 8R-xDyOZCqzkZOmjhye0P0XKn1Y.roa (hash: F1vlUDsZyHn4eYl8OdR67IG0vKLcKMBkSRba2+ifgaA=)
                          2: B4QA_S9k7SlVpR7MdWiiWUcIC-I.roa (hash: OOJx9FQsYUEok6ZK1kN2i3wjiOZNjN0fy2SYUeHp9n4=)
                          3: OdpcRvq6Ntt7BatU6hcDO7lKhJU.roa (hash: 2TK7J7AsVuo5uY1fW4gJFOzrWvfYvp6BV3XxeqBPocQ=)
                          4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: 0Y5qAhYMBmVg31gkM/J09D+/XZS1Tet67/uuvqTuPiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ee:10:21:bb:e1:f9:56:e4:0d:a0:c6:22:d3:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
        Validity
            Not Before: Jul 24 07:01:42 2026 GMT
            Not After : Jul 25 07:01:42 2026 GMT
        Subject: CN=973bcbe2a750fd039bdcb98045a88ccb55cc879f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:e6:23:6d:bf:0d:fe:04:ed:5c:c3:4e:e8:
                    8e:05:1a:bd:d3:3f:7f:cc:06:f0:67:07:99:e5:1a:
                    fa:73:07:c7:fd:8f:bc:e6:28:d1:54:06:92:58:7a:
                    88:6e:0e:8c:33:a6:3a:ad:70:d6:aa:0c:d9:28:72:
                    b9:ba:b5:02:5b:e8:1b:c1:92:4d:51:18:83:1b:0a:
                    48:58:24:c0:0c:99:2c:fd:db:a7:8b:d9:d4:55:65:
                    42:af:61:82:b3:9c:fd:f6:37:59:c8:e7:da:44:11:
                    03:ca:89:ea:bf:a0:a5:ea:97:6e:6d:5b:c5:e2:fd:
                    29:d9:15:ba:cb:91:f0:f0:38:47:18:a5:ee:08:be:
                    62:8e:46:3d:d0:3d:c2:95:bd:92:09:90:5c:5f:5a:
                    6e:f1:d1:7e:1f:ba:5d:04:ae:2b:51:ce:7b:fb:bb:
                    7f:b5:15:25:fa:3e:1c:1a:0e:ea:06:ed:3b:8f:61:
                    c4:c5:88:83:5d:de:9d:2b:1b:94:e0:72:28:d3:d7:
                    64:31:b4:53:00:64:e5:d8:27:3e:2c:b8:98:f5:d0:
                    f6:79:5b:4b:0a:a3:ed:ce:5c:b7:98:ec:6f:7e:85:
                    4a:1f:ca:5a:4f:b9:fb:f8:66:dc:97:f9:c0:26:ce:
                    2e:9b:49:cc:3e:42:3f:9e:12:03:93:c5:e9:14:cf:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3B:CB:E2:A7:50:FD:03:9B:DC:B9:80:45:A8:8C:CB:55:CC:87:9F
            X509v3 Authority Key Identifier:
                keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:93:f4:11:a0:e1:43:65:6f:78:de:2f:13:cb:36:59:08:
         9c:b4:0d:ad:6d:90:2c:11:d4:3f:24:84:70:86:c9:d8:1b:21:
         d1:bf:3c:2e:cc:5f:c0:69:67:97:96:f3:5b:50:e0:0a:22:50:
         cf:07:15:72:9f:f9:42:a1:4f:bd:25:36:07:20:45:0f:6e:6f:
         9d:34:f2:36:95:2e:71:b0:25:b0:22:b5:e9:e1:20:08:0a:86:
         67:81:ea:6a:22:5f:08:5a:73:67:39:0c:09:34:cf:8c:c6:ab:
         f6:96:b3:7a:78:7f:5a:f1:d3:93:fa:c9:79:cd:34:38:bf:ae:
         5a:4e:9e:c8:a3:72:c9:a0:33:45:b2:87:e4:ca:06:99:47:0b:
         2e:6f:4a:1a:fa:b7:24:ff:f9:9b:21:4f:31:48:c4:4f:c4:45:
         bb:d4:0a:67:d2:0c:72:88:6a:2f:83:18:66:55:c0:c6:54:06:
         f6:4f:98:80:a6:95:8d:9a:0f:97:c7:1d:b2:ed:ea:c6:f4:39:
         10:0e:ca:9c:af:c4:30:d0:12:ac:ad:c6:66:e0:72:80:c9:3d:
         1b:ff:b7:5e:47:65:e1:c3:d4:ae:15:6c:48:c1:d1:2b:69:64:
         2f:7e:cf:67:75:18:9b:51:31:d6:af:8d:3b:c4:bb:b5:81:9b:
         59:5d:2c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7hAhu+H5VuQNoMYi04JgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYmI3OGJlNDFlNDgzMzc5OTdjOGZlOTFkOGUyZjI0Zjdi
NDllYWYwHhcNMjYwNzI0MDcwMTQyWhcNMjYwNzI1MDcwMTQyWjAzMTEwLwYDVQQD
Eyg5NzNiY2JlMmE3NTBmZDAzOWJkY2I5ODA0NWE4OGNjYjU1Y2M4NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV/mI22/Df4E7VzDTuiOBRq90z9/
zAbwZweZ5Rr6cwfH/Y+85ijRVAaSWHqIbg6MM6Y6rXDWqgzZKHK5urUCW+gbwZJN
URiDGwpIWCTADJks/duni9nUVWVCr2GCs5z99jdZyOfaRBEDyonqv6Cl6pdubVvF
4v0p2RW6y5Hw8DhHGKXuCL5ijkY90D3Clb2SCZBcX1pu8dF+H7pdBK4rUc57+7t/
tRUl+j4cGg7qBu07j2HExYiDXd6dKxuU4HIo09dkMbRTAGTl2Cc+LLiY9dD2eVtL
CqPtzly3mOxvfoVKH8paT7n7+Gbcl/nAJs4um0nMPkI/nhIDk8XpFM9RnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc7y+KnUP0Dm9y5gEWojMtVzIefMB8GA1UdIwQY
MBaAFIG7eL5B5IM3mXyP6R2OLyT3tJ6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAt
NmNiZDU4MWQzMTdjLzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAtNmNiZDU4MWQzMTdj
LzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYb+T9BGg
4UNlb3jeLxPLNlkInLQNrW2QLBHUPySEcIbJ2Bsh0b88LsxfwGlnl5bzW1DgCiJQ
zwcVcp/5QqFPvSU2ByBFD25vnTTyNpUucbAlsCK16eEgCAqGZ4HqaiJfCFpzZzkM
CTTPjMar9pazenh/WvHTk/rJec00OL+uWk6eyKNyyaAzRbKH5MoGmUcLLm9KGvq3
JP/5myFPMUjET8RFu9QKZ9IMcohqL4MYZlXAxlQG9k+YgKaVjZoPl8cdsu3qxvQ5
EA7KnK/EMNASrK3GZuBygMk9G/+3Xkdl4cPUrhVsSMHRK2lkL37PZ3UYm1Ex1q+N
O8S7tYGbWV0s1Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:36 2026 by rpki-client