Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File:                     GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier:          daqO0DGAbSOSuF8g52Cy/BX6VPjaOYfWvAcSwiHmbvs=
Subject key identifier:   6A:42:C7:90:39:04:40:48:15:7D:D3:2C:5D:B3:27:A1:84:B5:7F:95
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer:       /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial:       019E1F7ECBBC20FBBB3B21992C372CDB4A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number:          0DB2
Signing time:             Wed 13 May 2026 04:01:03 +0000
Manifest this update:     Wed 13 May 2026 04:01:03 +0000
Manifest next update:     Thu 14 May 2026 04:01:03 +0000
Files and hashes:         1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: P4xWfEFIRwfncJyPMSeLcE1KCFFuXZj3XSMK7ZVH99Q=)
                          2: bsIvknt5fmmAnWdhXsBu-Ue2-v0.roa (hash: n3XIzhJt5VMAiTGqI1g3v5Vdsn00DFS2DY6O4jjQGxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:cb:bc:20:fb:bb:3b:21:99:2c:37:2c:db:4a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
        Validity
            Not Before: May 13 04:01:03 2026 GMT
            Not After : May 14 04:01:03 2026 GMT
        Subject: CN=6a42c79039044048157dd32c5db327a184b57f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:ce:66:2f:d9:29:1c:93:83:0e:b9:37:ff:
                    28:b7:38:ea:6d:53:29:73:c1:05:12:b4:15:d4:72:
                    0d:f9:f0:d9:83:9b:e9:28:eb:da:f9:4c:cf:56:2f:
                    db:2e:50:57:2b:e0:39:76:b8:00:07:bc:09:58:bd:
                    d1:62:da:d7:17:71:17:68:97:39:f0:9e:ca:b3:5b:
                    cf:3b:a6:ca:99:8e:ed:52:ff:30:1e:3b:3d:e8:a4:
                    e7:80:98:56:e7:25:b1:9d:c3:01:46:27:a4:ae:f0:
                    b7:b0:de:72:74:73:52:2c:bd:f9:ad:b2:91:f9:6b:
                    2d:e3:a0:4f:10:22:d3:61:d4:b2:01:33:7c:45:4c:
                    b0:da:91:ac:da:13:53:6d:c6:e2:9d:8c:03:91:71:
                    95:38:a7:2c:73:3b:a3:a3:fb:05:22:36:35:9a:97:
                    82:1e:f0:fd:23:11:12:d3:a5:f0:cf:9b:d5:33:78:
                    98:24:cc:94:73:c1:99:3b:68:9f:ec:de:4d:6f:95:
                    f7:4e:5d:f7:a5:4b:9f:73:42:67:23:b0:79:8c:56:
                    3c:93:fe:c3:53:c8:fa:33:eb:5f:0c:56:64:cc:76:
                    9b:fb:d8:ba:7a:fe:35:e4:66:e1:1d:c6:6b:02:f4:
                    92:04:e8:05:05:ea:fe:5b:3d:70:8f:7f:b1:c2:67:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:42:C7:90:39:04:40:48:15:7D:D3:2C:5D:B3:27:A1:84:B5:7F:95
            X509v3 Authority Key Identifier:
                keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:f8:c3:c8:7a:69:b4:2d:5d:04:45:5f:74:8d:94:ac:ae:
         43:10:d4:f5:95:94:f6:1f:7f:f3:24:6f:20:73:12:6e:8f:e9:
         fe:04:ce:b5:18:e9:6b:21:c7:be:bb:e6:3f:f3:50:fb:74:08:
         6b:d3:43:df:49:2d:b1:f7:01:95:ba:01:8b:f4:d4:ef:10:d1:
         5f:69:59:0a:8b:17:cb:a8:44:1f:8e:27:35:a6:d2:59:1c:70:
         10:bd:4c:58:dd:50:ec:db:d0:5a:b1:ef:fa:7e:8f:2e:49:e3:
         f7:8b:3c:97:92:f7:b7:18:97:62:42:ff:1e:e3:d0:b6:36:57:
         c4:a5:ce:16:07:3d:a9:6b:03:55:30:ba:b5:18:88:37:c6:1d:
         9f:bf:af:69:5e:92:d1:21:e4:4a:fe:02:f2:49:7f:df:fb:f5:
         b5:9a:c3:2a:ff:22:97:e6:30:d0:76:47:75:b0:d9:dd:9c:10:
         6d:fd:cf:0e:f8:c1:27:a8:f9:07:80:2f:0f:37:a7:0c:df:5d:
         19:43:e9:21:f7:d3:46:04:b3:a7:61:fa:e2:07:3a:28:57:02:
         20:10:5b:4d:80:07:a1:09:a4:75:d8:85:0e:22:29:46:5d:d9:
         41:b9:0a:c5:a9:6c:64:4f:8a:93:98:36:80:cb:a2:f8:8d:41:
         b0:90:54:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffsu8IPu7OyGZLDcs20qeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YzFiYjNmYjEzNmFiZjQwN2EwYTUxYTRhMDc2NTE3NGZm
ZGY0NzQwHhcNMjYwNTEzMDQwMTAzWhcNMjYwNTE0MDQwMTAzWjAzMTEwLwYDVQQD
Eyg2YTQyYzc5MDM5MDQ0MDQ4MTU3ZGQzMmM1ZGIzMjdhMTg0YjU3Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnzOZi/ZKRyTgw65N/8otzjqbVMp
c8EFErQV1HIN+fDZg5vpKOva+UzPVi/bLlBXK+A5drgAB7wJWL3RYtrXF3EXaJc5
8J7Ks1vPO6bKmY7tUv8wHjs96KTngJhW5yWxncMBRiekrvC3sN5ydHNSLL35rbKR
+Wst46BPECLTYdSyATN8RUyw2pGs2hNTbcbinYwDkXGVOKcsczujo/sFIjY1mpeC
HvD9IxES06Xwz5vVM3iYJMyUc8GZO2if7N5Nb5X3Tl33pUufc0JnI7B5jFY8k/7D
U8j6M+tfDFZkzHab+9i6ev415GbhHcZrAvSSBOgFBer+Wz1wj3+xwme81QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpCx5A5BEBIFX3TLF2zJ6GEtX+VMB8GA1UdIwQY
MBaAFBnBuz+xNqv0B6ClGkoHZRdP/fR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEt
ZGFkMThkNWIyYTNjLzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEtZGFkMThkNWIyYTNj
LzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApob4w8h6
abQtXQRFX3SNlKyuQxDU9ZWU9h9/8yRvIHMSbo/p/gTOtRjpayHHvrvmP/NQ+3QI
a9ND30ktsfcBlboBi/TU7xDRX2lZCosXy6hEH44nNabSWRxwEL1MWN1Q7NvQWrHv
+n6PLknj94s8l5L3txiXYkL/HuPQtjZXxKXOFgc9qWsDVTC6tRiIN8Ydn7+vaV6S
0SHkSv4C8kl/3/v1tZrDKv8il+Yw0HZHdbDZ3ZwQbf3PDvjBJ6j5B4AvDzenDN9d
GUPpIffTRgSzp2H64gc6KFcCIBBbTYAHoQmkddiFDiIpRl3ZQbkKxalsZE+Kk5g2
gMui+I1BsJBUaA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:15:17 2026 by rpki-client