Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File:                     iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier:          CYRQf/vclQOjqJJXWuKQCZJIEyPZ+t9Hr/7Rado7MH0=
Subject key identifier:   59:46:A0:5E:8B:B9:7E:23:E7:79:FB:E0:31:A0:0D:DF:7D:2A:61:D9
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer:       /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial:       019EBF5ACF6F8579DA8E32CA68FFE0F57669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number:          7F
Signing time:             Sat 13 Jun 2026 05:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:59 +0000
Files and hashes:         1: 1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa (hash: PKBAPXzgnWazEIllaNoOetp38i7rE9un2IC2xSXTZlQ=)
                          2: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (hash: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=)
                          3: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: jGU2YDUoRNb5Ky93V6iNzL4aqtEWJiY+OcgyCEMHfgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:cf:6f:85:79:da:8e:32:ca:68:ff:e0:f5:76:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
        Validity
            Not Before: Jun 13 05:00:59 2026 GMT
            Not After : Jun 14 05:00:59 2026 GMT
        Subject: CN=5946a05e8bb97e23e779fbe031a00ddf7d2a61d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:77:eb:c9:0f:d7:5a:c8:f1:b7:09:29:d2:
                    c2:0d:dd:a9:4d:36:ff:d7:a2:12:4a:65:60:66:32:
                    93:3f:01:e1:6b:93:0b:bb:16:bf:d4:ac:15:fb:96:
                    47:60:69:c2:94:04:bb:74:57:96:23:ea:1a:53:52:
                    fc:4c:ee:ff:25:f4:35:ce:4a:dd:41:81:7f:8c:fb:
                    6a:0b:e5:ad:26:b6:a1:da:8d:b3:c1:a3:6b:65:71:
                    db:6b:71:0e:77:a5:83:9d:08:7b:de:d3:d2:9b:ac:
                    b3:76:e8:9b:ae:8e:1c:1c:f8:f0:89:5f:d2:3d:7a:
                    79:c7:7c:47:c0:e3:3f:6e:18:a5:e3:ca:88:39:7b:
                    ee:56:43:34:7f:5e:fa:77:ba:00:07:de:4d:87:2d:
                    f1:67:45:f7:0c:50:57:83:47:31:13:02:82:96:01:
                    09:61:90:73:13:0a:4b:1b:bc:61:3a:4b:3d:b6:3d:
                    21:f6:15:e1:17:85:97:23:f2:a9:fd:89:fc:1a:68:
                    7e:77:d7:30:2e:ca:60:09:4a:d4:3f:c7:f9:9b:cb:
                    e7:20:e9:09:eb:ce:51:77:09:18:c1:02:18:5a:88:
                    65:31:40:95:9e:c9:5a:e7:50:cd:8f:01:cf:2c:7c:
                    14:8a:67:27:fc:74:a8:31:f9:96:60:12:da:0b:a2:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:46:A0:5E:8B:B9:7E:23:E7:79:FB:E0:31:A0:0D:DF:7D:2A:61:D9
            X509v3 Authority Key Identifier:
                keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:90:45:57:45:16:62:49:82:bf:79:d0:d1:da:a2:bc:55:
         cb:1c:b5:b3:fb:8a:3a:41:65:91:ca:56:34:1d:83:60:80:a2:
         23:bd:10:67:52:2f:c0:88:79:02:63:bc:27:87:ab:26:d7:ce:
         07:c5:5a:51:76:1e:ea:46:dd:e3:c0:0b:f1:b7:9a:ed:a3:b5:
         52:e4:16:c0:12:95:16:88:82:c2:97:0a:e0:1e:20:6e:86:53:
         1f:d6:1c:45:f2:b0:0f:9d:71:91:59:d4:d4:61:f8:1f:36:b3:
         09:b7:cd:72:9b:63:7f:93:58:4b:69:d5:5c:27:ee:23:4e:09:
         9b:eb:a5:6f:73:1c:a3:37:6b:24:52:b1:01:6e:e7:b2:21:87:
         3e:cf:35:3b:4f:76:55:93:7c:f6:1a:e4:95:58:07:7e:ef:11:
         91:34:72:5f:8c:28:e8:a0:35:89:36:e7:a5:f2:51:92:66:cc:
         be:98:67:18:cf:1b:3d:3b:cb:1b:cf:2e:06:6e:f5:fd:bf:bd:
         38:aa:cd:1b:58:6b:c0:2a:79:ad:48:fb:de:e9:14:77:57:be:
         bc:f6:e9:f4:ec:5a:e2:2d:79:b4:a4:c6:59:01:b4:fa:44:17:
         ca:a6:6e:17:28:64:23:60:11:50:a0:5f:db:1b:ba:ed:dd:6e:
         99:6d:0e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Ws9vhXnajjLKaP/g9XZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZWE4MjkxYTUxZDUzYmYzNDRkY2Q4NzYyY2RiNjgyOWQx
ZTRiYzAwHhcNMjYwNjEzMDUwMDU5WhcNMjYwNjE0MDUwMDU5WjAzMTEwLwYDVQQD
Eyg1OTQ2YTA1ZThiYjk3ZTIzZTc3OWZiZTAzMWEwMGRkZjdkMmE2MWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztl368kP11rI8bcJKdLCDd2pTTb/
16ISSmVgZjKTPwHha5MLuxa/1KwV+5ZHYGnClAS7dFeWI+oaU1L8TO7/JfQ1zkrd
QYF/jPtqC+WtJrah2o2zwaNrZXHba3EOd6WDnQh73tPSm6yzduibro4cHPjwiV/S
PXp5x3xHwOM/bhil48qIOXvuVkM0f176d7oAB95Nhy3xZ0X3DFBXg0cxEwKClgEJ
YZBzEwpLG7xhOks9tj0h9hXhF4WXI/Kp/Yn8Gmh+d9cwLspgCUrUP8f5m8vnIOkJ
685RdwkYwQIYWohlMUCVnsla51DNjwHPLHwUimcn/HSoMfmWYBLaC6J6ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlGoF6LuX4j53n74DGgDd99KmHZMB8GA1UdIwQY
MBaAFIrqgpGlHVO/NE3Nh2LNtoKdHkvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iYjA1YWMtNGI5Mi00ZmRlLTkyNjAt
ZDJmYjBhMzIwMWI4LzEvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iYjA1YWMtNGI5Mi00ZmRlLTkyNjAtZDJmYjBhMzIwMWI4
LzEvaXVxQ2thVWRVNzgwVGMySFlzMjJncDBlUzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdiQRVdF
FmJJgr950NHaorxVyxy1s/uKOkFlkcpWNB2DYICiI70QZ1IvwIh5AmO8J4erJtfO
B8VaUXYe6kbd48AL8bea7aO1UuQWwBKVFoiCwpcK4B4gboZTH9YcRfKwD51xkVnU
1GH4HzazCbfNcptjf5NYS2nVXCfuI04Jm+ulb3McozdrJFKxAW7nsiGHPs81O092
VZN89hrklVgHfu8RkTRyX4wo6KA1iTbnpfJRkmbMvphnGM8bPTvLG88uBm71/b+9
OKrNG1hrwCp5rUj73ukUd1e+vPbp9Oxa4i15tKTGWQG0+kQXyqZuFyhkI2ARUKBf
2xu67d1umW0O2A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:58 2026 by rpki-client