Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          1DXNfkdlIr0+yewH6K0zqzJyD/5EHy+jnCURW0K33/s=
Subject key identifier:   DE:58:62:78:D4:97:F9:1C:57:ED:A0:11:A5:64:C2:3F:2B:47:C5:D4
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       019EBF5B06CDC4F8648EDF2394F79D034336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 05:01:14 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:14 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:14 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: ixWkosfcanr22ubuBdiqaa0qQbiKNT1JFk+eQG54ayc=)
                          2: Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa (hash: CBRZQkgyapVEnN+KlGzYptdXDl00PSWBvuMGdvm4uCg=)
                          3: Lnic-b8RKeW1rpPqbvXKHlom-ys.roa (hash: 2KTr1u+98H46S2uNewgTQPp+snCfpr8r+A46P3ahmR4=)
                          4: QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa (hash: K9uUssgaA9Cw/QN8kWZlExQkvdqZ4stsO6RuK8HpBDo=)
                          5: TyGVkDRU5VuGCHmgtXtvADqB47k.roa (hash: zZ1WNsnAjF4PPiuPy/odw3fOv3vMdCoVvaWlx1hFRXc=)
                          6: qm1N6afKIHDIeVkklPLOLKGaS4s.roa (hash: ewBUJyCJZqBY4ReNaWU+ZIFZCEk2IZ7kEhQ4Bd+n260=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:06:cd:c4:f8:64:8e:df:23:94:f7:9d:03:43:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Jun 13 05:01:14 2026 GMT
            Not After : Jun 14 05:01:14 2026 GMT
        Subject: CN=de586278d497f91c57eda011a564c23f2b47c5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:8d:8d:b1:e6:fc:31:b5:4b:fe:70:af:32:
                    be:d7:c5:29:64:e5:8b:c7:3e:23:3b:98:78:01:97:
                    fd:e6:d5:17:35:3f:0b:75:f7:0c:26:ba:5e:6b:92:
                    9e:71:58:bb:a4:f1:81:a7:5e:2a:3d:2b:e3:d6:41:
                    51:27:3e:64:32:a1:d6:d1:33:65:db:2e:e9:86:b6:
                    1b:09:fa:d4:81:e4:29:68:53:90:79:a3:bd:0a:e2:
                    67:8a:08:89:2e:c3:2c:af:c2:69:ce:b8:1a:5e:51:
                    b6:f4:a6:c4:fc:ba:f1:40:10:0d:f8:9f:c6:a0:23:
                    72:74:78:b0:80:93:6e:91:37:f9:c6:73:96:78:68:
                    aa:b0:7d:27:ca:9c:18:6b:43:04:8b:5e:7e:ed:b2:
                    1c:2f:da:c3:8b:b3:58:7c:5d:a8:c7:b5:7e:0b:6c:
                    3e:23:75:82:01:b3:ce:57:45:70:b4:d9:4c:10:34:
                    61:6d:d9:b7:70:11:b4:a2:1a:b7:55:ed:ec:4b:4c:
                    1e:29:ca:f1:e2:00:7c:6b:f3:6d:22:e2:15:73:ab:
                    f0:67:c2:05:ea:7d:28:bc:64:0f:65:fc:e1:96:b3:
                    fa:e3:06:e0:c1:eb:bf:a2:e1:83:1f:a4:14:99:c2:
                    1b:35:f5:01:c6:97:92:07:7f:e3:a1:d9:97:62:b0:
                    b0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:58:62:78:D4:97:F9:1C:57:ED:A0:11:A5:64:C2:3F:2B:47:C5:D4
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:59:27:d1:ee:68:43:76:81:bf:ff:e3:90:b8:fa:3e:d5:06:
         05:3b:00:11:11:5b:f0:fb:34:12:1d:59:7e:5e:fc:69:9c:28:
         0d:1b:c1:fe:3b:ac:cb:c9:ce:52:fa:81:29:9c:f4:79:73:a8:
         8e:18:60:97:49:67:cc:d4:32:92:98:ef:5e:21:47:3e:7a:a0:
         bb:39:f3:ff:b4:a6:cc:7a:c5:59:23:c0:33:22:e6:45:d4:3e:
         1b:9d:23:b8:4a:f1:bf:ff:c5:5b:a4:7d:b4:c2:7f:74:0d:09:
         fa:19:5a:e7:c6:68:86:ff:5b:d3:a1:cc:d5:de:38:b5:ab:14:
         ce:54:ec:d2:6b:0e:49:b6:49:da:f8:30:b0:0d:e6:e1:a0:25:
         ba:e9:41:f8:f0:15:c2:d4:c9:36:cf:be:28:fa:93:94:b3:51:
         94:e1:a3:19:c5:79:9c:38:e2:cd:cf:0f:fa:6d:fb:68:66:b8:
         1a:db:5c:9f:25:a8:30:02:98:69:f5:5a:67:62:3f:25:1e:2f:
         19:0b:4d:e9:a6:f9:5a:82:5b:b5:99:01:5e:d3:5b:76:f9:eb:
         93:ce:55:9a:49:1c:6b:5d:a2:ae:19:db:b4:8e:a8:4c:91:48:
         3b:30:a0:ef:03:25:e8:f3:27:9d:ae:c7:0f:61:5b:03:f5:a7:
         31:b2:7a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WwbNxPhkjt8jlPedA0M2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5
M2U3ODkwHhcNMjYwNjEzMDUwMTE0WhcNMjYwNjE0MDUwMTE0WjAzMTEwLwYDVQQD
EyhkZTU4NjI3OGQ0OTdmOTFjNTdlZGEwMTFhNTY0YzIzZjJiNDdjNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnqNjbHm/DG1S/5wrzK+18UpZOWL
xz4jO5h4AZf95tUXNT8LdfcMJrpea5KecVi7pPGBp14qPSvj1kFRJz5kMqHW0TNl
2y7phrYbCfrUgeQpaFOQeaO9CuJnigiJLsMsr8JpzrgaXlG29KbE/LrxQBAN+J/G
oCNydHiwgJNukTf5xnOWeGiqsH0nypwYa0MEi15+7bIcL9rDi7NYfF2ox7V+C2w+
I3WCAbPOV0VwtNlMEDRhbdm3cBG0ohq3Ve3sS0weKcrx4gB8a/NtIuIVc6vwZ8IF
6n0ovGQPZfzhlrP64wbgweu/ouGDH6QUmcIbNfUBxpeSB3/jodmXYrCwXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5YYnjUl/kcV+2gEaVkwj8rR8XUMB8GA1UdIwQY
MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt
NmUwNjk2ZmVlOGU2LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2
LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1kn0e5o
Q3aBv//jkLj6PtUGBTsAERFb8Ps0Eh1Zfl78aZwoDRvB/jusy8nOUvqBKZz0eXOo
jhhgl0lnzNQykpjvXiFHPnqguznz/7SmzHrFWSPAMyLmRdQ+G50juErxv//FW6R9
tMJ/dA0J+hla58Zohv9b06HM1d44tasUzlTs0msOSbZJ2vgwsA3m4aAluulB+PAV
wtTJNs++KPqTlLNRlOGjGcV5nDjizc8P+m37aGa4GttcnyWoMAKYafVaZ2I/JR4v
GQtN6ab5WoJbtZkBXtNbdvnrk85Vmkkca12irhnbtI6oTJFIOzCg7wMl6PMnna7H
D2FbA/WnMbJ61Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:28 2026 by rpki-client