Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File:                     C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier:          yyw5Mc46cnHCHVK7pPYfjkDQqvMFeoxdscFpxryw7j8=
Subject key identifier:   0B:B0:0E:EA:33:BE:54:16:45:98:62:FC:42:1B:68:EE:51:E3:59:3F
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer:       /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial:       019EBEED3413E1A28815A945DF59664D76B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number:          189C
Signing time:             Sat 13 Jun 2026 03:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:16 +0000
Files and hashes:         1: 61ugHkbatEiWTW_1eKYKqCu8qbY.roa (hash: 8Ns+XB7ZudJ9zzWr083jFxqXZ3ELplfe29YSHWs6xj0=)
                          2: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: aoSZc7YL8cN2otHNYE+cXmiN5eVQrkFq0ljytkbWXEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:34:13:e1:a2:88:15:a9:45:df:59:66:4d:76:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
        Validity
            Not Before: Jun 13 03:01:16 2026 GMT
            Not After : Jun 14 03:01:16 2026 GMT
        Subject: CN=0bb00eea33be5416459862fc421b68ee51e3593f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0e:37:54:25:be:3c:48:16:30:13:0a:b0:b5:
                    6f:75:12:52:bf:47:0b:da:5c:05:65:71:19:33:a3:
                    ea:43:b8:5c:63:2c:73:07:dc:8d:ea:da:98:83:ca:
                    5d:a6:f8:98:4b:04:1e:f5:e6:10:d1:96:41:fb:b9:
                    4e:fa:8f:fd:23:a3:45:17:70:98:ef:7f:25:f9:d4:
                    51:9b:58:08:fb:50:04:0f:03:db:d3:0b:7b:15:e9:
                    e4:3a:6f:3f:30:58:ef:68:83:34:38:db:43:76:3e:
                    c4:be:08:c0:f3:0c:7a:39:46:65:c7:cd:dc:1d:61:
                    c2:70:f9:ef:e8:55:23:45:31:99:d6:45:cd:b8:0d:
                    60:84:25:7e:cb:f7:26:01:c8:2d:af:a1:4e:2b:0a:
                    78:ac:a6:ac:05:79:f9:ea:50:9e:94:af:84:fb:0e:
                    29:a5:b1:6a:6f:c1:6d:28:3d:91:ef:ec:ff:f5:4b:
                    11:76:bb:43:4c:3b:02:b6:08:cf:b2:4e:32:39:a1:
                    68:50:1e:fc:90:b1:19:71:c4:81:21:91:49:c5:1c:
                    ca:d5:60:0a:5e:0f:70:b9:96:27:bf:25:18:a6:d0:
                    ab:27:cf:fb:e7:ad:e9:76:41:23:a3:60:35:d3:3b:
                    16:a2:68:12:e8:99:47:9e:91:df:47:3e:68:c2:06:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B0:0E:EA:33:BE:54:16:45:98:62:FC:42:1B:68:EE:51:E3:59:3F
            X509v3 Authority Key Identifier:
                keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:c3:f7:23:c0:b1:3e:7a:c1:a9:40:4f:da:6d:b0:7d:30:
         48:98:8b:32:55:ca:30:9a:c8:0e:5c:4a:e5:4f:d4:d3:0a:da:
         e8:2c:8a:fa:d9:1e:cb:bb:91:28:9d:8b:dd:e1:e9:99:16:79:
         2b:90:4a:70:98:0c:d7:31:f7:d2:67:d8:d6:51:6f:cc:56:34:
         21:83:2f:54:52:53:6e:30:f8:50:07:e4:05:2e:7c:f0:2e:70:
         99:4a:cb:47:7c:03:23:3d:33:fd:11:10:64:e9:1d:63:0c:84:
         23:f6:86:f8:90:c2:90:2e:a1:de:1b:20:4c:52:45:10:94:cd:
         53:a0:ec:5c:79:68:30:c2:4e:74:aa:19:a6:14:86:51:aa:be:
         a5:f7:24:fd:3e:36:09:53:8d:90:8a:f3:85:27:d0:69:bd:22:
         67:ac:73:0f:fe:04:bd:4a:2f:83:48:48:11:fa:ac:51:8b:b8:
         60:31:a1:53:05:3f:78:66:a5:8d:ed:47:3b:fe:1c:be:a8:09:
         e1:d5:8f:ee:13:12:40:b3:34:15:2e:3a:5d:8c:d7:8f:0d:96:
         86:2f:c0:5b:6b:6b:b9:28:40:7e:f8:10:e0:da:3f:39:d7:a3:
         45:10:6e:73:35:bb:9e:79:11:98:1f:ce:27:34:a5:cd:8a:7a:
         e1:68:83:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7TQT4aKIFalF31lmTXayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjcxZTQyNjRjZTYyYzM1ZTFjZWU2NGQxODc2NWQzMzI5
MGYyYTQwHhcNMjYwNjEzMDMwMTE2WhcNMjYwNjE0MDMwMTE2WjAzMTEwLwYDVQQD
EygwYmIwMGVlYTMzYmU1NDE2NDU5ODYyZmM0MjFiNjhlZTUxZTM1OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+w43VCW+PEgWMBMKsLVvdRJSv0cL
2lwFZXEZM6PqQ7hcYyxzB9yN6tqYg8pdpviYSwQe9eYQ0ZZB+7lO+o/9I6NFF3CY
738l+dRRm1gI+1AEDwPb0wt7FenkOm8/MFjvaIM0ONtDdj7EvgjA8wx6OUZlx83c
HWHCcPnv6FUjRTGZ1kXNuA1ghCV+y/cmAcgtr6FOKwp4rKasBXn56lCelK+E+w4p
pbFqb8FtKD2R7+z/9UsRdrtDTDsCtgjPsk4yOaFoUB78kLEZccSBIZFJxRzK1WAK
Xg9wuZYnvyUYptCrJ8/7563pdkEjo2A10zsWomgS6JlHnpHfRz5owgax+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuwDuozvlQWRZhi/EIbaO5R41k/MB8GA1UdIwQY
MBaAFAu3HkJkzmLDXhzuZNGHZdMykPKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMt
Y2E1NDU4MzhhZmMwLzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMtY2E1NDU4MzhhZmMw
LzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnPD9yPA
sT56walAT9ptsH0wSJiLMlXKMJrIDlxK5U/U0wra6CyK+tkey7uRKJ2L3eHpmRZ5
K5BKcJgM1zH30mfY1lFvzFY0IYMvVFJTbjD4UAfkBS588C5wmUrLR3wDIz0z/REQ
ZOkdYwyEI/aG+JDCkC6h3hsgTFJFEJTNU6DsXHloMMJOdKoZphSGUaq+pfck/T42
CVONkIrzhSfQab0iZ6xzD/4EvUovg0hIEfqsUYu4YDGhUwU/eGalje1HO/4cvqgJ
4dWP7hMSQLM0FS46XYzXjw2Whi/AW2truShAfvgQ4No/OdejRRBuczW7nnkRmB/O
JzSlzYp64WiDTA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:46 2026 by rpki-client