Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File:                     6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier:          k6AAhs1DSnnlPbCgNNtXSVXpBToaNts51Z2dFB1vmNM=
Subject key identifier:   CC:C7:8C:63:9A:F7:3A:D0:F4:63:F3:49:1D:FE:19:BE:49:18:DC:AD
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer:       /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial:       019EBF233AE94805F125A4D502A9E608A5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 04:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:17 +0000
Files and hashes:         1: 4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa (hash: D0yakznjZ4GLkw8PJfZndlmaCDEdQxVUthJnURjvcH4=)
                          2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: /fN/gylFvi7Ckc4V+lN2qDSqZCjTTIOs8PYmXkogZiI=)
                          3: MUlaySuRJAJWjFOIuDQTeuxgbkI.roa (hash: k8la9Hpl6/O/fQnwY4pQN76Y+PJ8sXIpVpbtRiPNQgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:3a:e9:48:05:f1:25:a4:d5:02:a9:e6:08:a5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
        Validity
            Not Before: Jun 13 04:00:17 2026 GMT
            Not After : Jun 14 04:00:17 2026 GMT
        Subject: CN=ccc78c639af73ad0f463f3491dfe19be4918dcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:94:d4:ce:b0:ae:f4:ee:11:3a:55:aa:58:6c:
                    d1:87:b0:05:90:e4:86:78:7e:c7:b2:f6:23:db:8c:
                    6f:aa:4f:13:c2:50:ba:7b:19:d6:d9:e0:a9:da:eb:
                    25:db:f2:f3:ba:ce:1e:0c:19:15:e0:19:3f:d4:bf:
                    7e:26:72:c4:81:70:88:cc:f7:92:b1:66:23:21:0d:
                    6a:21:7a:29:00:12:c0:51:c1:be:8f:b6:8a:34:82:
                    1d:a8:e7:67:0a:b7:b1:98:21:8e:09:83:3e:39:31:
                    13:d1:1d:4b:6d:ef:2a:b1:56:3e:62:e2:7b:58:f1:
                    a8:7e:ca:b8:c4:c6:3a:20:fd:19:dc:2c:bf:71:66:
                    58:6d:e8:c4:a9:65:26:c3:5f:e8:ec:5f:07:82:ad:
                    bd:28:6c:86:dd:d3:0f:99:00:d8:ab:41:5e:2e:3f:
                    a7:9b:34:19:a8:00:e7:59:4c:2f:19:fc:90:5e:08:
                    64:6f:cc:b6:c1:2a:12:ec:b9:f7:84:79:6c:bc:e1:
                    b3:cd:69:a9:55:3d:79:dd:87:8d:b8:ea:f4:ff:22:
                    3a:7e:b4:7d:5f:25:fb:6d:1c:95:e5:2b:28:1b:ab:
                    d1:3b:1c:3a:a8:c1:3c:81:8b:67:8f:3b:d7:be:2c:
                    5f:8f:5c:79:71:5b:f9:20:df:b8:49:3b:1b:1e:83:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:8C:63:9A:F7:3A:D0:F4:63:F3:49:1D:FE:19:BE:49:18:DC:AD
            X509v3 Authority Key Identifier:
                keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:03:d7:da:10:67:a4:0f:17:90:08:75:4c:50:03:e4:50:
         b9:40:8a:b7:7a:20:d4:b0:6e:ec:64:47:fa:18:72:53:c7:d3:
         5f:3b:96:7d:38:07:d7:43:35:b9:a6:72:9c:ee:a0:6b:5b:68:
         58:a1:fa:75:94:a1:d3:05:c3:af:13:25:3f:4d:1c:c4:04:5a:
         42:42:6b:42:b7:de:a8:f3:75:11:3a:c1:3a:3b:a8:ea:c8:49:
         92:04:5c:ea:2c:4f:c3:d1:f1:f7:ec:0f:1d:e6:6b:de:dc:7e:
         a0:42:96:e9:a8:9f:06:28:2e:76:36:9a:37:2f:1d:6b:9c:23:
         be:87:d1:9e:56:9d:9b:0b:af:98:28:78:c5:80:d8:3d:84:a3:
         a5:5e:64:78:3b:57:32:99:23:f1:17:95:fc:37:51:04:f2:0c:
         12:6e:1b:b9:9d:ca:d9:21:46:99:95:93:1c:b3:34:8c:a8:33:
         db:a6:64:09:a5:da:a6:f3:af:ac:8f:f9:1a:a2:dd:ed:b7:a3:
         a4:b8:a3:c1:dc:e6:df:ff:c6:26:e6:d1:f8:72:05:57:c0:31:
         72:01:cc:da:2d:41:e4:7d:11:e6:15:f9:c6:3e:d7:b5:c7:e0:
         8f:55:bc:6f:c0:08:d4:bb:25:08:25:94:1c:db:9e:52:79:8b:
         64:33:6e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/IzrpSAXxJaTVAqnmCKWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx
NDQ5YmMwHhcNMjYwNjEzMDQwMDE3WhcNMjYwNjE0MDQwMDE3WjAzMTEwLwYDVQQD
EyhjY2M3OGM2MzlhZjczYWQwZjQ2M2YzNDkxZGZlMTliZTQ5MThkY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JTUzrCu9O4ROlWqWGzRh7AFkOSG
eH7HsvYj24xvqk8TwlC6exnW2eCp2usl2/Lzus4eDBkV4Bk/1L9+JnLEgXCIzPeS
sWYjIQ1qIXopABLAUcG+j7aKNIIdqOdnCrexmCGOCYM+OTET0R1Lbe8qsVY+YuJ7
WPGofsq4xMY6IP0Z3Cy/cWZYbejEqWUmw1/o7F8Hgq29KGyG3dMPmQDYq0FeLj+n
mzQZqADnWUwvGfyQXghkb8y2wSoS7Ln3hHlsvOGzzWmpVT153YeNuOr0/yI6frR9
XyX7bRyV5SsoG6vROxw6qME8gYtnjzvXvixfj1x5cVv5IN+4STsbHoMOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzHjGOa9zrQ9GPzSR3+Gb5JGNytMB8GA1UdIwQY
MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct
NjgxMmJhYmM1YThiLzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi
LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjkD19oQ
Z6QPF5AIdUxQA+RQuUCKt3og1LBu7GRH+hhyU8fTXzuWfTgH10M1uaZynO6ga1to
WKH6dZSh0wXDrxMlP00cxARaQkJrQrfeqPN1ETrBOjuo6shJkgRc6ixPw9Hx9+wP
HeZr3tx+oEKW6aifBigudjaaNy8da5wjvofRnladmwuvmCh4xYDYPYSjpV5keDtX
Mpkj8ReV/DdRBPIMEm4buZ3K2SFGmZWTHLM0jKgz26ZkCaXapvOvrI/5GqLd7bej
pLijwdzm3//GJubR+HIFV8AxcgHM2i1B5H0R5hX5xj7Xtcfgj1W8b8AI1LslCCWU
HNueUnmLZDNuGw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:44 2026 by rpki-client