Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File:                     ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier:          imRVmwIaxNszskI8O9JGTsfZ8Vy/ttZhwZXFT/hhYZs=
Subject key identifier:   BD:16:1E:C6:A6:BF:54:8F:9C:B0:81:AE:D6:50:0B:ED:AE:A8:FE:4F
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer:       /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial:       019EBF5AD2CF3F4DA1C7524B89F688DD2F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number:          0A15
Signing time:             Sat 13 Jun 2026 05:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:00 +0000
Files and hashes:         1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
                          2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: q9RznM6E+QFamUVwtOaLTqMN8d4KbjB3LbXombmCS9A=)
                          3: qk4P-ShbIUszUZ3eawMDtsRg7tc.roa (hash: +N2IDtopIma7I39gXcMi4uOgHoRzGLXkf14n2SLetxs=)
                          4: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:d2:cf:3f:4d:a1:c7:52:4b:89:f6:88:dd:2f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
        Validity
            Not Before: Jun 13 05:01:00 2026 GMT
            Not After : Jun 14 05:01:00 2026 GMT
        Subject: CN=bd161ec6a6bf548f9cb081aed6500bedaea8fe4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:46:b0:22:fa:ec:4d:0f:8e:56:cc:18:73:
                    8f:f2:3a:02:af:43:f9:19:62:a4:8c:c6:20:56:39:
                    d8:80:b1:bc:b5:3a:7e:cf:c6:7d:50:21:98:96:7d:
                    5d:25:dd:cf:af:f5:cb:97:f8:d8:9b:9d:83:4f:e0:
                    5e:7d:aa:ab:55:77:d2:79:9c:e1:64:ab:be:12:c3:
                    2f:38:70:eb:ea:e3:9e:a0:9d:cc:9e:0c:87:96:37:
                    f4:67:cb:45:bd:a7:91:a8:15:83:5f:4d:91:bb:9a:
                    bc:85:b4:e0:bb:ff:4a:2f:06:05:bd:7c:8f:f2:9d:
                    e3:da:14:4a:bf:8f:83:18:82:87:41:78:ad:cd:75:
                    a8:d2:ec:f8:52:99:69:88:19:e8:89:f6:fa:d5:e8:
                    70:e2:98:2b:00:53:39:2a:38:2f:a0:83:31:de:bb:
                    d5:68:4a:54:2b:55:9d:cf:fe:53:3c:f1:f3:6a:13:
                    34:37:24:03:82:1f:ae:9c:ed:f9:a8:ce:71:1f:a6:
                    c5:91:d8:39:99:78:9b:30:ee:c1:45:a5:44:da:32:
                    0e:50:7a:39:83:89:67:01:51:8a:3a:3f:45:61:32:
                    93:17:64:68:4c:f8:b7:63:e3:e1:0d:49:0d:b8:96:
                    5c:d4:52:88:70:56:95:30:ac:d3:9d:00:27:8d:4d:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:16:1E:C6:A6:BF:54:8F:9C:B0:81:AE:D6:50:0B:ED:AE:A8:FE:4F
            X509v3 Authority Key Identifier:
                keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:9f:50:a1:93:79:69:8d:a6:91:07:54:e3:87:a2:19:84:
         88:32:cb:76:c7:3b:99:d5:7e:40:b3:38:20:7b:7c:40:35:cc:
         86:32:fc:6f:80:c5:87:c7:84:00:9a:7d:e9:36:7c:f7:00:74:
         f5:ce:82:68:e5:a3:5b:1d:71:14:a2:58:cd:8c:17:b0:2a:25:
         a9:b7:c9:4f:f8:48:3a:13:94:5f:66:9e:a8:96:4a:a3:76:29:
         9a:f5:72:73:96:d4:e7:0e:a5:bf:fa:50:48:2e:0d:4c:c7:e0:
         dc:16:60:8c:cb:1b:4b:9f:46:5d:85:47:be:2a:b3:ec:38:01:
         54:07:97:eb:fe:db:d5:24:01:f0:40:d0:82:cd:6b:5f:8f:00:
         67:aa:27:bb:b9:c6:d9:90:1b:a3:df:2a:be:f2:f9:b6:8d:04:
         9b:f5:5f:91:3b:75:cb:25:89:98:50:98:dc:65:ce:ba:72:aa:
         7a:a7:37:bf:44:eb:96:b6:2f:23:72:93:d0:29:4a:82:5a:d6:
         64:68:06:56:63:45:02:ba:9c:0c:09:80:42:7d:24:cd:37:ec:
         98:98:76:98:ac:d2:4e:dd:cb:1b:e7:99:1b:29:0b:40:d4:71:
         db:a1:e1:43:84:9a:83:9d:2c:84:ee:5e:d3:3b:15:8b:a2:ec:
         07:94:70:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WtLPP02hx1JLifaI3S8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy
OTY1Y2EwHhcNMjYwNjEzMDUwMTAwWhcNMjYwNjE0MDUwMTAwWjAzMTEwLwYDVQQD
EyhiZDE2MWVjNmE2YmY1NDhmOWNiMDgxYWVkNjUwMGJlZGFlYThmZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg9GsCL67E0PjlbMGHOP8joCr0P5
GWKkjMYgVjnYgLG8tTp+z8Z9UCGYln1dJd3Pr/XLl/jYm52DT+BefaqrVXfSeZzh
ZKu+EsMvOHDr6uOeoJ3MngyHljf0Z8tFvaeRqBWDX02Ru5q8hbTgu/9KLwYFvXyP
8p3j2hRKv4+DGIKHQXitzXWo0uz4UplpiBnoifb61ehw4pgrAFM5KjgvoIMx3rvV
aEpUK1Wdz/5TPPHzahM0NyQDgh+unO35qM5xH6bFkdg5mXibMO7BRaVE2jIOUHo5
g4lnAVGKOj9FYTKTF2RoTPi3Y+PhDUkNuJZc1FKIcFaVMKzTnQAnjU3B8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0WHsamv1SPnLCBrtZQC+2uqP5PMB8GA1UdIwQY
MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt
M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3
LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX26fUKGT
eWmNppEHVOOHohmEiDLLdsc7mdV+QLM4IHt8QDXMhjL8b4DFh8eEAJp96TZ89wB0
9c6CaOWjWx1xFKJYzYwXsColqbfJT/hIOhOUX2aeqJZKo3YpmvVyc5bU5w6lv/pQ
SC4NTMfg3BZgjMsbS59GXYVHviqz7DgBVAeX6/7b1SQB8EDQgs1rX48AZ6onu7nG
2ZAbo98qvvL5to0Em/VfkTt1yyWJmFCY3GXOunKqeqc3v0TrlrYvI3KT0ClKglrW
ZGgGVmNFArqcDAmAQn0kzTfsmJh2mKzSTt3LG+eZGykLQNRx26HhQ4Sag50shO5e
0zsVi6LsB5RwlA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:47 2026 by rpki-client