Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File:                     H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier:          MULCPVxilLvIFTg1oABYOAglcAyZ/z9vIPnv4FxQ+/M=
Subject key identifier:   02:E6:F8:00:91:DD:93:AD:E3:4F:63:76:09:CB:43:EA:80:68:C6:B8
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer:       /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial:       019EC1120E0A0B894C8BFC831ECA38A7F359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number:          18EE
Signing time:             Sat 13 Jun 2026 13:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:46 +0000
Files and hashes:         1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: lEm78VCTKMXeEZnQ/mJZ/8cyeDFZ6N88qtegbAw6M7Q=)
                          2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:0e:0a:0b:89:4c:8b:fc:83:1e:ca:38:a7:f3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
        Validity
            Not Before: Jun 13 13:00:46 2026 GMT
            Not After : Jun 14 13:00:46 2026 GMT
        Subject: CN=02e6f80091dd93ade34f637609cb43ea8068c6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:b0:af:7c:8f:4c:52:6c:8a:ac:7b:4b:d8:
                    61:57:90:73:fe:bb:fb:89:c3:d7:93:b3:ee:5e:77:
                    45:2e:31:aa:c2:31:e2:6a:9c:86:c9:a0:34:57:2b:
                    4a:3d:06:4e:61:8a:79:fe:1b:95:4f:0f:97:2e:56:
                    d6:d1:d8:b7:21:10:b2:83:b4:86:6f:3b:ed:3a:76:
                    49:54:4a:fd:d8:d3:c2:c9:86:a8:c7:5a:c1:79:5f:
                    f2:5a:17:b1:14:c0:ec:cc:67:21:ee:0b:a4:e8:0e:
                    e2:8f:b2:df:49:47:f0:cb:4b:f4:9d:0c:e8:08:70:
                    32:1d:1f:ea:60:00:d1:43:79:30:51:65:fe:84:1c:
                    c2:52:f5:79:29:f8:61:e8:9f:41:6d:26:aa:09:a8:
                    f8:fb:9d:85:5b:44:16:58:98:31:43:90:20:d2:ae:
                    d6:2f:1e:c4:61:e9:98:f4:ae:14:38:74:c2:11:d1:
                    cd:1a:f5:e8:4f:ae:f1:a6:ad:89:b7:33:6c:77:67:
                    37:9d:83:b8:d6:4e:99:3a:25:a6:ff:f9:24:07:a0:
                    c7:48:b3:d9:a1:69:16:ee:95:81:3d:05:bb:0f:b1:
                    af:45:bd:4c:52:5e:85:e2:d1:22:6b:89:96:13:76:
                    30:b5:02:4f:40:f6:76:15:e0:48:ca:88:db:44:d7:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:F8:00:91:DD:93:AD:E3:4F:63:76:09:CB:43:EA:80:68:C6:B8
            X509v3 Authority Key Identifier:
                keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:89:ef:4c:52:5d:9a:80:af:c7:a0:4d:96:43:46:b6:25:
         65:0e:5c:0a:33:81:28:b0:9a:4d:08:d4:24:eb:24:24:d2:a6:
         27:1d:1f:d2:c9:b6:d4:d5:55:30:3e:d1:bf:26:fd:f4:41:53:
         30:d3:38:ad:4c:bd:e3:c3:f2:58:3c:b9:04:44:78:c8:e0:a9:
         25:4e:31:db:f6:c7:ae:42:61:65:b1:c0:00:69:77:eb:44:cc:
         a4:9c:7c:ef:1e:4c:ff:be:36:ab:df:d4:28:a7:f8:e4:7b:d4:
         ff:76:d6:d8:a3:9b:71:0a:73:2e:81:73:65:69:85:59:dc:0f:
         d8:00:be:e6:1c:bf:e7:45:91:ce:70:a6:1a:65:a5:a7:d9:f6:
         38:f1:df:28:67:49:db:9d:5a:52:dc:fc:2a:33:1b:29:e8:30:
         8a:20:fc:e2:1d:77:28:8a:f3:26:a8:4b:95:77:8a:85:30:94:
         e1:1a:b2:00:49:a7:71:c9:df:fe:46:e4:b5:3d:13:83:e2:5a:
         6a:4c:0f:4c:26:13:5c:ca:94:94:76:1b:ff:1a:fe:c6:e4:33:
         bf:76:37:8f:bb:de:dc:5d:8a:87:6d:73:19:74:2e:e6:75:4d:
         a5:b9:89:1d:0f:5b:1f:77:df:a1:39:40:6a:be:5f:6c:9b:5f:
         c0:06:ce:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEg4KC4lMi/yDHso4p/NZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjYwNjEzMTMwMDQ2WhcNMjYwNjE0MTMwMDQ2WjAzMTEwLwYDVQQD
EygwMmU2ZjgwMDkxZGQ5M2FkZTM0ZjYzNzYwOWNiNDNlYTgwNjhjNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiSwr3yPTFJsiqx7S9hhV5Bz/rv7
icPXk7PuXndFLjGqwjHiapyGyaA0VytKPQZOYYp5/huVTw+XLlbW0di3IRCyg7SG
bzvtOnZJVEr92NPCyYaox1rBeV/yWhexFMDszGch7guk6A7ij7LfSUfwy0v0nQzo
CHAyHR/qYADRQ3kwUWX+hBzCUvV5Kfhh6J9BbSaqCaj4+52FW0QWWJgxQ5Ag0q7W
Lx7EYemY9K4UOHTCEdHNGvXoT67xpq2JtzNsd2c3nYO41k6ZOiWm//kkB6DHSLPZ
oWkW7pWBPQW7D7GvRb1MUl6F4tEia4mWE3YwtQJPQPZ2FeBIyojbRNe4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALm+ACR3ZOt409jdgnLQ+qAaMa4MB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS86J70xS
XZqAr8egTZZDRrYlZQ5cCjOBKLCaTQjUJOskJNKmJx0f0sm21NVVMD7Rvyb99EFT
MNM4rUy948PyWDy5BER4yOCpJU4x2/bHrkJhZbHAAGl360TMpJx87x5M/742q9/U
KKf45HvU/3bW2KObcQpzLoFzZWmFWdwP2AC+5hy/50WRznCmGmWlp9n2OPHfKGdJ
251aUtz8KjMbKegwiiD84h13KIrzJqhLlXeKhTCU4RqyAEmnccnf/kbktT0Tg+Ja
akwPTCYTXMqUlHYb/xr+xuQzv3Y3j7ve3F2Kh21zGXQu5nVNpbmJHQ9bH3ffoTlA
ar5fbJtfwAbOAw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:04 2026 by rpki-client