Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File:                     1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier:          8JBJA35Mb+8ixLEMXVzyecWyu0FLkuaDbx5UELA0l9c=
Subject key identifier:   2A:85:3B:C7:5A:F6:F8:4B:26:BB:3F:47:5B:61:E7:CA:29:9C:53:3C
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer:       /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial:       019EBEEC8749CD806CD106EACE630A8AE774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number:          140B
Signing time:             Sat 13 Jun 2026 03:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:32 +0000
Files and hashes:         1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: 8qRZnqL6XdKx8iyZM0PfWrEXAll1waJLDnh1mJabXo4=)
                          2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:87:49:cd:80:6c:d1:06:ea:ce:63:0a:8a:e7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
        Validity
            Not Before: Jun 13 03:00:32 2026 GMT
            Not After : Jun 14 03:00:32 2026 GMT
        Subject: CN=2a853bc75af6f84b26bb3f475b61e7ca299c533c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:a2:97:aa:7d:e4:bd:a7:bb:01:73:fb:b6:
                    06:43:e8:9a:29:4b:9c:12:aa:c7:54:33:98:eb:91:
                    c9:de:12:6d:f6:bb:31:21:42:ed:b5:29:e7:11:0c:
                    5a:7a:5b:bb:03:51:5a:84:32:9b:c4:04:6a:47:a3:
                    43:af:c8:2c:37:5e:ed:50:81:1c:03:e4:71:66:b1:
                    7b:2c:57:b7:05:ec:b8:42:1e:61:28:e9:20:6a:5a:
                    f2:5c:dc:5f:9b:70:bd:5d:a6:6f:68:97:f8:7a:da:
                    a8:cf:e3:4a:6e:42:5d:a8:20:9a:35:2d:f6:2c:17:
                    f5:87:7d:22:ac:4c:30:03:c2:17:ac:e7:07:0f:f9:
                    26:3b:6c:d2:d4:e8:8c:62:70:3b:c6:21:8d:11:ff:
                    3a:8f:fc:b4:95:a7:db:73:04:55:5b:5b:da:7d:75:
                    bd:09:da:ef:4b:cf:88:6b:a0:64:27:da:d2:36:6c:
                    ae:89:05:68:98:3b:89:f3:46:c5:4d:62:00:91:05:
                    74:50:05:30:17:d4:a2:f6:ff:a5:69:5d:0a:9a:b3:
                    2a:62:c9:88:38:e2:2f:e1:4c:70:1d:f8:a7:be:8b:
                    9d:14:86:6a:28:c2:ee:87:9b:63:79:10:b5:d3:1d:
                    1e:c8:80:47:83:22:ea:02:8a:bb:38:da:d2:cc:3b:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:3B:C7:5A:F6:F8:4B:26:BB:3F:47:5B:61:E7:CA:29:9C:53:3C
            X509v3 Authority Key Identifier:
                keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:ae:d2:1a:e8:ec:ec:57:23:64:51:8d:64:0e:77:e9:de:
         8d:ec:ed:20:02:37:c3:a1:21:74:29:49:ca:c7:93:79:3b:5a:
         66:55:79:48:c5:07:fc:4f:ea:7a:5b:70:f4:a3:f6:a8:22:7d:
         e0:62:ff:85:68:92:2d:45:8a:e1:32:3f:48:56:d3:1f:74:d3:
         6a:99:04:64:58:8e:0a:d9:aa:d2:f0:99:f9:98:f4:6b:42:b3:
         76:8f:5d:a6:8f:c7:1e:be:f0:43:e1:11:05:03:8b:31:51:6e:
         4a:95:4e:3d:c5:3d:a1:f2:5e:b7:9b:0b:83:be:9e:3b:49:6e:
         b8:9e:fb:38:05:4f:dd:f4:a0:36:74:70:66:da:32:df:b5:6e:
         f0:f5:59:3a:2f:bb:fe:d0:75:58:ba:74:b4:ec:cf:c1:75:99:
         c0:9d:9b:16:8e:fb:d4:1b:31:4a:c5:c6:56:82:bf:44:6c:30:
         a4:13:9e:a4:55:9b:b4:0f:6a:bf:3e:f6:cb:e0:a8:04:47:c8:
         cf:e3:4f:98:ce:67:15:b5:c3:66:db:f6:14:91:bf:cb:16:fc:
         91:ae:9e:48:e7:a6:ed:a4:76:56:2a:06:4f:27:4f:a6:18:d0:
         11:fd:08:0d:bc:8c:07:70:9c:69:1a:93:5f:0c:4f:6d:28:22:
         fe:8c:84:34
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+7IdJzYBs0QbqzmMKiud0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MWE4MjIzMDAyZTMxMjRlNWJiMDZlODJkNGY2MGEzNzli
OTNkY2QwHhcNMjYwNjEzMDMwMDMyWhcNMjYwNjE0MDMwMDMyWjAzMTEwLwYDVQQD
EygyYTg1M2JjNzVhZjZmODRiMjZiYjNmNDc1YjYxZTdjYTI5OWM1MzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDWil6p95L2nuwFz+7YGQ+iaKUuc
EqrHVDOY65HJ3hJt9rsxIULttSnnEQxaelu7A1FahDKbxARqR6NDr8gsN17tUIEc
A+RxZrF7LFe3Bey4Qh5hKOkgalryXNxfm3C9XaZvaJf4etqoz+NKbkJdqCCaNS32
LBf1h30irEwwA8IXrOcHD/kmO2zS1OiMYnA7xiGNEf86j/y0lafbcwRVW1vafXW9
CdrvS8+Ia6BkJ9rSNmyuiQVomDuJ80bFTWIAkQV0UAUwF9Si9v+laV0KmrMqYsmI
OOIv4UxwHfinvoudFIZqKMLuh5tjeRC10x0eyIBHgyLqAoq7ONrSzDvAbQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCqFO8da9vhLJrs/R1th58opnFM8MB8GA1UdIwQY
MBaAFPkagiMALjEk5bsG6C1PYKN5uT3NMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ScUNJd0F1TVNUbHV3Ym9MVTlnbzNtNVBjMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTQzNzMyLTk2MjEtNGE0Mi04N2Rh
LWIyZGUzZWJmM2U3ZS8xLzEtUnFDSXdBdU1TVGx1d2JvTFU5Z28zbTVQYzAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE4Lzk0MzczMi05NjIxLTRhNDItODdkYS1iMmRlM2ViZjNl
N2UvMS8xLVJxQ0l3QXVNU1RsdXdib0xVOWdvM201UGMwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2yu
0hro7OxXI2RRjWQOd+nejeztIAI3w6EhdClJyseTeTtaZlV5SMUH/E/qeltw9KP2
qCJ94GL/hWiSLUWK4TI/SFbTH3TTapkEZFiOCtmq0vCZ+Zj0a0Kzdo9dpo/HHr7w
Q+ERBQOLMVFuSpVOPcU9ofJet5sLg76eO0luuJ77OAVP3fSgNnRwZtoy37Vu8PVZ
Oi+7/tB1WLp0tOzPwXWZwJ2bFo771BsxSsXGVoK/RGwwpBOepFWbtA9qvz72y+Co
BEfIz+NPmM5nFbXDZtv2FJG/yxb8ka6eSOem7aR2VioGTydPphjQEf0IDbyMB3Cc
aRqTXwxPbSgi/oyENA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:15 2026 by rpki-client