Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File:                     ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier:          iE37OaGP45TyiM5EXEFqHrFGIzTXxUNcICbHj5L+tfM=
Subject key identifier:   A4:01:00:9E:1C:E5:2A:F5:09:CD:B0:38:3E:30:F2:11:B1:00:62:D8
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer:       /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial:       019EC22442F0D5135EE71DEC869E94FDD7FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 18:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:16 +0000
Files and hashes:         1: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (hash: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4=)
                          2: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: ilt3nbtFxWZ8jMg4PA3PHvFa+6XXxHtzzdY4+t+Hbxg=)
                          3: Id0px0BC3BhlefdSh84CeXPn2o4.asa (hash: alqvEf1BdNUWbLL0uR6pLUDJnM4sEgOwYJvcZOQBITs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:42:f0:d5:13:5e:e7:1d:ec:86:9e:94:fd:d7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
        Validity
            Not Before: Jun 13 18:00:16 2026 GMT
            Not After : Jun 14 18:00:16 2026 GMT
        Subject: CN=a401009e1ce52af509cdb0383e30f211b10062d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:5c:f4:f7:bf:0f:ff:3b:91:9a:2b:38:38:
                    2a:4e:f5:11:c6:f6:28:10:40:7a:9d:fc:93:a5:ea:
                    85:94:22:25:9e:93:24:35:51:d7:f3:1a:49:70:7b:
                    38:7b:42:8d:90:f6:22:f1:42:62:f7:0f:46:1e:1a:
                    48:cc:92:d4:26:bc:ab:d5:94:d4:62:9a:0f:af:7f:
                    a2:2a:4a:bf:ec:f8:83:12:cb:27:85:52:83:80:bd:
                    10:d4:f2:38:05:ef:27:a6:06:d3:f2:d8:24:79:8b:
                    aa:f6:8d:19:a4:3f:28:27:32:38:5c:d9:4a:6f:bc:
                    e3:95:f9:be:a0:5b:9a:62:06:eb:c5:43:e6:aa:97:
                    8b:cb:7b:44:f3:66:88:18:92:d9:f5:92:1a:4c:cb:
                    52:ea:d5:3f:74:bd:c8:c8:e3:98:e9:e8:48:9a:09:
                    25:ce:65:0f:5d:32:48:0e:33:73:d0:49:09:97:e6:
                    71:3b:61:d7:28:f5:e6:3b:d8:5a:05:c4:23:49:f5:
                    bf:bc:f8:58:45:ef:6e:3f:d5:b2:48:b3:cd:99:b9:
                    1d:c1:f2:1d:9d:1d:5a:ff:22:a1:ba:1c:60:df:73:
                    ef:26:23:c0:07:3b:79:fb:c2:e2:cb:2d:ce:ea:c8:
                    3c:64:ee:cf:12:b8:b2:06:6d:71:c1:89:da:5c:ba:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:01:00:9E:1C:E5:2A:F5:09:CD:B0:38:3E:30:F2:11:B1:00:62:D8
            X509v3 Authority Key Identifier:
                keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:d1:f5:44:ea:ad:ff:0e:80:a3:78:aa:fd:dc:bb:fd:08:f1:
         99:bb:e6:41:08:b1:e5:17:12:96:95:bb:06:1c:8b:f0:fa:93:
         80:8c:08:1e:30:17:2b:18:c8:47:08:7e:ba:db:d0:0e:cb:d6:
         2a:01:1b:27:09:db:70:be:d3:77:bf:2f:78:7b:82:c6:8e:7e:
         30:09:2e:92:55:ff:46:5b:86:6b:a6:02:f5:43:1c:e9:b4:c8:
         ce:f8:61:a1:2d:8c:d0:04:50:27:9f:b0:81:36:4b:d5:61:1e:
         c5:a7:9b:a5:b6:b6:25:84:d5:5a:f7:0d:ae:de:22:2e:4f:bf:
         5b:d8:89:16:59:19:90:76:5a:a4:e4:db:a2:75:a3:34:09:62:
         a0:23:62:08:4f:e9:94:44:3a:fc:75:08:a3:c9:2e:6d:f6:9e:
         02:25:d1:34:83:ac:2b:e8:a6:79:7a:ff:6b:31:2a:ec:a0:43:
         a3:a8:94:af:25:91:86:e8:f2:a5:c0:a7:dd:89:12:a7:bb:5f:
         8a:6b:86:f2:c3:e1:0d:fd:bc:19:a9:a2:db:b2:0d:4d:e9:81:
         b5:64:ff:f9:98:e3:a1:20:1a:4b:d3:d9:7d:a7:22:ec:52:14:
         68:74:0a:5d:8f:b5:4c:8c:50:3f:64:13:34:f4:56:1b:fd:95:
         f5:92:42:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJELw1RNe5x3shp6U/df8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2VhZjI1MjFkY2JmNzY0MjQyNDMxYTc4MWY2OGQwZGQ1
NTE0MDIwHhcNMjYwNjEzMTgwMDE2WhcNMjYwNjE0MTgwMDE2WjAzMTEwLwYDVQQD
EyhhNDAxMDA5ZTFjZTUyYWY1MDljZGIwMzgzZTMwZjIxMWIxMDA2MmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSVc9Pe/D/87kZorODgqTvURxvYo
EEB6nfyTpeqFlCIlnpMkNVHX8xpJcHs4e0KNkPYi8UJi9w9GHhpIzJLUJryr1ZTU
YpoPr3+iKkq/7PiDEssnhVKDgL0Q1PI4Be8npgbT8tgkeYuq9o0ZpD8oJzI4XNlK
b7zjlfm+oFuaYgbrxUPmqpeLy3tE82aIGJLZ9ZIaTMtS6tU/dL3IyOOY6ehImgkl
zmUPXTJIDjNz0EkJl+ZxO2HXKPXmO9haBcQjSfW/vPhYRe9uP9WySLPNmbkdwfId
nR1a/yKhuhxg33PvJiPABzt5+8Liyy3O6sg8ZO7PEriyBm1xwYnaXLrIPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQBAJ4c5Sr1Cc2wOD4w8hGxAGLYMB8GA1UdIwQY
MBaAFBE+ryUh3L92QkJDGngfaNDdVRQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTct
MWE1ZDhmNTA1MThmLzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTctMWE1ZDhmNTA1MThm
LzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5NH1ROqt
/w6Ao3iq/dy7/QjxmbvmQQix5RcSlpW7BhyL8PqTgIwIHjAXKxjIRwh+utvQDsvW
KgEbJwnbcL7Td78veHuCxo5+MAkuklX/RluGa6YC9UMc6bTIzvhhoS2M0ARQJ5+w
gTZL1WEexaebpba2JYTVWvcNrt4iLk+/W9iJFlkZkHZapOTbonWjNAlioCNiCE/p
lEQ6/HUIo8kubfaeAiXRNIOsK+imeXr/azEq7KBDo6iUryWRhujypcCn3YkSp7tf
imuG8sPhDf28Gami27INTemBtWT/+ZjjoSAaS9PZfaci7FIUaHQKXY+1TIxQP2QT
NPRWG/2V9ZJCbQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:23:14 2026 by rpki-client