Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File:                     c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier:          eab1wf4DrXsJrZlJeDULEooaE/2uq8nBocQoNufElsg=
Subject key identifier:   AB:81:73:FF:07:B9:9B:70:70:D4:D8:36:B2:53:1D:BE:AF:B1:CB:B2
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer:       /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial:       019EC17F8546CAB255B6CB61BB43FC1055E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number:          1982
Signing time:             Sat 13 Jun 2026 15:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:20 +0000
Files and hashes:         1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=)
                          2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
                          3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
                          4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=)
                          5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
                          6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
                          7: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: ASmZKe+Yed/MP31Z1qXAIcfVBHbHZSuEnMSAZWWXhGs=)
                          8: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
                          9: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
                          10: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=)
                          11: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:85:46:ca:b2:55:b6:cb:61:bb:43:fc:10:55:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
        Validity
            Not Before: Jun 13 15:00:20 2026 GMT
            Not After : Jun 14 15:00:20 2026 GMT
        Subject: CN=ab8173ff07b99b7070d4d836b2531dbeafb1cbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:68:1a:e1:28:10:71:b3:b9:71:4b:4b:44:
                    3d:a6:d7:36:e5:b7:bb:e0:5a:61:e1:f1:a6:42:27:
                    13:2a:00:e9:f3:1b:9c:c5:cd:d6:70:7c:28:b8:98:
                    62:cd:8f:1c:be:4f:d8:9e:09:a9:47:27:e8:b0:a2:
                    3a:db:44:ca:16:cb:76:96:59:74:7b:ca:ac:31:e4:
                    d8:0b:df:29:04:d4:a0:2b:1d:a2:0b:ae:62:54:60:
                    e4:ed:ee:e2:33:9d:1b:d9:62:9a:0c:d8:2e:ac:2c:
                    13:90:a7:8b:6e:1a:ae:00:b3:59:05:3e:92:fd:3f:
                    29:7b:f6:f8:05:ea:2c:44:39:a0:9a:46:5a:5b:9d:
                    aa:e5:88:c7:e7:80:af:87:85:38:3e:fe:98:f5:26:
                    c7:0c:7b:c5:db:09:8e:11:05:4b:4e:fb:dc:31:df:
                    43:55:f6:63:6b:a5:8c:b3:db:3c:07:45:fb:4a:8e:
                    bf:0e:89:e2:aa:53:7d:1f:30:7c:5d:28:0e:fe:e9:
                    49:19:a9:6e:db:bf:ee:eb:ae:17:ce:83:34:ce:95:
                    40:61:29:7f:93:37:45:0c:ea:af:77:83:2b:90:b2:
                    ee:be:d2:9f:a3:25:8f:38:b2:60:83:4f:d5:b4:04:
                    5b:19:0a:27:03:c2:76:8f:49:34:a0:17:cc:17:b1:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:81:73:FF:07:B9:9B:70:70:D4:D8:36:B2:53:1D:BE:AF:B1:CB:B2
            X509v3 Authority Key Identifier:
                keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:20:b8:ae:07:a9:c5:9c:d1:d0:02:e8:b4:21:d2:06:cc:0b:
         11:65:f7:64:0d:34:0b:68:b9:65:78:7c:b5:25:54:d9:d7:18:
         dd:63:eb:f2:3b:cc:13:2e:3e:4b:65:af:2a:df:2d:6a:eb:b7:
         fe:20:f9:8b:6f:1a:39:d3:78:af:c1:b3:e2:e1:43:a0:e5:be:
         39:2b:d7:9e:fa:1c:51:dc:bf:1e:34:ff:86:4b:09:44:b0:0a:
         d5:05:08:b0:61:08:7d:b9:9c:46:49:f7:ec:0c:95:6d:f4:7f:
         08:8c:ea:e9:c2:72:d6:24:9b:8e:f1:b3:71:60:d8:85:24:93:
         c8:44:0e:27:00:6d:7b:68:dc:6c:2b:d6:b3:80:a1:09:0c:89:
         f7:f6:a4:d6:6d:40:d3:c6:86:a2:9b:41:5f:39:ea:97:5c:f9:
         31:ff:38:17:b3:e7:62:43:bb:f6:1c:ab:b9:6d:1b:0e:42:bd:
         9b:5f:58:f2:46:9a:11:a3:e7:83:12:8f:29:cc:a2:86:20:88:
         12:35:6d:ba:27:49:e4:ad:42:d1:43:b8:09:29:0a:4e:7d:79:
         84:c7:3d:d4:37:74:24:a7:79:01:95:bf:7c:4e:f1:83:8e:e9:
         f4:ae:c5:ca:b0:e2:a6:1e:76:a1:4d:f0:d2:5e:f2:83:1d:c0:
         d6:27:fe:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf4VGyrJVtsthu0P8EFXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky
ZDMwYTkwHhcNMjYwNjEzMTUwMDIwWhcNMjYwNjE0MTUwMDIwWjAzMTEwLwYDVQQD
EyhhYjgxNzNmZjA3Yjk5YjcwNzBkNGQ4MzZiMjUzMWRiZWFmYjFjYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjloGuEoEHGzuXFLS0Q9ptc25be7
4Fph4fGmQicTKgDp8xucxc3WcHwouJhizY8cvk/YngmpRyfosKI620TKFst2lll0
e8qsMeTYC98pBNSgKx2iC65iVGDk7e7iM50b2WKaDNgurCwTkKeLbhquALNZBT6S
/T8pe/b4BeosRDmgmkZaW52q5YjH54Cvh4U4Pv6Y9SbHDHvF2wmOEQVLTvvcMd9D
VfZja6WMs9s8B0X7So6/DoniqlN9HzB8XSgO/ulJGalu27/u664XzoM0zpVAYSl/
kzdFDOqvd4MrkLLuvtKfoyWPOLJgg0/VtARbGQonA8J2j0k0oBfMF7FYhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuBc/8HuZtwcNTYNrJTHb6vscuyMB8GA1UdIwQY
MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt
Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3
LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSC4rgep
xZzR0ALotCHSBswLEWX3ZA00C2i5ZXh8tSVU2dcY3WPr8jvMEy4+S2WvKt8tauu3
/iD5i28aOdN4r8Gz4uFDoOW+OSvXnvocUdy/HjT/hksJRLAK1QUIsGEIfbmcRkn3
7AyVbfR/CIzq6cJy1iSbjvGzcWDYhSSTyEQOJwBte2jcbCvWs4ChCQyJ9/ak1m1A
08aGoptBXznql1z5Mf84F7PnYkO79hyruW0bDkK9m19Y8kaaEaPngxKPKcyihiCI
EjVtuidJ5K1C0UO4CSkKTn15hMc91Dd0JKd5AZW/fE7xg47p9K7FyrDiph52oU3w
0l7ygx3A1if+lQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:56 2026 by rpki-client