Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          i09O17b3r0IV8ejl9oG8zDi4bIS5cON2lXbaFlyzPNA=
Subject key identifier:   BB:5B:EE:35:CA:C6:24:3D:91:30:6F:17:1C:CF:7D:AD:DD:93:4A:E3
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       019EBF5B0EF294AC9F72FB61FA94287807B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          135D
Signing time:             Sat 13 Jun 2026 05:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:16 +0000
Files and hashes:         1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
                          2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
                          3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: peqcfsds3b10WfzkZF0PqZr+tyzFTasI68a2JIWfwnM=)
                          4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
                          5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:0e:f2:94:ac:9f:72:fb:61:fa:94:28:78:07:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Jun 13 05:01:16 2026 GMT
            Not After : Jun 14 05:01:16 2026 GMT
        Subject: CN=bb5bee35cac6243d91306f171ccf7daddd934ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:6c:fb:c2:50:8e:af:2e:5a:5d:da:2c:cb:
                    c7:67:5a:24:46:62:f7:d9:b8:ce:70:46:93:42:33:
                    a7:bf:08:67:9c:54:b5:9d:5f:be:c6:de:6a:03:27:
                    c4:37:05:4b:fe:d8:e2:63:06:cf:f0:4e:3c:e4:dd:
                    18:09:b1:9d:62:49:16:d1:73:5a:82:2a:b8:68:57:
                    64:ec:34:57:80:cd:7d:c5:3f:21:5a:6a:1f:3a:75:
                    49:bd:6b:e8:88:b3:94:49:2f:3e:9e:81:d2:45:0a:
                    40:ed:27:d4:c2:1b:dc:fd:7d:0f:63:48:bf:45:a9:
                    e8:4d:32:d0:fb:05:6c:5f:a9:de:b5:4e:f0:06:c2:
                    5c:f4:4b:80:8e:df:5a:b7:5e:ec:4e:4d:81:81:aa:
                    fe:66:24:32:ce:50:37:1a:57:f5:73:da:7c:e8:99:
                    9c:cc:24:2a:b0:8a:cc:b2:7a:e6:f0:97:f6:34:34:
                    91:c4:90:c4:cf:fa:50:7a:41:f8:1b:50:cd:9e:0f:
                    40:42:e9:e1:30:1d:bf:c3:b7:d0:9c:bb:02:2f:3b:
                    0e:61:f3:04:31:47:eb:f9:64:6b:22:a0:c7:59:b1:
                    43:00:9d:67:89:2f:d6:6a:e3:a4:f8:8c:94:69:fa:
                    46:55:da:c0:8f:28:3a:b6:7a:af:2e:ff:f0:22:c5:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5B:EE:35:CA:C6:24:3D:91:30:6F:17:1C:CF:7D:AD:DD:93:4A:E3
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:5d:a2:f6:23:13:89:13:73:e2:0b:ad:54:6e:80:da:35:
         f5:5c:35:5e:c2:0b:6e:d9:76:85:ae:69:14:9d:77:d5:ef:a3:
         fd:60:50:54:2b:10:27:29:0a:57:66:49:ed:12:aa:ad:89:fb:
         0e:78:aa:fb:36:cf:eb:69:21:3c:da:95:75:d6:8a:de:e8:44:
         2f:ae:f9:72:34:dd:71:04:4c:40:f6:db:1b:26:88:b0:de:b2:
         32:8e:64:c1:f5:34:94:59:5c:72:90:35:61:eb:f4:fc:0a:37:
         6b:df:e1:b4:2f:e6:8b:9b:9f:ae:8e:68:7f:95:62:c0:b9:b0:
         a9:aa:0c:90:aa:06:be:12:8f:7e:12:b5:bf:a0:f8:d1:2c:e1:
         35:b0:dc:a6:08:de:07:60:8a:83:46:3f:0f:3e:46:66:6f:21:
         cf:30:af:ae:11:03:45:eb:1f:8b:b6:20:40:f8:73:e7:57:a0:
         01:5c:11:ea:51:3f:9f:0c:a0:4f:d2:5c:52:98:76:50:40:01:
         2a:c8:91:3c:87:32:c8:9f:39:b0:2d:26:98:5f:2c:b1:88:e0:
         06:51:f7:6a:74:2d:60:8b:39:1e:a3:49:af:f9:07:49:d9:ce:
         e2:d5:11:d8:05:54:3f:4e:12:ef:2d:0f:06:e0:1a:7e:2c:4d:
         31:01:06:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Ww7ylKyfcvth+pQoeAe1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3
ODdmYmMwHhcNMjYwNjEzMDUwMTE2WhcNMjYwNjE0MDUwMTE2WjAzMTEwLwYDVQQD
EyhiYjViZWUzNWNhYzYyNDNkOTEzMDZmMTcxY2NmN2RhZGRkOTM0YWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOps+8JQjq8uWl3aLMvHZ1okRmL3
2bjOcEaTQjOnvwhnnFS1nV++xt5qAyfENwVL/tjiYwbP8E485N0YCbGdYkkW0XNa
giq4aFdk7DRXgM19xT8hWmofOnVJvWvoiLOUSS8+noHSRQpA7SfUwhvc/X0PY0i/
RanoTTLQ+wVsX6netU7wBsJc9EuAjt9at17sTk2Bgar+ZiQyzlA3Glf1c9p86Jmc
zCQqsIrMsnrm8Jf2NDSRxJDEz/pQekH4G1DNng9AQunhMB2/w7fQnLsCLzsOYfME
MUfr+WRrIqDHWbFDAJ1niS/WauOk+IyUafpGVdrAjyg6tnqvLv/wIsUxMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtb7jXKxiQ9kTBvFxzPfa3dk0rjMB8GA1UdIwQY
MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt
OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5
LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfJdovYj
E4kTc+ILrVRugNo19Vw1XsILbtl2ha5pFJ131e+j/WBQVCsQJykKV2ZJ7RKqrYn7
Dniq+zbP62khPNqVddaK3uhEL675cjTdcQRMQPbbGyaIsN6yMo5kwfU0lFlccpA1
Yev0/Ao3a9/htC/mi5ufro5of5ViwLmwqaoMkKoGvhKPfhK1v6D40SzhNbDcpgje
B2CKg0Y/Dz5GZm8hzzCvrhEDResfi7YgQPhz51egAVwR6lE/nwygT9JcUph2UEAB
KsiRPIcyyJ85sC0mmF8ssYjgBlH3anQtYIs5HqNJr/kHSdnO4tUR2AVUP04S7y0P
BuAafixNMQEGwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:02 2026 by rpki-client