Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File:                     up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier:          unl1LgahYLdr1NJ51kCNuuDy6KvOQTVPK7fuOkUzfzg=
Subject key identifier:   8E:4B:CA:CC:07:39:83:D4:B1:97:3E:53:E3:FA:5A:61:22:DD:EC:DC
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       019EC0DB849A097770990053DF9579018C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number:          196C
Signing time:             Sat 13 Jun 2026 12:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:12 +0000
Files and hashes:         1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
                          2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
                          3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
                          4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
                          5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
                          6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
                          7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
                          8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
                          9: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
                          10: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
                          11: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
                          12: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
                          13: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
                          14: dh0HxZTX0gUx4atQo9tXgidUMLc.roa (hash: C/NbxOhBDbuOgCOrG7xkr9yc1xlWN7ZS9mwZEOk3C7w=)
                          15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
                          16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
                          17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
                          18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
                          19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
                          20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
                          21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
                          22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
                          23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
                          24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
                          25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
                          26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: wRn5qH35GE2j3sAnKjIjRyL1IfZJwyTcrjVTLOOCDwY=)
                          27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
                          28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:84:9a:09:77:70:99:00:53:df:95:79:01:8c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Jun 13 12:01:12 2026 GMT
            Not After : Jun 14 12:01:12 2026 GMT
        Subject: CN=8e4bcacc073983d4b1973e53e3fa5a6122ddecdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:2f:9f:39:ac:e4:43:84:44:b8:f5:50:67:
                    e0:6a:89:bf:b9:42:43:ba:d0:da:d8:b0:d3:ac:dc:
                    89:60:73:ae:35:b6:74:bc:ab:85:fc:41:1a:3e:38:
                    87:4c:5a:6f:b6:67:b6:df:0d:d0:cd:db:96:df:42:
                    1b:19:b0:94:05:d1:82:f2:b1:80:f6:fc:c9:b6:9c:
                    46:36:44:95:aa:64:11:84:5e:8c:e7:c3:06:5d:bf:
                    d5:fb:d5:e7:0e:8e:e4:53:67:b5:f4:1d:bb:28:8d:
                    c2:95:e8:62:5f:8a:8a:2a:00:66:48:44:a7:6d:06:
                    a7:f8:22:84:b4:30:37:ad:db:b3:4a:35:46:88:2c:
                    2c:4b:e1:d1:7e:ef:48:1e:9d:bc:4b:49:da:71:97:
                    91:07:44:84:8b:62:72:18:a0:61:d1:c0:7c:c0:99:
                    f5:8d:3d:98:fd:73:95:68:90:d9:17:ad:4b:76:90:
                    c6:ae:e3:c0:a0:9b:70:6c:a3:ce:58:76:76:ce:57:
                    27:9a:64:e5:70:19:42:fc:d4:7a:74:f9:43:b8:0b:
                    e0:e3:68:76:12:ba:80:4d:6b:71:c3:34:7c:c0:d6:
                    7c:e7:f4:39:ad:ce:79:36:88:b7:5e:ee:2c:4b:2b:
                    bb:3a:56:8e:1a:6b:6a:ab:94:6a:e0:ee:99:95:79:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4B:CA:CC:07:39:83:D4:B1:97:3E:53:E3:FA:5A:61:22:DD:EC:DC
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f5:6b:28:16:83:4e:61:ff:ca:c8:f2:df:64:74:de:23:11:
         a2:0e:1c:5a:54:e9:92:e5:6f:bd:b6:7f:6a:04:cd:b8:19:0f:
         0e:cc:5e:eb:bc:93:50:28:94:b2:1f:b9:7f:bb:63:88:f4:6b:
         57:06:6d:bb:e1:49:48:a6:43:23:b6:08:6c:1f:55:a2:18:89:
         ec:43:66:48:47:c9:4a:81:90:79:89:b0:71:09:23:7e:bb:7c:
         bf:e1:95:01:23:84:bd:8c:74:83:09:26:29:00:c6:ac:d7:a5:
         2f:11:35:d4:a2:18:59:c2:7f:9e:10:62:30:08:3b:3b:67:f6:
         f7:36:14:a2:15:e8:1e:ac:18:d5:91:28:44:70:f7:ac:76:c9:
         66:cb:2d:48:85:d4:19:1b:f0:cd:05:4e:06:e4:c6:ee:73:f5:
         93:ee:ba:59:28:54:85:03:fb:c3:1f:a6:99:66:5f:7c:20:f3:
         05:22:3c:e3:02:7a:cc:b6:30:40:66:94:15:a0:05:68:8c:85:
         5e:d0:d1:e8:96:c4:3c:a0:e6:59:ad:e1:17:19:3a:67:7a:cd:
         2d:6e:63:73:46:6a:e2:ef:4c:0d:b8:ff:e0:05:c7:2b:15:ee:
         60:f9:b9:f3:d4:07:09:0a:98:e2:35:c5:be:7c:aa:e1:03:98:
         a7:d9:08:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A24SaCXdwmQBT35V5AYx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjYwNjEzMTIwMTEyWhcNMjYwNjE0MTIwMTEyWjAzMTEwLwYDVQQD
Eyg4ZTRiY2FjYzA3Mzk4M2Q0YjE5NzNlNTNlM2ZhNWE2MTIyZGRlY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pgvnzms5EOERLj1UGfgaom/uUJD
utDa2LDTrNyJYHOuNbZ0vKuF/EEaPjiHTFpvtme23w3QzduW30IbGbCUBdGC8rGA
9vzJtpxGNkSVqmQRhF6M58MGXb/V+9XnDo7kU2e19B27KI3ClehiX4qKKgBmSESn
bQan+CKEtDA3rduzSjVGiCwsS+HRfu9IHp28S0nacZeRB0SEi2JyGKBh0cB8wJn1
jT2Y/XOVaJDZF61LdpDGruPAoJtwbKPOWHZ2zlcnmmTlcBlC/NR6dPlDuAvg42h2
ErqATWtxwzR8wNZ85/Q5rc55Noi3Xu4sSyu7OlaOGmtqq5Rq4O6ZlXmthwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5LyswHOYPUsZc+U+P6WmEi3ezcMB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPVrKBaD
TmH/ysjy32R03iMRog4cWlTpkuVvvbZ/agTNuBkPDsxe67yTUCiUsh+5f7tjiPRr
VwZtu+FJSKZDI7YIbB9VohiJ7ENmSEfJSoGQeYmwcQkjfrt8v+GVASOEvYx0gwkm
KQDGrNelLxE11KIYWcJ/nhBiMAg7O2f29zYUohXoHqwY1ZEoRHD3rHbJZsstSIXU
GRvwzQVOBuTG7nP1k+66WShUhQP7wx+mmWZffCDzBSI84wJ6zLYwQGaUFaAFaIyF
XtDR6JbEPKDmWa3hFxk6Z3rNLW5jc0Zq4u9MDbj/4AXHKxXuYPm589QHCQqY4jXF
vnyq4QOYp9kIcw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:09 2026 by rpki-client