Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File:                     hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier:          6bTUjQ2OugnZBxQAdtACw/2JyOu6SoRgeRlN399eUXk=
Subject key identifier:   76:C8:08:8C:D2:50:02:FF:37:75:62:F6:19:1C:EF:FB:91:BB:02:08
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer:       /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial:       019EBF9159A708F83148C2AC6FDDBF2A889A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number:          192F
Signing time:             Sat 13 Jun 2026 06:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:34 +0000
Files and hashes:         1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
                          2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: Zob+b+EwQuvMgkZ83vJuXo9lCE2d9sic0Fn+/2pAw28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:59:a7:08:f8:31:48:c2:ac:6f:dd:bf:2a:88:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
        Validity
            Not Before: Jun 13 06:00:34 2026 GMT
            Not After : Jun 14 06:00:34 2026 GMT
        Subject: CN=76c8088cd25002ff377562f6191ceffb91bb0208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:59:42:8a:8b:c0:82:f1:7f:eb:d9:3f:7b:
                    0d:67:a1:c6:b8:19:10:21:25:a5:b1:54:31:7c:19:
                    a2:47:cb:5d:6c:d0:52:6c:13:61:97:f8:fc:8c:fd:
                    ca:b5:ed:94:67:2c:81:51:9e:1e:25:6f:0d:07:0f:
                    29:29:af:73:d4:67:70:c8:3f:bb:d2:b4:8a:6e:45:
                    de:02:de:a8:6b:eb:78:16:4c:76:ca:8d:a1:eb:2f:
                    24:59:3b:0d:49:ba:98:a7:b0:4a:c6:0e:5f:ce:43:
                    35:5d:f1:6b:2b:bd:db:bf:93:73:a1:f4:41:41:ff:
                    eb:5b:c2:c0:a2:8e:c7:14:0f:d7:4d:e6:8c:7d:5f:
                    d6:5b:e8:d8:79:a3:79:2f:fa:7f:db:fa:f6:5f:28:
                    1f:a6:fd:2b:81:72:08:0c:e5:48:ff:39:09:0c:c8:
                    6f:0a:64:d1:b3:85:ad:58:e7:e1:70:e0:f5:c6:9a:
                    c8:2d:bb:4d:9a:87:da:a7:bf:55:b7:50:a7:34:44:
                    68:dc:2a:72:61:5b:cf:2e:0a:da:85:92:ce:5c:17:
                    70:4c:63:e6:6e:06:16:43:7c:95:a5:52:c0:24:f6:
                    00:de:d5:74:dd:b5:3b:39:a7:b1:f6:41:06:3c:84:
                    26:03:de:90:b1:7f:27:5f:fb:b4:9d:e9:6c:ed:45:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:08:8C:D2:50:02:FF:37:75:62:F6:19:1C:EF:FB:91:BB:02:08
            X509v3 Authority Key Identifier:
                keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:30:45:49:bc:7c:d4:ec:0b:b0:b1:a5:28:cd:c4:b8:cd:7f:
         43:8e:3d:6f:f2:e2:be:41:2e:22:5d:a4:2d:42:de:0d:75:15:
         c4:af:a2:f4:9a:1f:4b:b6:b6:74:c3:5e:71:61:aa:32:23:72:
         83:ec:45:4e:af:a0:ca:df:80:29:c7:90:69:eb:b9:0d:e2:e2:
         a4:ab:c0:18:25:d1:6a:58:8e:31:90:bf:cd:df:1d:ca:94:68:
         d7:9b:b8:a8:f9:c0:d0:3f:a4:83:14:36:8c:ba:a5:82:07:1e:
         3a:a9:be:67:b2:4a:a0:1b:08:6a:f8:e3:95:56:de:15:b8:2a:
         75:56:e6:1f:df:d4:79:a4:66:3a:a2:25:ee:f9:4a:ea:7a:b5:
         b7:23:b4:12:9e:ed:12:94:2b:9c:80:8f:3a:c6:f5:5f:4d:1a:
         81:7c:b6:45:ad:6c:c3:9d:7e:41:0c:38:b4:35:4e:8a:96:1b:
         64:04:f8:d1:9b:e3:56:d2:75:de:ec:60:f5:5b:ac:1c:34:3f:
         74:e0:81:30:31:3d:03:e6:2f:19:aa:19:d7:b3:d0:0e:44:8c:
         21:14:37:59:38:92:72:51:4d:c0:09:d2:f4:28:c7:3c:16:7c:
         f1:70:d4:44:cd:7b:d8:b7:a1:ff:ad:00:9e:cb:11:70:a6:f6:
         56:6d:7d:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kVmnCPgxSMKsb92/KoiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWJlZWRmNDM4YTlhYTk2MWMzNDMyNjQzN2MyOWM0ZGQw
Y2M0YmMwHhcNMjYwNjEzMDYwMDM0WhcNMjYwNjE0MDYwMDM0WjAzMTEwLwYDVQQD
Eyg3NmM4MDg4Y2QyNTAwMmZmMzc3NTYyZjYxOTFjZWZmYjkxYmIwMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaNZQoqLwILxf+vZP3sNZ6HGuBkQ
ISWlsVQxfBmiR8tdbNBSbBNhl/j8jP3Kte2UZyyBUZ4eJW8NBw8pKa9z1GdwyD+7
0rSKbkXeAt6oa+t4Fkx2yo2h6y8kWTsNSbqYp7BKxg5fzkM1XfFrK73bv5NzofRB
Qf/rW8LAoo7HFA/XTeaMfV/WW+jYeaN5L/p/2/r2Xygfpv0rgXIIDOVI/zkJDMhv
CmTRs4WtWOfhcOD1xprILbtNmofap79Vt1CnNERo3CpyYVvPLgrahZLOXBdwTGPm
bgYWQ3yVpVLAJPYA3tV03bU7Oaex9kEGPIQmA96QsX8nX/u0nels7UWdmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbICIzSUAL/N3Vi9hkc7/uRuwIIMB8GA1UdIwQY
MBaAFIRb7t9DipqpYcNDJkN8KcTdDMS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWIt
MThlNjQ0NDFkMDFlLzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWItMThlNjQ0NDFkMDFl
LzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDBFSbx8
1OwLsLGlKM3EuM1/Q449b/LivkEuIl2kLULeDXUVxK+i9JofS7a2dMNecWGqMiNy
g+xFTq+gyt+AKceQaeu5DeLipKvAGCXRaliOMZC/zd8dypRo15u4qPnA0D+kgxQ2
jLqlggceOqm+Z7JKoBsIavjjlVbeFbgqdVbmH9/UeaRmOqIl7vlK6nq1tyO0Ep7t
EpQrnICPOsb1X00agXy2Ra1sw51+QQw4tDVOipYbZAT40ZvjVtJ13uxg9VusHDQ/
dOCBMDE9A+YvGaoZ17PQDkSMIRQ3WTiSclFNwAnS9CjHPBZ88XDURM172Leh/60A
nssRcKb2Vm19vg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:30 2026 by rpki-client