Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File:                     II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier:          MfT6uqAkkFjcADVH5wOFmvcync8DVpLoNTYfod8xE+8=
Subject key identifier:   74:68:46:93:02:06:2F:5E:47:78:93:F3:61:EA:D3:EB:42:FF:D1:37
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer:       /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial:       019EC148CF28E65DC2386637B85D8E6B4D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 14:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:34 +0000
Files and hashes:         1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
                          2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: Nav7o71/yoXI1pfbKG+BtPUmlQpRT2UVWfiXjq217Ag=)
                          3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
                          4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:cf:28:e6:5d:c2:38:66:37:b8:5d:8e:6b:4d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
        Validity
            Not Before: Jun 13 14:00:34 2026 GMT
            Not After : Jun 14 14:00:34 2026 GMT
        Subject: CN=7468469302062f5e477893f361ead3eb42ffd137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:fd:ec:fc:47:84:dd:c9:e5:77:ce:2f:32:
                    83:91:cf:56:a5:0f:d4:79:13:4e:c0:91:dc:41:b9:
                    2c:5d:5d:25:34:6c:33:42:05:79:d7:72:1c:13:a1:
                    99:40:66:bf:f1:9c:21:ec:46:c2:bd:0c:5d:99:6a:
                    f4:16:17:2c:5c:f2:35:44:0d:be:11:2b:7d:74:96:
                    89:60:12:76:6b:fe:ca:b9:db:3f:b8:11:c2:a0:de:
                    e8:cc:ce:2c:c0:8a:8a:e5:18:28:46:f4:24:e4:82:
                    95:8f:05:58:20:87:e2:b1:3a:4d:07:52:10:5c:dd:
                    ca:f7:10:04:e9:5f:92:91:d4:ae:8d:fa:28:f3:7d:
                    4d:00:93:7c:e8:d2:b1:2a:ec:6a:3d:84:08:b1:c6:
                    4d:7e:ef:60:67:00:2d:bb:7f:49:2a:7e:76:52:a0:
                    33:01:ba:a7:0b:f3:94:a3:80:5b:e1:ee:57:bd:af:
                    8c:de:fb:d9:97:14:93:e4:33:ca:eb:06:d8:c7:ff:
                    6a:6e:ea:2e:97:52:c3:a6:77:b4:a9:2e:83:67:13:
                    17:ea:43:0c:6f:95:ee:28:c4:2d:aa:d9:bd:49:62:
                    29:6d:04:5a:14:25:71:71:3f:54:66:47:76:41:49:
                    65:67:f2:a3:30:2e:8b:18:d6:ed:f0:ed:f5:7e:ea:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:68:46:93:02:06:2F:5E:47:78:93:F3:61:EA:D3:EB:42:FF:D1:37
            X509v3 Authority Key Identifier:
                keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:f4:92:4d:c5:8b:91:79:4c:23:fe:ad:89:3e:25:8b:df:
         e0:f9:16:ed:04:78:af:32:7c:73:fc:65:73:5a:72:1e:b9:ca:
         9f:d8:59:7d:4c:a9:21:4c:f2:25:6e:0f:32:a5:87:85:7f:eb:
         24:92:f7:65:8a:68:ba:0d:2b:dd:a5:fc:13:8a:73:be:e2:fd:
         cd:15:19:35:3d:9b:c4:f7:ea:d2:5b:ad:9e:2c:72:9f:61:f4:
         38:63:0a:20:0f:b7:bf:79:b7:64:c1:bc:c5:70:24:35:bd:12:
         30:05:b1:89:03:26:08:1f:14:27:84:8c:d3:6d:1e:98:71:da:
         29:1c:1a:27:70:3e:53:52:96:9f:77:87:71:c9:a1:46:d8:91:
         3a:64:58:02:db:49:ec:ea:9f:21:ed:23:a3:9a:68:ca:4e:59:
         0d:80:7b:d1:08:1c:dc:df:b4:b4:b4:f8:7e:df:ad:4c:ba:b5:
         17:a3:73:64:d5:3c:4f:1e:d5:6a:82:0b:e5:db:d0:a7:97:81:
         e8:2d:37:4b:9e:4f:e0:32:d7:75:36:31:55:04:fe:a8:9d:fb:
         9a:f8:8f:69:d3:93:bf:48:1d:21:b6:07:bb:9f:6c:87:42:77:
         89:2d:b4:5d:e3:7a:4e:29:05:25:04:fc:a8:3d:5a:55:c0:4e:
         7d:86:94:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSM8o5l3COGY3uF2Oa00gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5
Y2MyNDIwHhcNMjYwNjEzMTQwMDM0WhcNMjYwNjE0MTQwMDM0WjAzMTEwLwYDVQQD
Eyg3NDY4NDY5MzAyMDYyZjVlNDc3ODkzZjM2MWVhZDNlYjQyZmZkMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTn97PxHhN3J5XfOLzKDkc9WpQ/U
eRNOwJHcQbksXV0lNGwzQgV513IcE6GZQGa/8Zwh7EbCvQxdmWr0FhcsXPI1RA2+
ESt9dJaJYBJ2a/7Kuds/uBHCoN7ozM4swIqK5RgoRvQk5IKVjwVYIIfisTpNB1IQ
XN3K9xAE6V+SkdSujfoo831NAJN86NKxKuxqPYQIscZNfu9gZwAtu39JKn52UqAz
AbqnC/OUo4Bb4e5Xva+M3vvZlxST5DPK6wbYx/9qbuoul1LDpne0qS6DZxMX6kMM
b5XuKMQtqtm9SWIpbQRaFCVxcT9UZkd2QUllZ/KjMC6LGNbt8O31fuqQkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRoRpMCBi9eR3iT82Hq0+tC/9E3MB8GA1UdIwQY
MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt
YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl
LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj30kk3F
i5F5TCP+rYk+JYvf4PkW7QR4rzJ8c/xlc1pyHrnKn9hZfUypIUzyJW4PMqWHhX/r
JJL3ZYpoug0r3aX8E4pzvuL9zRUZNT2bxPfq0lutnixyn2H0OGMKIA+3v3m3ZMG8
xXAkNb0SMAWxiQMmCB8UJ4SM020emHHaKRwaJ3A+U1KWn3eHccmhRtiROmRYAttJ
7OqfIe0jo5poyk5ZDYB70Qgc3N+0tLT4ft+tTLq1F6NzZNU8Tx7VaoIL5dvQp5eB
6C03S55P4DLXdTYxVQT+qJ37mviPadOTv0gdIbYHu59sh0J3iS20XeN6TikFJQT8
qD1aVcBOfYaU7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:22:40 2026 by rpki-client