Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File:                     MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier:          5iReONH0D7PA0GIj8DQMAqB83u0j+LfyMD/utQTWkjg=
Subject key identifier:   F0:31:2A:96:4D:EB:DE:86:1E:33:E7:E9:CE:31:07:58:3D:FC:B7:36
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer:       /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial:       019EBFFF18F4C5F6FEA82DE7AC3ED0D043FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 08:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:26 +0000
Files and hashes:         1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: YYvf2ARSM3wd1DLU5S2UsdjageS9k8bLc7gPgqg4E70=)
                          2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
                          3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
                          4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:18:f4:c5:f6:fe:a8:2d:e7:ac:3e:d0:d0:43:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
        Validity
            Not Before: Jun 13 08:00:26 2026 GMT
            Not After : Jun 14 08:00:26 2026 GMT
        Subject: CN=f0312a964debde861e33e7e9ce3107583dfcb736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:cc:66:88:8e:8a:11:7e:28:37:07:f7:e7:
                    52:4d:8a:e9:e5:8d:23:c6:a4:23:4d:f0:52:8f:43:
                    eb:a2:47:e6:0f:42:e3:e2:79:86:34:68:bf:64:f4:
                    a0:16:93:1e:55:69:f7:ef:c6:62:06:86:bf:3d:e6:
                    0c:04:70:84:d9:53:9f:34:ef:4c:8e:38:68:16:3f:
                    81:4b:5c:c9:09:9c:15:7b:bd:84:65:c4:8c:65:5a:
                    a6:08:57:69:36:b8:ab:b8:44:4e:55:fa:a5:7f:9c:
                    8d:3d:8c:9c:9b:98:e6:68:5d:81:0e:41:27:4e:30:
                    ab:01:e7:dd:59:7d:e1:c3:b9:f6:9b:3a:b2:ab:b5:
                    41:77:17:8e:4f:73:a8:54:d5:ee:7c:b4:45:c9:59:
                    0c:14:32:02:25:4d:f7:c0:03:21:fa:68:f1:4f:ca:
                    7d:c2:2f:00:7d:ba:9c:ea:55:a0:ea:5d:0b:a0:96:
                    11:d9:c5:1f:6e:36:6a:cf:41:c3:74:01:c5:be:3a:
                    58:26:ce:63:76:f5:fd:50:9e:92:39:20:06:ca:35:
                    13:ac:f6:d2:cd:e9:c3:88:48:66:6e:1e:bf:3f:94:
                    0e:3e:98:fe:6e:8d:14:3d:64:61:24:a8:79:81:67:
                    bd:bb:00:2c:c8:f2:a1:2d:90:62:33:7f:11:4b:84:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:31:2A:96:4D:EB:DE:86:1E:33:E7:E9:CE:31:07:58:3D:FC:B7:36
            X509v3 Authority Key Identifier:
                keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:13:dd:67:dd:5c:d4:aa:d0:4a:39:11:7d:cc:98:1e:5a:
         e6:3e:2e:c6:75:5f:4b:6d:30:0f:d7:6a:d5:c7:81:1c:4f:4e:
         1a:1b:31:ba:92:a6:e8:5e:6b:ee:e3:71:cf:56:e1:86:85:b0:
         cd:28:7a:c9:bc:3d:68:c8:e8:b0:4b:8f:d2:04:ff:a0:e7:e3:
         e0:be:ca:81:a1:eb:15:20:28:00:b8:c9:d2:68:4c:95:28:47:
         fe:ab:48:85:d2:30:ed:8c:72:0e:86:47:b8:4f:be:6b:50:86:
         a8:b5:46:77:22:ff:3b:91:54:94:5a:1b:67:1f:b6:cf:30:19:
         9c:a1:20:bc:0d:56:b4:be:3a:b1:77:21:ea:56:d4:aa:1d:c3:
         76:70:5a:4f:e0:11:00:b8:7d:c1:51:b6:f0:f7:bd:4f:db:50:
         c7:0c:2d:6b:41:1a:49:24:df:de:72:c1:c3:c4:bf:09:04:99:
         b1:e5:fe:48:c8:05:3d:64:10:de:40:f8:69:19:f8:55:70:32:
         07:7c:14:f0:40:08:27:5f:37:c0:86:0a:dc:39:f3:db:82:ba:
         e4:51:ac:ad:37:ff:3d:82:28:42:3e:74:de:0e:06:c6:0f:3c:
         51:d0:62:96:29:e7:f1:88:83:68:b7:f2:a6:34:2a:aa:40:94:
         8b:0c:ee:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//xj0xfb+qC3nrD7Q0EP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy
ZjFkNWUwHhcNMjYwNjEzMDgwMDI2WhcNMjYwNjE0MDgwMDI2WjAzMTEwLwYDVQQD
EyhmMDMxMmE5NjRkZWJkZTg2MWUzM2U3ZTljZTMxMDc1ODNkZmNiNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGrMZoiOihF+KDcH9+dSTYrp5Y0j
xqQjTfBSj0ProkfmD0Lj4nmGNGi/ZPSgFpMeVWn378ZiBoa/PeYMBHCE2VOfNO9M
jjhoFj+BS1zJCZwVe72EZcSMZVqmCFdpNriruEROVfqlf5yNPYycm5jmaF2BDkEn
TjCrAefdWX3hw7n2mzqyq7VBdxeOT3OoVNXufLRFyVkMFDICJU33wAMh+mjxT8p9
wi8Afbqc6lWg6l0LoJYR2cUfbjZqz0HDdAHFvjpYJs5jdvX9UJ6SOSAGyjUTrPbS
zenDiEhmbh6/P5QOPpj+bo0UPWRhJKh5gWe9uwAsyPKhLZBiM38RS4SYqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAxKpZN696GHjPn6c4xB1g9/Lc2MB8GA1UdIwQY
MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct
OTc4NWEzMzU1NDJhLzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh
LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLQT3Wfd
XNSq0Eo5EX3MmB5a5j4uxnVfS20wD9dq1ceBHE9OGhsxupKm6F5r7uNxz1bhhoWw
zSh6ybw9aMjosEuP0gT/oOfj4L7KgaHrFSAoALjJ0mhMlShH/qtIhdIw7YxyDoZH
uE++a1CGqLVGdyL/O5FUlFobZx+2zzAZnKEgvA1WtL46sXch6lbUqh3DdnBaT+AR
ALh9wVG28Pe9T9tQxwwta0EaSSTf3nLBw8S/CQSZseX+SMgFPWQQ3kD4aRn4VXAy
B3wU8EAIJ183wIYK3Dnz24K65FGsrTf/PYIoQj503g4Gxg88UdBilinn8YiDaLfy
pjQqqkCUiwzuAg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:40 2026 by rpki-client