Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File:                     5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier:          EQa+FajBa4K2yzQqwzdOiuHV0zaxSnLuTymF06R+IoE=
Subject key identifier:   EC:52:D0:BE:22:3C:9D:04:CF:C7:27:1F:B4:CE:E8:2B:1A:C8:F1:9A
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer:       /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial:       019EBF9124E39090665D79445F854097BA69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number:          0298
Signing time:             Sat 13 Jun 2026 06:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:20 +0000
Files and hashes:         1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
                          2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
                          3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: Xhe5GNLiNEXPDHIH0FD771AWRyHtaTQfJUC8l5sARj8=)
                          4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:24:e3:90:90:66:5d:79:44:5f:85:40:97:ba:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
        Validity
            Not Before: Jun 13 06:00:20 2026 GMT
            Not After : Jun 14 06:00:20 2026 GMT
        Subject: CN=ec52d0be223c9d04cfc7271fb4cee82b1ac8f19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:07:62:81:2b:5a:93:1c:8e:85:df:d7:3b:
                    3b:30:bf:e1:e3:d9:fb:2b:d5:33:f6:e0:ec:7c:1c:
                    2a:4f:98:3e:3b:f3:76:d6:6b:c5:7f:44:f1:f4:42:
                    c0:98:56:2c:25:5f:5a:98:86:d8:2e:e4:ee:13:54:
                    30:90:c3:71:a7:63:d0:a5:50:de:da:89:11:4a:19:
                    d4:6e:b9:86:26:5c:ce:76:89:b9:87:83:39:ae:dc:
                    08:56:bd:e0:65:ae:6e:26:4e:c2:3d:35:cb:a4:0f:
                    be:bf:3f:8a:e8:9e:9e:01:4c:7f:54:c0:bf:5e:35:
                    91:b6:1b:98:ff:d4:52:5e:6a:7a:b1:ec:9e:e7:6c:
                    73:94:a3:f2:37:ca:8c:08:99:ba:93:61:8d:e2:fa:
                    93:44:8c:21:5f:f0:3d:0e:2f:44:c1:86:d7:d4:ac:
                    4c:0c:03:df:2d:f5:b3:a4:31:58:c2:5a:52:4b:24:
                    27:0f:cb:46:ff:55:67:0a:88:e7:42:33:67:2a:00:
                    9f:61:5d:96:99:56:16:60:0d:7a:62:87:26:2e:96:
                    91:3d:59:22:4e:20:5d:7a:ea:1e:33:35:cb:9d:cd:
                    4f:28:bc:81:18:68:72:de:f3:cf:ae:fd:04:64:c1:
                    ee:04:23:ee:d2:e7:4a:88:29:ca:fb:ad:c9:4f:63:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:52:D0:BE:22:3C:9D:04:CF:C7:27:1F:B4:CE:E8:2B:1A:C8:F1:9A
            X509v3 Authority Key Identifier:
                keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:62:cb:9b:3f:f7:fa:15:ba:08:e7:e9:13:5f:21:ac:07:
         fd:32:2b:65:7d:29:be:13:44:ea:eb:ce:5d:28:f4:d1:ac:fc:
         78:47:ca:3b:7e:f6:07:d8:e7:ac:cd:a5:42:80:81:7e:eb:d1:
         43:31:b0:db:6b:a3:03:63:7d:5e:71:b0:ee:14:81:39:01:63:
         6c:bc:02:c3:31:c3:4c:d0:a9:14:a8:9b:5d:c4:13:e1:bc:9c:
         c3:83:ba:26:10:1e:e2:db:0c:85:9d:53:f5:1f:73:f7:96:33:
         d1:61:d1:00:1a:50:07:5c:f0:ce:d9:4f:4f:0f:82:83:1b:38:
         2a:e2:77:06:b0:fd:b5:29:6b:71:be:86:8b:07:41:38:59:db:
         83:36:ca:3a:0c:d2:ed:ba:ae:3c:ad:a9:e8:a0:c7:ad:7f:48:
         13:50:d1:21:60:eb:ad:af:62:14:a1:50:8c:5c:f9:8c:fb:f5:
         3b:eb:b4:3c:a9:a2:99:13:1a:42:1f:23:2b:46:27:62:1c:bd:
         24:ad:f1:11:16:ec:e5:6a:15:ca:e3:05:2a:cd:ac:1e:c6:62:
         00:97:a8:09:23:51:29:79:3b:ac:a4:70:7c:b6:7f:63:d2:78:
         30:80:d5:8a:18:2e:ba:cb:2a:d6:ab:4b:ff:65:e2:be:bc:36:
         03:01:bd:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kSTjkJBmXXlEX4VAl7ppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZGE4ZTljZmM4YjE2MGVjNTliNTQwZjM5ZDg5NzNkNDIx
ODMxMmEwHhcNMjYwNjEzMDYwMDIwWhcNMjYwNjE0MDYwMDIwWjAzMTEwLwYDVQQD
EyhlYzUyZDBiZTIyM2M5ZDA0Y2ZjNzI3MWZiNGNlZTgyYjFhYzhmMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OMHYoErWpMcjoXf1zs7ML/h49n7
K9Uz9uDsfBwqT5g+O/N21mvFf0Tx9ELAmFYsJV9amIbYLuTuE1QwkMNxp2PQpVDe
2okRShnUbrmGJlzOdom5h4M5rtwIVr3gZa5uJk7CPTXLpA++vz+K6J6eAUx/VMC/
XjWRthuY/9RSXmp6seye52xzlKPyN8qMCJm6k2GN4vqTRIwhX/A9Di9EwYbX1KxM
DAPfLfWzpDFYwlpSSyQnD8tG/1VnCojnQjNnKgCfYV2WmVYWYA16YocmLpaRPVki
TiBdeuoeMzXLnc1PKLyBGGhy3vPPrv0EZMHuBCPu0udKiCnK+63JT2N0hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxS0L4iPJ0Ez8cnH7TO6CsayPGaMB8GA1UdIwQY
MBaAFOXajpz8ixYOxZtUDznYlz1CGDEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRxT25QeUxGZzdGbTFRUE9kaVhQVUlZTVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wMDNjYTktYzM5MC00Mjc0LThmYzYt
N2M1MDQ3MDNiYjAyLzEvNWRxT25QeUxGZzdGbTFRUE9kaVhQVUlZTVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wMDNjYTktYzM5MC00Mjc0LThmYzYtN2M1MDQ3MDNiYjAy
LzEvNWRxT25QeUxGZzdGbTFRUE9kaVhQVUlZTVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9Fiy5s/
9/oVugjn6RNfIawH/TIrZX0pvhNE6uvOXSj00az8eEfKO372B9jnrM2lQoCBfuvR
QzGw22ujA2N9XnGw7hSBOQFjbLwCwzHDTNCpFKibXcQT4bycw4O6JhAe4tsMhZ1T
9R9z95Yz0WHRABpQB1zwztlPTw+Cgxs4KuJ3BrD9tSlrcb6GiwdBOFnbgzbKOgzS
7bquPK2p6KDHrX9IE1DRIWDrra9iFKFQjFz5jPv1O+u0PKmimRMaQh8jK0YnYhy9
JK3xERbs5WoVyuMFKs2sHsZiAJeoCSNRKXk7rKRwfLZ/Y9J4MIDVihguussq1qtL
/2Xivrw2AwG9IQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:38 2026 by rpki-client