Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File:                     tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier:          ChjDC5KJJzT1ymA2T3YF3++RHomzXM5ugQYdebwegpM=
Subject key identifier:   4A:A6:F2:71:AC:F6:37:2A:27:27:BB:A9:9E:75:47:52:E6:20:F6:8A
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer:       /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial:       019EC0A45F235CD1651D08E74691071AFE08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 11:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:58 +0000
Files and hashes:         1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
                          2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
                          3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: O3Mrsx5vBouPzaZmlQeSmsxm9e8yZ4HvBdJ/1xeCCJg=)
                          4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:5f:23:5c:d1:65:1d:08:e7:46:91:07:1a:fe:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
        Validity
            Not Before: Jun 13 11:00:58 2026 GMT
            Not After : Jun 14 11:00:58 2026 GMT
        Subject: CN=4aa6f271acf6372a2727bba99e754752e620f68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:1a:65:7e:72:4a:9c:17:c0:93:03:c9:fa:
                    0b:7a:50:c6:9b:e5:b6:9e:f0:97:2d:2e:03:c0:2d:
                    c9:9b:68:a9:fe:7d:9a:62:aa:94:a6:70:20:5e:f3:
                    f1:ac:5d:4b:f6:fc:e2:99:ed:c8:59:22:d2:74:68:
                    ae:b0:49:6b:bf:b4:17:01:14:ef:a3:af:c9:1b:fe:
                    04:b6:db:42:04:52:d4:51:0b:a4:d4:62:a2:7f:4e:
                    38:1b:0b:60:ae:00:d4:26:25:06:66:72:2f:16:bc:
                    3b:6c:08:6e:0a:40:61:1e:0c:98:d9:06:cd:67:8a:
                    09:53:d6:f3:21:30:5f:87:b8:9b:22:68:3e:7b:1a:
                    b8:8b:2f:4c:45:e4:54:b1:c5:a7:5d:50:67:b0:a6:
                    86:4a:bf:d6:a1:ed:4d:6e:36:0f:45:05:55:14:50:
                    43:ea:3f:cc:ef:33:b5:74:1e:c5:b5:1d:60:c0:b1:
                    47:38:bb:6f:fd:09:48:3e:14:81:73:37:17:fe:8d:
                    a1:c3:3d:30:6b:30:af:cf:89:a7:26:7c:5b:29:0b:
                    f5:e6:8a:ec:a5:9f:b9:27:dd:bb:58:8d:e6:11:5c:
                    d5:76:21:c0:47:fe:7e:f5:11:1c:16:a3:03:9f:68:
                    3c:17:34:d0:fb:fa:5f:24:00:7c:d7:40:0b:23:e6:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A6:F2:71:AC:F6:37:2A:27:27:BB:A9:9E:75:47:52:E6:20:F6:8A
            X509v3 Authority Key Identifier:
                keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:27:06:e9:e1:fd:49:3d:99:19:f3:1e:80:93:26:fd:10:
         c3:7e:da:e9:b9:14:ec:14:9f:d6:0a:0d:70:71:82:5a:da:ad:
         43:b5:df:c0:cc:20:94:ac:b8:3f:e1:3d:2f:7d:ab:88:b4:51:
         8b:4d:40:0b:6e:00:a2:70:15:60:97:2e:03:f4:d4:62:91:e9:
         53:d9:f0:7e:a8:75:3a:45:88:1a:3d:0c:73:98:02:d7:65:a3:
         d5:cb:1d:e1:89:9a:c2:9f:4e:cb:e0:7a:2d:12:c4:da:6e:22:
         3c:e8:58:48:73:b0:10:5b:5d:5a:2e:48:e1:cf:82:f1:6e:4e:
         ad:5c:1d:e8:e8:65:c7:d0:3c:10:e6:e9:c2:f4:77:54:73:16:
         6c:4e:cb:2d:0e:e2:96:5d:87:14:27:da:b1:8f:5f:21:c0:ee:
         38:5c:24:8f:61:53:b9:ff:c0:ef:df:a7:9c:fd:92:ae:41:c1:
         b5:83:eb:89:08:f4:58:33:48:2b:f1:d7:1c:5e:06:83:ec:86:
         ed:5a:3c:06:e6:b8:1c:4f:66:79:a9:86:f4:03:b9:56:8a:0d:
         4e:97:21:8d:93:8a:96:78:e1:47:bd:33:64:78:df:22:be:dc:
         09:31:34:d7:9b:b3:54:41:d7:48:e6:6d:a4:8d:35:ec:82:c0:
         33:f5:7a:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApF8jXNFlHQjnRpEHGv4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl
YjlkMmMwHhcNMjYwNjEzMTEwMDU4WhcNMjYwNjE0MTEwMDU4WjAzMTEwLwYDVQQD
Eyg0YWE2ZjI3MWFjZjYzNzJhMjcyN2JiYTk5ZTc1NDc1MmU2MjBmNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGUaZX5ySpwXwJMDyfoLelDGm+W2
nvCXLS4DwC3Jm2ip/n2aYqqUpnAgXvPxrF1L9vzime3IWSLSdGiusElrv7QXARTv
o6/JG/4EtttCBFLUUQuk1GKif044GwtgrgDUJiUGZnIvFrw7bAhuCkBhHgyY2QbN
Z4oJU9bzITBfh7ibImg+exq4iy9MReRUscWnXVBnsKaGSr/Woe1NbjYPRQVVFFBD
6j/M7zO1dB7FtR1gwLFHOLtv/QlIPhSBczcX/o2hwz0wazCvz4mnJnxbKQv15ors
pZ+5J927WI3mEVzVdiHAR/5+9REcFqMDn2g8FzTQ+/pfJAB810ALI+Z36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqm8nGs9jcqJye7qZ51R1LmIPaKMB8GA1UdIwQY
MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt
MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh
LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG8nBunh
/Uk9mRnzHoCTJv0Qw37a6bkU7BSf1goNcHGCWtqtQ7XfwMwglKy4P+E9L32riLRR
i01AC24AonAVYJcuA/TUYpHpU9nwfqh1OkWIGj0Mc5gC12Wj1csd4Ymawp9Oy+B6
LRLE2m4iPOhYSHOwEFtdWi5I4c+C8W5OrVwd6Ohlx9A8EObpwvR3VHMWbE7LLQ7i
ll2HFCfasY9fIcDuOFwkj2FTuf/A79+nnP2SrkHBtYPriQj0WDNIK/HXHF4Gg+yG
7Vo8Bua4HE9meamG9AO5VooNTpchjZOKlnjhR70zZHjfIr7cCTE015uzVEHXSOZt
pI017ILAM/V6KA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:44 2026 by rpki-client