Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File:                     7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier:          kfE2CO3IXiBHdwvXT4lxKYeMPL+wCczduMbrvLKNLLg=
Subject key identifier:   EE:B5:86:2D:C0:D2:E2:EC:D7:27:AC:DA:AD:F6:BD:DA:41:B2:89:B2
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer:       /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial:       019EC2CA035B6E2B9A1DCED465D95D8F00F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number:          0173
Signing time:             Sat 13 Jun 2026 21:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:19 +0000
Files and hashes:         1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
                          2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: uXmbwjLvZgFA/91QtniHRjIx5/Eg8h36xQq5aPkImSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:03:5b:6e:2b:9a:1d:ce:d4:65:d9:5d:8f:00:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
        Validity
            Not Before: Jun 13 21:01:19 2026 GMT
            Not After : Jun 14 21:01:19 2026 GMT
        Subject: CN=eeb5862dc0d2e2ecd727acdaadf6bdda41b289b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:70:4b:f9:b2:f4:ef:07:91:05:b9:4b:f7:
                    9b:6b:81:80:71:25:e8:67:31:cc:9f:f0:34:5f:0e:
                    b9:1b:eb:e4:fb:30:ba:7c:0c:0f:a4:cd:a3:00:3e:
                    aa:97:a6:c1:e1:12:fb:70:69:72:7b:51:7c:7f:f4:
                    8a:72:54:65:b2:af:19:9a:0f:cb:3b:d1:de:6e:5d:
                    5c:d4:2f:74:f3:f9:db:bb:2a:8f:2c:cc:bb:dc:18:
                    1c:ec:78:b2:24:de:65:b7:8c:09:e7:22:7a:55:f7:
                    81:a7:b6:d9:41:cb:1b:b1:c5:ed:9f:2e:3e:ba:f1:
                    63:5a:ec:3e:8c:47:8b:0a:20:76:9c:5d:3a:0b:ee:
                    46:32:aa:e9:7d:39:c4:44:a8:ee:0c:0f:8b:c8:8f:
                    84:cc:e4:05:d0:b5:75:ec:76:2e:fc:1c:3b:55:6a:
                    fa:47:59:68:e6:4e:79:a5:d1:d4:83:42:9a:24:4a:
                    1d:fa:fe:51:5d:f6:28:ef:d2:24:ba:67:67:48:ae:
                    02:7b:d9:eb:48:45:45:cf:7d:2c:4a:13:7b:1f:21:
                    44:3a:59:7f:7b:54:9f:c5:4d:ed:5b:44:70:87:6f:
                    3c:19:0c:d8:47:ee:2b:b6:17:b3:47:21:9c:8d:34:
                    14:7f:5a:8d:ac:96:51:e1:de:2e:28:6e:49:2e:bc:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B5:86:2D:C0:D2:E2:EC:D7:27:AC:DA:AD:F6:BD:DA:41:B2:89:B2
            X509v3 Authority Key Identifier:
                keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f2:e4:c2:82:a3:86:4b:16:7c:6f:b8:da:21:96:54:76:d0:
         bf:62:99:2e:63:a4:1f:89:ef:2e:b5:07:a5:2b:f0:3a:f4:8d:
         a9:fb:4e:87:ba:91:e8:ac:0c:f7:4b:4d:e3:99:cb:e2:6c:2f:
         c5:c7:46:bb:10:d9:14:57:7d:0f:b6:25:d6:03:a3:94:b4:20:
         28:59:b8:21:e5:93:df:cd:16:71:8d:4f:42:2f:ad:d6:71:29:
         fd:38:75:b0:87:0a:cd:80:88:b8:0d:84:df:84:07:f6:07:89:
         5c:9f:81:4e:94:61:ad:f4:d6:b5:a3:30:0a:ea:43:ce:af:f8:
         37:a3:6b:59:87:a8:d3:fc:24:73:88:0a:4f:59:01:f6:76:4c:
         e1:17:79:98:15:5e:58:31:d0:2f:c6:da:df:fb:20:a6:ce:60:
         47:7b:96:b8:63:ba:4a:99:c1:48:12:5a:71:ab:86:e3:8b:f9:
         9e:7d:5a:6b:0e:ec:44:1d:59:4e:fc:21:5a:73:8b:4e:db:c9:
         7b:50:e0:23:8d:18:c6:a5:ba:d4:e3:ac:42:e0:18:7b:64:97:
         38:8b:46:12:8e:8a:29:68:75:2a:9b:6a:68:35:4e:d7:96:43:
         be:9f:46:1f:54:2a:9f:60:a1:d2:13:36:70:7a:47:d5:0e:c6:
         c7:60:01:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CygNbbiuaHc7UZdldjwDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZTE1MDYzY2IwYjNlNzg4ODhjYjRkMGYyMmEwNGExOTNk
ZDY3MDYwHhcNMjYwNjEzMjEwMTE5WhcNMjYwNjE0MjEwMTE5WjAzMTEwLwYDVQQD
EyhlZWI1ODYyZGMwZDJlMmVjZDcyN2FjZGFhZGY2YmRkYTQxYjI4OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ZwS/my9O8HkQW5S/eba4GAcSXo
ZzHMn/A0Xw65G+vk+zC6fAwPpM2jAD6ql6bB4RL7cGlye1F8f/SKclRlsq8Zmg/L
O9Hebl1c1C908/nbuyqPLMy73Bgc7HiyJN5lt4wJ5yJ6VfeBp7bZQcsbscXtny4+
uvFjWuw+jEeLCiB2nF06C+5GMqrpfTnERKjuDA+LyI+EzOQF0LV17HYu/Bw7VWr6
R1lo5k55pdHUg0KaJEod+v5RXfYo79IkumdnSK4Ce9nrSEVFz30sShN7HyFEOll/
e1SfxU3tW0Rwh288GQzYR+4rthezRyGcjTQUf1qNrJZR4d4uKG5JLrwkZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO61hi3A0uLs1yes2q32vdpBsomyMB8GA1UdIwQY
MBaAFOzhUGPLCz54iIy00PIqBKGT3WcGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NDRiYzctZjIwNC00YTQwLWEzMGQt
ODA1ZWZjZDExNDljLzEvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NDRiYzctZjIwNC00YTQwLWEzMGQtODA1ZWZjZDExNDlj
LzEvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvLkwoKj
hksWfG+42iGWVHbQv2KZLmOkH4nvLrUHpSvwOvSNqftOh7qR6KwM90tN45nL4mwv
xcdGuxDZFFd9D7Yl1gOjlLQgKFm4IeWT380WcY1PQi+t1nEp/Th1sIcKzYCIuA2E
34QH9geJXJ+BTpRhrfTWtaMwCupDzq/4N6NrWYeo0/wkc4gKT1kB9nZM4Rd5mBVe
WDHQL8ba3/sgps5gR3uWuGO6SpnBSBJacauG44v5nn1aaw7sRB1ZTvwhWnOLTtvJ
e1DgI40YxqW61OOsQuAYe2SXOItGEo6KKWh1KptqaDVO15ZDvp9GH1Qqn2Ch0hM2
cHpH1Q7Gx2ABoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:14 2026 by rpki-client