Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File:                     vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier:          3c5jUhygYq20rDjsUxYhMERDnsUXfUuKCp1aDhAHGGQ=
Subject key identifier:   11:3F:69:97:5C:7B:4A:2F:D9:EE:81:3B:5B:A8:D7:A6:C4:A7:E8:47
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer:       /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial:       019EBEECB3098CE2A1FE1DCB4C2E7789F0E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number:          196C
Signing time:             Sat 13 Jun 2026 03:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:43 +0000
Files and hashes:         1: 5OsbbnnHwhVNORbPHv-OJIeuoGI.roa (hash: XRJA8VpJASXYSnFu9o5yKclI6PUgREHgPT2bBiqSOmk=)
                          2: XiD6lDrgMPuS8eayCDVkIbui-4s.roa (hash: SBkJkhDft5A8cF6t/KuhZfif5su+kzjqoUhMEaiSsSk=)
                          3: pBECGuvlqI1JRG7h1KFoBdoLOQQ.roa (hash: g1yrRU6vVwlNdEkW9jmsyPMMiYUAGVw0ecH5Z2RUhlM=)
                          4: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: uzAeRWqOX3Asdf4BYCfVj8QgzPLPuobqjCGZ7JlVKFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:b3:09:8c:e2:a1:fe:1d:cb:4c:2e:77:89:f0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
        Validity
            Not Before: Jun 13 03:00:43 2026 GMT
            Not After : Jun 14 03:00:43 2026 GMT
        Subject: CN=113f69975c7b4a2fd9ee813b5ba8d7a6c4a7e847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:00:95:e3:5d:87:0c:02:d0:68:01:40:c7:
                    c3:27:dd:d9:81:69:df:a7:9a:6e:6f:d3:90:2e:f1:
                    98:be:0d:d5:09:6b:22:60:4a:a6:09:87:1d:0b:43:
                    12:f3:c7:2f:ec:1d:19:97:ad:23:bc:df:e0:4c:a4:
                    2a:a2:ec:58:20:b3:88:86:c7:52:d5:9e:67:36:d4:
                    23:e8:2f:47:fc:7e:b0:13:25:83:d7:5a:58:23:f2:
                    64:8d:a0:04:2d:fd:ec:f0:65:f5:2c:0b:01:52:5d:
                    54:ae:2b:97:f9:3f:15:30:d0:ad:6c:07:bf:07:41:
                    6f:c2:0e:df:8d:d2:ec:76:76:4d:42:52:3c:ce:d5:
                    c0:6b:b0:d6:bb:8f:3f:e7:fa:80:20:cb:34:24:53:
                    f6:c9:0c:fa:17:a2:49:9a:f2:f1:12:bf:ec:1d:59:
                    b9:cf:90:6f:bf:42:d1:10:95:d3:84:29:25:95:3f:
                    d2:d4:52:aa:ec:61:31:60:9f:7b:ac:eb:02:1c:cb:
                    60:41:2c:c2:f9:39:39:40:f9:f1:53:e9:d8:75:4e:
                    91:88:3e:2e:42:58:07:aa:2b:3e:dd:2d:d8:6d:e1:
                    2e:56:14:5e:68:87:f6:fb:65:75:e7:5a:f0:ba:4a:
                    ac:70:06:fa:83:5b:96:84:b0:d3:e8:9f:7f:ce:70:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:69:97:5C:7B:4A:2F:D9:EE:81:3B:5B:A8:D7:A6:C4:A7:E8:47
            X509v3 Authority Key Identifier:
                keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:15:cb:8f:62:96:bc:cc:1b:31:e3:53:31:88:ea:10:58:f5:
         4e:a3:97:9d:b7:12:4d:ab:f0:fd:94:78:ae:8b:09:86:43:55:
         eb:33:74:f9:d9:24:19:da:6c:18:c7:57:c2:93:bf:9b:eb:c0:
         55:ba:3a:ac:fa:86:41:30:94:20:77:ac:ab:a9:39:bc:47:3a:
         54:04:1a:bb:f8:59:3c:98:a2:64:c3:4e:4d:1d:cc:41:d2:a7:
         e1:f3:06:04:a6:d5:68:7e:44:27:b9:b2:c6:94:98:3f:5e:e1:
         40:55:88:7f:06:50:26:82:77:82:cc:63:a2:ac:e5:18:d8:da:
         fe:36:28:73:26:8b:53:ba:b8:d2:7c:de:96:ca:39:c4:c1:ee:
         b8:e9:a8:28:ba:6b:5b:83:d4:bf:6a:24:33:09:b1:c9:fc:e7:
         8b:dc:59:4e:f8:ca:0b:98:64:38:ff:bf:db:4c:d0:4b:f7:aa:
         c5:62:61:a6:5d:bb:b9:b2:98:01:06:ed:61:3f:3e:d8:8d:75:
         81:80:74:dc:6a:3b:6c:b3:5a:b8:29:88:5c:2e:8f:e7:70:13:
         4a:54:56:c4:60:8f:de:d8:6f:32:65:98:a4:10:8c:90:54:9c:
         de:41:1a:7c:82:40:dc:00:ef:9b:66:b0:c3:73:7c:06:79:1f:
         78:9e:82:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7LMJjOKh/h3LTC53ifDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkN2Q4MTc4Y2VjNWNkMzc2NTQ4YTkwNDkxMTdmNDY5YzBh
NzQzMWMwHhcNMjYwNjEzMDMwMDQzWhcNMjYwNjE0MDMwMDQzWjAzMTEwLwYDVQQD
EygxMTNmNjk5NzVjN2I0YTJmZDllZTgxM2I1YmE4ZDdhNmM0YTdlODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHoAleNdhwwC0GgBQMfDJ93ZgWnf
p5pub9OQLvGYvg3VCWsiYEqmCYcdC0MS88cv7B0Zl60jvN/gTKQqouxYILOIhsdS
1Z5nNtQj6C9H/H6wEyWD11pYI/JkjaAELf3s8GX1LAsBUl1UriuX+T8VMNCtbAe/
B0Fvwg7fjdLsdnZNQlI8ztXAa7DWu48/5/qAIMs0JFP2yQz6F6JJmvLxEr/sHVm5
z5Bvv0LREJXThCkllT/S1FKq7GExYJ97rOsCHMtgQSzC+Tk5QPnxU+nYdU6RiD4u
QlgHqis+3S3YbeEuVhReaIf2+2V151rwukqscAb6g1uWhLDT6J9/znBLcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE/aZdce0ov2e6BO1uo16bEp+hHMB8GA1UdIwQY
MBaAFL19gXjOxc03ZUipBJEX9GnAp0McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQt
NjE1YWNhNTFlMmY2LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQtNjE1YWNhNTFlMmY2
LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBXLj2KW
vMwbMeNTMYjqEFj1TqOXnbcSTavw/ZR4rosJhkNV6zN0+dkkGdpsGMdXwpO/m+vA
Vbo6rPqGQTCUIHesq6k5vEc6VAQau/hZPJiiZMNOTR3MQdKn4fMGBKbVaH5EJ7my
xpSYP17hQFWIfwZQJoJ3gsxjoqzlGNja/jYocyaLU7q40nzelso5xMHuuOmoKLpr
W4PUv2okMwmxyfzni9xZTvjKC5hkOP+/20zQS/eqxWJhpl27ubKYAQbtYT8+2I11
gYB03Go7bLNauCmIXC6P53ATSlRWxGCP3thvMmWYpBCMkFSc3kEafIJA3ADvm2aw
w3N8BnkfeJ6CWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:29 2026 by rpki-client