Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File:                     P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier:          DpdOS0IMx+VJCR9eAY4bOA3IkgTuLdPEqjB/7Pe1/Jg=
Subject key identifier:   05:3D:97:E3:15:16:9F:61:D9:64:45:29:DE:99:60:CC:C8:F2:A7:A3
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer:       /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial:       019ED42AEFC0102B56C8DFB9D6E35780AD11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number:          0159
Signing time:             Wed 17 Jun 2026 06:00:44 +0000
Manifest this update:     Wed 17 Jun 2026 06:00:44 +0000
Manifest next update:     Thu 18 Jun 2026 06:00:44 +0000
Files and hashes:         1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: 97NItXNttqV/QeBSCLa3FtkGSFnOdklCb1uHp0zsksk=)
                          2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2a:ef:c0:10:2b:56:c8:df:b9:d6:e3:57:80:ad:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
        Validity
            Not Before: Jun 17 06:00:44 2026 GMT
            Not After : Jun 18 06:00:44 2026 GMT
        Subject: CN=053d97e315169f61d9644529de9960ccc8f2a7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:1c:ca:5c:f8:d7:a4:0a:d3:40:f8:50:e5:
                    e5:8c:f0:a5:6c:74:89:53:33:99:a9:ee:47:2a:61:
                    8d:21:85:bd:6d:8f:66:82:7b:aa:db:4e:54:05:6d:
                    3b:66:25:2b:49:8d:07:10:e0:e0:38:b4:73:5f:77:
                    7a:d2:d9:51:fd:2a:08:c8:5f:07:5d:02:62:c6:cd:
                    18:05:8e:d3:3d:2e:0c:1f:b7:c8:f0:54:1e:26:ef:
                    6c:0b:b6:ee:c3:a1:5f:5e:0f:ba:f0:bb:50:a7:4e:
                    25:22:94:32:8b:a9:7d:d9:3c:d9:54:cf:53:32:6f:
                    ec:01:b8:13:2e:4d:fc:ad:4b:96:d1:aa:ce:52:af:
                    8f:8b:b3:ce:1f:90:9c:60:8d:6d:0d:c7:27:f3:c7:
                    8e:25:b4:7a:ca:e2:2b:54:fd:c1:04:e0:e1:c5:df:
                    a2:d6:8a:3f:d4:53:43:67:7a:59:b4:a4:f9:f4:a8:
                    35:b3:07:d0:2e:17:43:05:40:50:a8:59:c9:d8:89:
                    a7:0f:5f:26:74:a3:20:dc:61:2c:c5:00:7b:65:1e:
                    c0:61:85:47:e8:f8:03:fd:4c:6f:61:5b:06:3b:df:
                    9a:f5:a1:26:46:66:82:f6:dd:a6:ba:44:eb:c5:15:
                    c6:5e:ca:bf:4c:9e:1c:15:95:de:f7:dc:80:30:56:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3D:97:E3:15:16:9F:61:D9:64:45:29:DE:99:60:CC:C8:F2:A7:A3
            X509v3 Authority Key Identifier:
                keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a6:48:20:e6:3d:31:ae:92:4f:1c:62:71:d0:fc:1e:0f:75:
         ae:51:dc:00:aa:8b:d8:b5:f6:d8:02:55:81:a7:d6:f7:1d:40:
         d9:b0:21:7c:b4:74:96:db:0c:31:77:49:80:85:96:55:bc:1b:
         17:88:58:a3:8a:29:83:6d:e0:30:f9:38:8e:61:1a:7b:7c:ec:
         1b:b1:a3:e1:ef:4a:fd:e5:e6:36:19:eb:40:ee:1e:9c:73:0e:
         81:e5:76:38:94:5c:6d:a7:02:40:7d:e9:55:e8:f8:8f:76:05:
         c0:7c:ea:46:5b:6a:5c:be:58:f3:60:b0:9f:8f:32:ad:2c:22:
         5f:65:4d:f3:c5:a5:b6:f0:69:83:27:69:e3:72:96:d7:1e:66:
         5c:19:e5:89:09:43:d0:8a:4e:5b:d4:5b:4f:13:7b:85:f7:57:
         ab:33:64:21:40:03:f0:52:66:07:24:55:20:d8:7c:4a:7a:5d:
         90:30:31:ac:61:dc:a0:52:cf:f9:a6:bf:0a:10:13:be:97:de:
         2c:b7:51:4f:30:2a:10:97:91:95:7b:8e:2d:f8:73:8a:83:77:
         a5:34:b6:2f:90:a4:d1:92:1f:b7:ec:36:e9:46:ad:17:f3:41:
         25:53:7d:61:ba:40:88:a8:9e:06:db:86:1e:3e:66:5a:e8:d2:
         40:14:01:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UKu/AECtWyN+51uNXgK0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOGIwZGNiNzlmZTBhZTQ4YmE4MzI2OWVjMTI4Mzg0NzBj
YWU5MGEwHhcNMjYwNjE3MDYwMDQ0WhcNMjYwNjE4MDYwMDQ0WjAzMTEwLwYDVQQD
EygwNTNkOTdlMzE1MTY5ZjYxZDk2NDQ1MjlkZTk5NjBjY2M4ZjJhN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Ucylz416QK00D4UOXljPClbHSJ
UzOZqe5HKmGNIYW9bY9mgnuq205UBW07ZiUrSY0HEODgOLRzX3d60tlR/SoIyF8H
XQJixs0YBY7TPS4MH7fI8FQeJu9sC7buw6FfXg+68LtQp04lIpQyi6l92TzZVM9T
Mm/sAbgTLk38rUuW0arOUq+Pi7POH5CcYI1tDccn88eOJbR6yuIrVP3BBODhxd+i
1oo/1FNDZ3pZtKT59Kg1swfQLhdDBUBQqFnJ2ImnD18mdKMg3GEsxQB7ZR7AYYVH
6PgD/UxvYVsGO9+a9aEmRmaC9t2mukTrxRXGXsq/TJ4cFZXe99yAMFYBAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU9l+MVFp9h2WRFKd6ZYMzI8qejMB8GA1UdIwQY
MBaAFD+LDct5/grki6gyaewSg4RwyukKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRzTnkzbi1DdVNMcURKcDdCS0RoSERLNlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOTA2ZDUtNjNkOC00MWZhLWEyY2Yt
NWMzN2NhN2E1N2E1LzEvUDRzTnkzbi1DdVNMcURKcDdCS0RoSERLNlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mOTA2ZDUtNjNkOC00MWZhLWEyY2YtNWMzN2NhN2E1N2E1
LzEvUDRzTnkzbi1DdVNMcURKcDdCS0RoSERLNlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKZIIOY9
Ma6STxxicdD8Hg91rlHcAKqL2LX22AJVgafW9x1A2bAhfLR0ltsMMXdJgIWWVbwb
F4hYo4opg23gMPk4jmEae3zsG7Gj4e9K/eXmNhnrQO4enHMOgeV2OJRcbacCQH3p
Vej4j3YFwHzqRltqXL5Y82Cwn48yrSwiX2VN88WltvBpgydp43KW1x5mXBnliQlD
0IpOW9RbTxN7hfdXqzNkIUAD8FJmByRVINh8SnpdkDAxrGHcoFLP+aa/ChATvpfe
LLdRTzAqEJeRlXuOLfhzioN3pTS2L5Ck0ZIft+w26UatF/NBJVN9YbpAiKieBtuG
Hj5mWujSQBQBZQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:26:43 2026 by rpki-client