Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          f2zNWk9IzYsESdS+nr2Ae7xZ0TCeTwVes8zZfiejLy0=
Subject key identifier:   10:E1:9F:F0:0B:82:52:51:9B:2D:A4:9E:2D:CB:FD:4A:07:53:69:33
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       019EBFC8183715EBA8D2B1783E4BAAF53A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          12F2
Signing time:             Sat 13 Jun 2026 07:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:22 +0000
Files and hashes:         1: AczQ5m07bagbCSpYHKyOOUGJiuU.roa (hash: ZZkvh7a+nFDXqMju+v84npxtkZQE+y45PmWF7YuV5vg=)
                          2: E50dRzelevPp0RPUUn-X1whUhzs.roa (hash: ESKLNPEXcUQlYreIgYSRyGc6RpOOENWjDiinLW02gqM=)
                          3: KnXc9wIdUwOgGPZNVY_TSbLRRoY.roa (hash: Ur+szLOeyaAy0p6WFfKNCA4+hET9D0q8Orh268HfdLU=)
                          4: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: /PDnZydsOqHkak6CSb4twrZUfhkW8YX90oYsud/VwKU=)
                          5: _YrGQaV-xv0pIG914t75tY-lgq4.roa (hash: mceOdmff8pDALeUaOfa99NehQO4QsbAd1TsnHGDmlpY=)
                          6: fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa (hash: 8HFUKsLTWzFpdFnaVvVRZkBC3eF7vcFOlN74+dbWE3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:18:37:15:eb:a8:d2:b1:78:3e:4b:aa:f5:3a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Jun 13 07:00:22 2026 GMT
            Not After : Jun 14 07:00:22 2026 GMT
        Subject: CN=10e19ff00b8252519b2da49e2dcbfd4a07536933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:37:00:75:e0:3a:99:22:6e:fc:b9:72:05:
                    f5:9a:65:b3:46:1a:2a:be:48:60:ca:7b:86:aa:6c:
                    21:64:70:98:7b:44:8f:4b:47:03:2c:9c:58:79:6b:
                    11:84:21:57:b7:dc:e6:f5:43:ca:86:e4:31:d9:a0:
                    01:cc:8a:b9:be:32:57:25:ed:e2:ca:91:57:6c:12:
                    3a:7a:80:55:a0:b6:9d:30:53:93:7c:77:20:5e:35:
                    32:f5:1b:94:de:6d:01:1f:4c:23:42:8b:c7:17:86:
                    a4:c2:dd:49:f2:d6:a7:ca:de:69:ee:68:34:1d:44:
                    32:73:94:65:d5:a4:b7:79:70:3e:2d:89:94:2b:dd:
                    43:4b:4d:de:87:44:a3:0c:58:04:3e:78:8b:3b:47:
                    f4:01:f7:da:14:d1:88:12:01:db:f7:01:d7:d1:b5:
                    c6:fa:36:11:4f:a2:7c:24:09:00:e1:3f:04:f3:1d:
                    f5:21:ff:c7:61:87:7d:72:48:1f:0b:77:f3:78:37:
                    fc:56:a4:82:d8:4a:94:2e:da:3c:6d:3b:3c:e9:93:
                    ac:f8:2e:99:a5:14:90:2b:c7:60:8d:a4:ac:be:bd:
                    f1:34:e3:3b:33:7c:55:d8:4f:a8:16:bd:be:cc:59:
                    9d:7d:79:1d:b9:25:74:b9:2c:8f:77:9b:dc:9c:7a:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:9F:F0:0B:82:52:51:9B:2D:A4:9E:2D:CB:FD:4A:07:53:69:33
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a4:f1:48:59:1a:7a:8c:6b:66:6d:2d:56:61:9b:f5:e2:4c:
         d8:69:09:01:ad:7b:7c:d8:83:e1:0b:f9:24:79:fc:bb:a7:99:
         1e:4a:b4:2b:a1:84:1f:d8:86:e1:b8:e4:6e:4f:ec:88:49:14:
         e5:2e:8c:70:c5:c1:3d:ea:ad:6f:46:4a:95:ff:41:6f:fc:54:
         4e:fb:93:0a:e5:54:b5:38:ff:b7:82:43:f8:12:8a:f3:6f:5c:
         1b:0d:9a:f5:42:c5:99:0e:e4:e3:1d:af:dd:1d:a5:36:7f:37:
         ec:9e:28:d1:1c:a0:b8:64:9b:6d:a1:ad:c0:5b:b6:42:66:42:
         81:a6:f2:0b:05:e8:1b:f8:6e:84:e6:6a:f9:d2:41:a4:a4:af:
         0b:78:b4:d8:71:78:08:10:88:b9:47:71:97:8d:02:79:8c:4e:
         3f:4b:de:99:db:03:bc:50:2c:2c:5e:11:dc:91:a9:bb:be:f1:
         a6:03:98:0c:00:78:40:21:72:14:06:b8:cc:8f:42:b2:af:39:
         0c:8b:a4:08:10:b0:e0:61:0e:92:da:46:69:4f:92:6b:75:f1:
         ee:4e:a9:e1:97:43:ab:37:7f:51:cc:56:41:ab:bf:a6:3f:19:
         11:53:07:1e:fe:ef:c5:b1:7d:a4:4f:e4:b0:35:63:5a:9d:5c:
         cb:46:b7:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yBg3Feuo0rF4Pkuq9ToZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMjYzOWIzNWU1ZDlkMGZiMzY5NmZlMmZkNjFjYjZmNGMz
ZmE1MDQwHhcNMjYwNjEzMDcwMDIyWhcNMjYwNjE0MDcwMDIyWjAzMTEwLwYDVQQD
EygxMGUxOWZmMDBiODI1MjUxOWIyZGE0OWUyZGNiZmQ0YTA3NTM2OTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC43AHXgOpkibvy5cgX1mmWzRhoq
vkhgynuGqmwhZHCYe0SPS0cDLJxYeWsRhCFXt9zm9UPKhuQx2aABzIq5vjJXJe3i
ypFXbBI6eoBVoLadMFOTfHcgXjUy9RuU3m0BH0wjQovHF4akwt1J8tanyt5p7mg0
HUQyc5Rl1aS3eXA+LYmUK91DS03eh0SjDFgEPniLO0f0AffaFNGIEgHb9wHX0bXG
+jYRT6J8JAkA4T8E8x31If/HYYd9ckgfC3fzeDf8VqSC2EqULto8bTs86ZOs+C6Z
pRSQK8dgjaSsvr3xNOM7M3xV2E+oFr2+zFmdfXkduSV0uSyPd5vcnHre8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDhn/ALglJRmy2kni3L/UoHU2kzMB8GA1UdIwQY
MBaAFDImObNeXZ0Ps2lv4v1hy29MP6UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NjJmYmYtNTU3Ni00NTk1LTg5MmIt
YjViM2FlYWU5OGVhLzEvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82NjJmYmYtNTU3Ni00NTk1LTg5MmItYjViM2FlYWU5OGVh
LzEvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqTxSFka
eoxrZm0tVmGb9eJM2GkJAa17fNiD4Qv5JHn8u6eZHkq0K6GEH9iG4bjkbk/siEkU
5S6McMXBPeqtb0ZKlf9Bb/xUTvuTCuVUtTj/t4JD+BKK829cGw2a9ULFmQ7k4x2v
3R2lNn837J4o0RyguGSbbaGtwFu2QmZCgabyCwXoG/huhOZq+dJBpKSvC3i02HF4
CBCIuUdxl40CeYxOP0vemdsDvFAsLF4R3JGpu77xpgOYDAB4QCFyFAa4zI9Csq85
DIukCBCw4GEOktpGaU+Sa3Xx7k6p4ZdDqzd/UcxWQau/pj8ZEVMHHv7vxbF9pE/k
sDVjWp1cy0a38Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:50:24 2026 by rpki-client