Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File:                     IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier:          cExjn2fHfhL3zmXUradeKvdUebhp89pQXsOxkxeyJNA=
Subject key identifier:   D7:64:D8:8F:D1:37:E4:55:4F:59:E5:28:00:11:43:07:AD:E7:46:85
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer:       /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial:       019EC3375EB516DB6815936E4EF2B4687689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number:          1232
Signing time:             Sat 13 Jun 2026 23:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:46 +0000
Files and hashes:         1: 3yOJ06gfUKk-2XYdWHLIAlWgfEc.roa (hash: nXcj7d6dSu1swvQGzGjJKVLnGkefzXVXrhP3pXEGcwM=)
                          2: 7rB4dVkLekdvJu2WV1aBm26tfk4.roa (hash: dQXlWyfYcUEq4/cQMbVBV+QLb2ARWgSkORhGuX+vIpo=)
                          3: BDnFJ4jYiW4UB0OWqHm0E81ZFGk.roa (hash: kHvW0Bcsv+dU2wBHMm0QcL2FR83ZCdT4yyeLFS4eeP8=)
                          4: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: 0HAcNm/9N/USeZ041awJ+pelAuDzVJHO2EmWhtkv5/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:5e:b5:16:db:68:15:93:6e:4e:f2:b4:68:76:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
        Validity
            Not Before: Jun 13 23:00:46 2026 GMT
            Not After : Jun 14 23:00:46 2026 GMT
        Subject: CN=d764d88fd137e4554f59e52800114307ade74685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:d6:62:6f:c0:b4:b1:06:25:ec:77:bb:91:
                    2d:30:9d:94:c6:1c:04:cc:df:48:c4:21:39:c2:36:
                    54:7b:ef:06:a1:23:d8:ca:aa:77:eb:b4:de:e2:77:
                    3b:75:48:d5:0d:75:1c:5d:b6:08:1c:c9:ae:8a:c5:
                    21:37:d0:83:de:7f:b8:90:22:fd:61:7f:72:e0:24:
                    4a:30:06:8d:23:72:34:26:9f:e0:5a:da:e2:59:47:
                    73:2e:c4:c7:0e:60:33:f4:c9:b4:14:04:e6:9d:ce:
                    7a:d7:7b:21:5b:a1:a5:60:a9:cf:2e:7e:9c:da:2f:
                    7a:69:fe:8a:d9:71:8a:9f:4b:10:3a:5f:c7:fd:87:
                    98:70:d4:61:7b:36:2b:f8:d5:9a:74:21:ee:c2:8d:
                    fa:99:e4:cc:e4:ba:a3:2e:74:18:94:4e:4b:5d:0d:
                    7a:91:1c:72:95:73:c9:45:a7:09:05:3e:c1:44:81:
                    72:c5:8d:b8:8c:40:e3:fe:f6:5c:d2:6a:18:e9:54:
                    04:ec:99:f6:64:dc:e8:55:74:e6:04:c0:90:28:1c:
                    f2:3b:e0:19:b7:64:c7:34:8b:5b:e8:29:4e:41:0c:
                    8a:f5:32:5e:a1:1c:1c:6a:d1:da:15:ca:ec:43:af:
                    3e:50:be:b9:a2:18:5c:72:cf:3c:47:7d:78:78:c2:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:64:D8:8F:D1:37:E4:55:4F:59:E5:28:00:11:43:07:AD:E7:46:85
            X509v3 Authority Key Identifier:
                keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:8a:9d:d9:ad:54:e3:05:07:ca:36:e4:0f:9c:eb:bc:d4:
         12:a5:d4:82:59:99:d9:51:e6:e2:a2:62:f0:89:da:39:ca:74:
         7b:b7:e9:dd:7a:b9:1a:37:1d:63:01:f1:b4:0e:a6:bc:55:66:
         e1:9b:5d:ac:61:da:18:c3:53:67:42:3a:15:0e:bc:01:b7:a2:
         18:bc:16:bc:2f:dd:8b:a9:59:93:67:91:3c:42:5f:39:c6:ed:
         50:5c:2b:8d:19:c7:df:05:31:42:cb:7e:31:38:6a:39:54:8f:
         86:3b:7b:2a:24:ad:ea:07:a4:5b:41:ae:a4:a4:f3:99:be:91:
         4a:a8:8f:d7:d6:b2:a1:d0:97:6e:5a:ef:30:f7:b3:bb:6e:da:
         6b:d0:5b:27:ca:4c:8a:b2:60:16:ac:60:d3:c3:93:18:c0:42:
         64:d0:a3:d0:65:2c:11:e6:53:c6:06:be:f0:37:46:cb:26:82:
         38:5d:b2:8b:4a:03:9e:95:06:f1:a3:d0:9f:14:29:8a:7f:53:
         d4:cb:a7:1a:ed:92:a2:23:d5:69:30:a5:c1:8a:64:c1:5c:9e:
         ee:68:06:2f:b7:1d:72:87:f0:83:be:4a:45:58:57:c5:73:5b:
         08:8c:5d:ed:89:09:54:41:41:1a:25:ea:57:55:a1:31:54:0b:
         00:5e:3c:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN161FttoFZNuTvK0aHaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl
MDJkYmIwHhcNMjYwNjEzMjMwMDQ2WhcNMjYwNjE0MjMwMDQ2WjAzMTEwLwYDVQQD
EyhkNzY0ZDg4ZmQxMzdlNDU1NGY1OWU1MjgwMDExNDMwN2FkZTc0Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjvWYm/AtLEGJex3u5EtMJ2UxhwE
zN9IxCE5wjZUe+8GoSPYyqp367Te4nc7dUjVDXUcXbYIHMmuisUhN9CD3n+4kCL9
YX9y4CRKMAaNI3I0Jp/gWtriWUdzLsTHDmAz9Mm0FATmnc5613shW6GlYKnPLn6c
2i96af6K2XGKn0sQOl/H/YeYcNRhezYr+NWadCHuwo36meTM5LqjLnQYlE5LXQ16
kRxylXPJRacJBT7BRIFyxY24jEDj/vZc0moY6VQE7Jn2ZNzoVXTmBMCQKBzyO+AZ
t2THNItb6ClOQQyK9TJeoRwcatHaFcrsQ68+UL65ohhccs88R314eMIZBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdk2I/RN+RVT1nlKAARQwet50aFMB8GA1UdIwQY
MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut
OThkMmZlZTBmODdhLzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh
LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgaKndmt
VOMFB8o25A+c67zUEqXUglmZ2VHm4qJi8InaOcp0e7fp3Xq5GjcdYwHxtA6mvFVm
4ZtdrGHaGMNTZ0I6FQ68AbeiGLwWvC/di6lZk2eRPEJfOcbtUFwrjRnH3wUxQst+
MThqOVSPhjt7KiSt6gekW0GupKTzmb6RSqiP19ayodCXblrvMPezu27aa9BbJ8pM
irJgFqxg08OTGMBCZNCj0GUsEeZTxga+8DdGyyaCOF2yi0oDnpUG8aPQnxQpin9T
1MunGu2SoiPVaTClwYpkwVye7mgGL7cdcofwg75KRVhXxXNbCIxd7YkJVEFBGiXq
V1WhMVQLAF48vA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 10:12:28 2026 by rpki-client