Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          C44fvfUJmjQer2Fb4OgA0zPBneEgYjarhLHzP2nIPfs=
Subject key identifier:   C2:EA:7F:53:43:3C:A5:DE:FE:1F:C6:9C:A0:CB:FF:5B:C4:3C:FA:67
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       019EBF5A78E9FC6165827A02528660432139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          196F
Signing time:             Sat 13 Jun 2026 05:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:37 +0000
Files and hashes:         1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: ZOxh5sLxiYxr92ZfBUTMGNHiT57VhDM/Ci5ZofSFTcs=)
                          2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
                          3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
                          4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
                          5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
                          6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
                          7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
                          8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
                          9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:78:e9:fc:61:65:82:7a:02:52:86:60:43:21:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Jun 13 05:00:37 2026 GMT
            Not After : Jun 14 05:00:37 2026 GMT
        Subject: CN=c2ea7f53433ca5defe1fc69ca0cbff5bc43cfa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:ba:32:55:22:6d:88:c1:d0:3a:fd:a4:0b:
                    4c:6c:cb:6b:dc:c1:74:7a:ea:ad:2f:71:d7:d3:ae:
                    29:e9:84:67:1f:d1:7f:04:08:46:f0:42:92:ab:96:
                    ec:9a:5b:ca:b8:18:40:92:d7:d0:52:cf:6b:b2:22:
                    75:23:24:8e:ad:73:62:87:fb:ad:a9:9e:36:6f:47:
                    cd:eb:a8:d5:15:b6:bf:14:bd:7d:8b:1c:af:ae:34:
                    47:7e:db:f8:42:b9:a6:ac:90:d5:69:96:f9:c9:3f:
                    c6:0b:6b:4d:a8:52:41:17:85:56:8f:6c:2f:6c:af:
                    57:76:b5:a9:63:89:28:97:3e:66:49:63:49:86:64:
                    ae:c8:6b:66:b8:53:7c:89:99:41:c3:0d:e4:54:16:
                    ba:82:6b:76:88:8f:bb:6a:4c:82:5b:a2:fd:42:04:
                    31:06:af:44:cd:10:e6:2b:46:56:77:3d:1c:6e:15:
                    3f:73:21:72:6a:4c:15:13:5b:17:4f:db:cb:01:97:
                    e6:ed:e2:ed:89:cb:1b:fe:a9:e8:ad:6a:71:ed:f4:
                    7a:45:d2:51:c5:55:e1:fa:17:18:9d:60:8e:33:99:
                    1a:9f:b0:cc:5a:1d:f9:e2:0f:db:d0:d7:ee:d2:9a:
                    08:81:79:44:d5:55:4c:87:a3:b4:81:6c:ca:5a:d5:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:7F:53:43:3C:A5:DE:FE:1F:C6:9C:A0:CB:FF:5B:C4:3C:FA:67
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:88:de:30:cd:6d:78:4b:e8:ea:2a:20:53:e9:7c:68:18:6e:
         22:17:e8:5f:d8:74:f4:b9:e1:65:a9:14:b1:68:09:e4:13:bf:
         cb:b3:da:50:cd:82:3f:0c:38:ec:99:98:e2:4a:c8:e4:a6:ce:
         24:85:55:bd:ee:60:f9:ad:b2:3e:33:c3:89:a3:a7:65:13:a9:
         54:f5:b1:77:27:5f:af:be:0a:69:41:5e:fd:40:f3:21:1b:d3:
         5e:3f:3d:3c:2a:ff:25:28:50:b8:8a:98:2c:ba:8b:7b:ef:e5:
         3a:fd:39:1f:66:5c:88:1a:f4:e0:09:f8:4f:d7:31:77:ca:78:
         37:fd:33:51:71:05:91:aa:36:af:1f:40:c8:78:f0:23:79:31:
         bf:ae:04:9e:83:21:94:12:b3:c6:41:56:ca:1f:96:38:46:43:
         b6:64:83:60:11:79:41:22:0f:05:c2:b1:26:0c:1f:20:b3:a7:
         9e:85:d9:43:22:c7:53:33:a4:74:f2:77:15:7e:cd:de:83:50:
         21:92:18:99:11:54:75:6b:c9:18:f7:34:22:d4:2d:30:e3:e0:
         d1:85:79:51:7a:a4:4d:bd:be:4a:af:1e:03:f9:9d:b6:e2:37:
         03:1e:a8:d8:59:df:4a:00:89:b6:f2:39:2b:b8:49:24:ac:23:
         50:68:b4:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wnjp/GFlgnoCUoZgQyE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw
ODc5NDcwHhcNMjYwNjEzMDUwMDM3WhcNMjYwNjE0MDUwMDM3WjAzMTEwLwYDVQQD
EyhjMmVhN2Y1MzQzM2NhNWRlZmUxZmM2OWNhMGNiZmY1YmM0M2NmYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmum6MlUibYjB0Dr9pAtMbMtr3MF0
euqtL3HX064p6YRnH9F/BAhG8EKSq5bsmlvKuBhAktfQUs9rsiJ1IySOrXNih/ut
qZ42b0fN66jVFba/FL19ixyvrjRHftv4QrmmrJDVaZb5yT/GC2tNqFJBF4VWj2wv
bK9XdrWpY4kolz5mSWNJhmSuyGtmuFN8iZlBww3kVBa6gmt2iI+7akyCW6L9QgQx
Bq9EzRDmK0ZWdz0cbhU/cyFyakwVE1sXT9vLAZfm7eLticsb/qnorWpx7fR6RdJR
xVXh+hcYnWCOM5kan7DMWh354g/b0Nfu0poIgXlE1VVMh6O0gWzKWtXGOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLqf1NDPKXe/h/GnKDL/1vEPPpnMB8GA1UdIwQY
MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt
NTk5NTc3ODdiMDE1LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1
LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYjeMM1t
eEvo6iogU+l8aBhuIhfoX9h09LnhZakUsWgJ5BO/y7PaUM2CPww47JmY4krI5KbO
JIVVve5g+a2yPjPDiaOnZROpVPWxdydfr74KaUFe/UDzIRvTXj89PCr/JShQuIqY
LLqLe+/lOv05H2ZciBr04An4T9cxd8p4N/0zUXEFkao2rx9AyHjwI3kxv64EnoMh
lBKzxkFWyh+WOEZDtmSDYBF5QSIPBcKxJgwfILOnnoXZQyLHUzOkdPJ3FX7N3oNQ
IZIYmRFUdWvJGPc0ItQtMOPg0YV5UXqkTb2+Sq8eA/mdtuI3Ax6o2FnfSgCJtvI5
K7hJJKwjUGi0Hg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:11 2026 by rpki-client