Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
File:                     SgvIUgmAGVIMeOmoC22EyzyrcEI.mft (raw, json)
Hash identifier:          BJN73pmkCh/m+rryrHSpxDDDRmsvkH015a/ua4e9Fig=
Subject key identifier:   60:FC:E0:C4:B9:66:66:AD:CB:31:29:7C:43:BA:EF:F1:80:6E:01:D9
Authority key identifier: 4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
Certificate issuer:       /CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Certificate serial:       019EC0DB08CF6CD1B23EE45AFC8F8BA7557D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
Manifest number:          0192
Signing time:             Sat 13 Jun 2026 12:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:40 +0000
Files and hashes:         1: DZUI_bEIrP-yvThfRpjcY2JDgZ8.asa (hash: RghHL1DuN+HQMkw8GbUaQPmzZB8C45TxXFTAWg1Ry2g=)
                          2: SgvIUgmAGVIMeOmoC22EyzyrcEI.crl (hash: t9ppMY4zmCugPhPL7UFG6NPO/OfdH1udZWQBp5oDlYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:08:cf:6c:d1:b2:3e:e4:5a:fc:8f:8b:a7:55:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
        Validity
            Not Before: Jun 13 12:00:40 2026 GMT
            Not After : Jun 14 12:00:40 2026 GMT
        Subject: CN=60fce0c4b96666adcb31297c43baeff1806e01d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:68:cf:9e:0b:1f:ff:f5:8d:ac:b8:eb:53:
                    8f:97:61:62:2a:4b:77:59:1c:1e:ae:b9:a7:4a:ec:
                    58:4e:f6:0e:7b:58:0b:25:46:15:7a:b0:71:e3:9f:
                    65:da:e1:df:ee:82:46:3d:c3:08:c3:0c:e2:6b:a5:
                    a6:e4:9c:4b:b6:3b:4d:4b:cd:70:d6:ae:28:c6:66:
                    de:9e:e4:5c:61:20:ba:8c:8d:49:39:10:4d:3c:f6:
                    f4:c1:46:1c:07:ac:9e:27:34:5c:0f:06:35:12:7c:
                    b3:a8:6c:f5:73:85:c2:71:fe:3d:8c:56:a8:50:a5:
                    1d:76:4e:5d:30:a1:11:40:d4:d5:47:b4:6e:c6:42:
                    2d:b2:56:91:39:6f:4f:eb:8c:52:00:d0:5b:9d:ac:
                    d7:b9:47:5b:fb:dd:fb:78:d9:50:52:c8:2a:24:67:
                    2d:42:8f:22:f7:07:2d:1c:81:d4:cd:58:98:1a:8d:
                    e7:60:ea:af:f6:a3:37:8d:50:a4:5f:4d:e8:67:e6:
                    a9:42:d0:53:21:c2:70:d7:40:32:82:f5:1a:00:ed:
                    e3:c7:44:41:92:f0:05:43:d0:ae:27:79:90:cd:ae:
                    2f:ef:e6:52:af:8d:5a:92:e2:c6:71:dc:25:fd:92:
                    2e:f4:18:85:d8:ad:e7:d3:9e:89:bd:4a:96:b0:89:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FC:E0:C4:B9:66:66:AD:CB:31:29:7C:43:BA:EF:F1:80:6E:01:D9
            X509v3 Authority Key Identifier:
                keyid:4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:79:f4:1f:2d:35:01:f4:20:60:1e:7e:54:a2:39:f9:b1:
         e2:04:1f:26:32:d3:db:e2:0c:a3:f2:cc:81:97:48:46:47:88:
         3f:b3:73:a2:ae:ce:79:2b:00:89:66:77:1b:76:ff:fe:58:6f:
         fe:84:b0:77:2c:bd:a9:e7:42:d6:f4:7f:a1:e7:e4:bb:42:f5:
         1a:fb:72:64:10:e2:73:e3:f5:d1:f9:8d:20:eb:4a:49:25:b6:
         f4:b9:fb:7e:bd:5d:c0:ed:12:79:ee:25:56:bc:b7:7e:d3:53:
         ff:5f:76:21:20:f4:ed:0f:67:66:11:30:fc:39:a0:23:fc:be:
         21:37:50:5f:5b:09:d1:07:e0:45:fd:b9:53:58:3c:b2:9e:09:
         33:aa:81:66:ec:85:dd:da:a4:16:58:8b:6f:41:6c:b7:18:9d:
         ba:e0:3e:fa:a8:bd:ad:05:e9:b1:ed:f4:98:d8:b8:d0:84:66:
         0d:d9:6f:f7:c8:8b:12:cb:aa:7b:9f:33:c3:77:e4:86:36:0e:
         7d:e7:00:a5:3f:50:92:7f:b6:5c:ae:21:9c:4d:90:ac:3b:ca:
         43:d0:c2:59:2a:ae:e9:e7:d1:4b:68:30:fb:d3:26:d1:ba:2d:
         31:8a:ca:b8:cd:c1:73:f8:db:ed:ea:49:b2:90:f8:dc:ef:5b:
         ed:41:0b:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2wjPbNGyPuRa/I+Lp1V9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMGJjODUyMDk4MDE5NTIwYzc4ZTlhODBiNmQ4NGNiM2Nh
YjcwNDIwHhcNMjYwNjEzMTIwMDQwWhcNMjYwNjE0MTIwMDQwWjAzMTEwLwYDVQQD
Eyg2MGZjZTBjNGI5NjY2NmFkY2IzMTI5N2M0M2JhZWZmMTgwNmUwMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Zoz54LH//1jay461OPl2FiKkt3
WRwerrmnSuxYTvYOe1gLJUYVerBx459l2uHf7oJGPcMIwwzia6Wm5JxLtjtNS81w
1q4oxmbenuRcYSC6jI1JORBNPPb0wUYcB6yeJzRcDwY1EnyzqGz1c4XCcf49jFao
UKUddk5dMKERQNTVR7RuxkItslaROW9P64xSANBbnazXuUdb+937eNlQUsgqJGct
Qo8i9wctHIHUzViYGo3nYOqv9qM3jVCkX03oZ+apQtBTIcJw10AygvUaAO3jx0RB
kvAFQ9CuJ3mQza4v7+ZSr41akuLGcdwl/ZIu9BiF2K3n056JvUqWsIk8SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD84MS5ZmatyzEpfEO67/GAbgHZMB8GA1UdIwQY
MBaAFEoLyFIJgBlSDHjpqAtthMs8q3BCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2d2SVVnbUFHVklNZU9tb0MyMkV5enlyY0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jMDhjMDktOTNkMC00YWQ4LWE4MDkt
ZGFhYzgyZDI3ZjYwLzEvU2d2SVVnbUFHVklNZU9tb0MyMkV5enlyY0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jMDhjMDktOTNkMC00YWQ4LWE4MDktZGFhYzgyZDI3ZjYw
LzEvU2d2SVVnbUFHVklNZU9tb0MyMkV5enlyY0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOZ59B8t
NQH0IGAeflSiOfmx4gQfJjLT2+IMo/LMgZdIRkeIP7Nzoq7OeSsAiWZ3G3b//lhv
/oSwdyy9qedC1vR/oefku0L1GvtyZBDic+P10fmNIOtKSSW29Ln7fr1dwO0See4l
Vry3ftNT/192ISD07Q9nZhEw/DmgI/y+ITdQX1sJ0QfgRf25U1g8sp4JM6qBZuyF
3dqkFliLb0FstxiduuA++qi9rQXpse30mNi40IRmDdlv98iLEsuqe58zw3fkhjYO
fecApT9Qkn+2XK4hnE2QrDvKQ9DCWSqu6efRS2gw+9Mm0botMYrKuM3Bc/jb7epJ
spD43O9b7UEL4g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:21 2026 by rpki-client