Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File:                     pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier:          8yfm/ehu7jcZlB137thrnZfNPCdH9N1tBzbHfmeLHvg=
Subject key identifier:   E5:32:39:0A:81:23:49:5D:EC:D3:7D:B2:5F:CC:4D:34:26:7C:A5:83
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer:       /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial:       019EC292B571027B61D30753069B346EFEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number:          02F6
Signing time:             Sat 13 Jun 2026 20:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:55 +0000
Files and hashes:         1: jYQejTs_VCB1cpCr7qrPeVI5_VI.roa (hash: RuEfXGQ8FdYs+It13SdSHwiFRFM5ZGec+HI06Kuq/Ik=)
                          2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: 6iSZ11Uu/cCBMLCgFkFlTOoZo8qWlrqzgD0z7BvR9UA=)
                          3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:b5:71:02:7b:61:d3:07:53:06:9b:34:6e:fe:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
        Validity
            Not Before: Jun 13 20:00:55 2026 GMT
            Not After : Jun 14 20:00:55 2026 GMT
        Subject: CN=e532390a8123495decd37db25fcc4d34267ca583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:89:3c:4c:84:97:52:ca:0b:6b:d5:67:83:
                    70:b2:4d:4e:7b:82:2a:89:6d:e8:35:df:fa:f6:9f:
                    4b:ea:8b:a7:d4:ca:ea:1f:e2:bd:7d:8e:97:33:f7:
                    34:a9:7b:30:00:97:ba:2b:c8:61:fa:b3:1f:fb:e7:
                    51:1f:75:2f:0f:51:03:4d:26:61:b5:fe:c0:54:eb:
                    cd:89:3a:e2:42:e8:87:a2:91:7b:ef:bb:3e:15:1f:
                    3f:f3:32:00:f3:ee:b1:e1:11:19:2a:87:e3:86:0e:
                    d6:66:8f:cc:db:05:a9:f5:79:65:b8:82:b3:22:26:
                    07:77:03:47:04:6e:8c:6a:c1:13:27:48:dd:ae:53:
                    c1:b4:25:9b:23:4b:64:6d:61:0f:a3:4a:ef:1f:3f:
                    96:b2:2b:12:14:0f:d6:ab:11:22:60:f0:8a:f8:cc:
                    e2:7a:4c:03:91:80:ae:9c:bf:56:1e:03:14:7f:fa:
                    94:43:a0:c6:bc:ba:8d:08:3b:79:81:67:da:98:ad:
                    28:49:79:49:29:81:ff:d6:d0:96:f2:66:ca:cb:48:
                    99:c9:11:a4:2b:75:b1:0e:93:c7:ba:1f:36:a5:84:
                    bc:ae:ae:93:78:bc:2b:43:70:9d:dc:dd:95:66:51:
                    3e:14:df:2b:c4:9d:70:70:27:54:9d:2a:9d:63:89:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:32:39:0A:81:23:49:5D:EC:D3:7D:B2:5F:CC:4D:34:26:7C:A5:83
            X509v3 Authority Key Identifier:
                keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:64:f2:5d:26:d9:2e:64:90:d5:5f:11:17:b6:f6:d6:31:
         30:fc:05:62:61:36:c8:40:96:20:19:39:4b:1b:78:73:f8:82:
         13:7f:7e:a3:a7:00:98:9d:27:1b:f6:d7:02:e8:40:ac:73:ff:
         57:e2:27:6c:93:d7:2b:8c:8c:cd:b8:49:ae:c1:84:28:b5:8c:
         35:c6:92:b9:67:0f:0f:14:26:f1:32:83:58:d9:c2:b5:9d:f6:
         a9:27:f7:4c:2c:d8:02:36:f3:21:c7:00:9c:ff:af:79:d4:47:
         74:25:40:5d:d2:bf:f0:84:d6:e4:ce:e6:a5:76:86:fb:5e:00:
         e0:a5:75:45:e4:18:fa:78:f7:61:48:74:65:95:e5:46:1a:0f:
         06:c1:46:8b:a7:81:db:ed:2c:d2:af:d2:40:38:ab:c5:c8:70:
         80:01:31:0b:98:15:72:e1:3c:98:61:88:08:1e:b9:e3:04:99:
         e7:eb:0a:65:84:30:8f:01:1f:8c:89:16:d4:f7:78:2e:b1:80:
         34:04:e4:d6:5a:b4:5f:33:4e:50:ab:92:bc:6d:e4:21:d6:dd:
         c2:61:a7:6d:04:d6:6d:d1:f1:f7:5c:d9:5b:45:51:fe:de:8d:
         16:f3:d1:c9:30:0a:9a:fd:9e:c3:e1:b5:f8:39:e2:fb:a7:51:
         97:d6:5b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkrVxAnth0wdTBps0bv6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjZkNjU3YzBmYTIxODI4ZDMxMzUwNzM1NGRlYzE0ODE1
ODBlZDYwHhcNMjYwNjEzMjAwMDU1WhcNMjYwNjE0MjAwMDU1WjAzMTEwLwYDVQQD
EyhlNTMyMzkwYTgxMjM0OTVkZWNkMzdkYjI1ZmNjNGQzNDI2N2NhNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngqJPEyEl1LKC2vVZ4Nwsk1Oe4Iq
iW3oNd/69p9L6oun1MrqH+K9fY6XM/c0qXswAJe6K8hh+rMf++dRH3UvD1EDTSZh
tf7AVOvNiTriQuiHopF777s+FR8/8zIA8+6x4REZKofjhg7WZo/M2wWp9XlluIKz
IiYHdwNHBG6MasETJ0jdrlPBtCWbI0tkbWEPo0rvHz+WsisSFA/WqxEiYPCK+Mzi
ekwDkYCunL9WHgMUf/qUQ6DGvLqNCDt5gWfamK0oSXlJKYH/1tCW8mbKy0iZyRGk
K3WxDpPHuh82pYS8rq6TeLwrQ3Cd3N2VZlE+FN8rxJ1wcCdUnSqdY4lsHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUyOQqBI0ld7NN9sl/MTTQmfKWDMB8GA1UdIwQY
MBaAFKT21lfA+iGCjTE1BzVN7BSBWA7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYt
NWMyNzYzNjQ4ZjFjLzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYtNWMyNzYzNjQ4ZjFj
LzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4xk8l0m
2S5kkNVfERe29tYxMPwFYmE2yECWIBk5Sxt4c/iCE39+o6cAmJ0nG/bXAuhArHP/
V+InbJPXK4yMzbhJrsGEKLWMNcaSuWcPDxQm8TKDWNnCtZ32qSf3TCzYAjbzIccA
nP+vedRHdCVAXdK/8ITW5M7mpXaG+14A4KV1ReQY+nj3YUh0ZZXlRhoPBsFGi6eB
2+0s0q/SQDirxchwgAExC5gVcuE8mGGICB654wSZ5+sKZYQwjwEfjIkW1Pd4LrGA
NATk1lq0XzNOUKuSvG3kIdbdwmGnbQTWbdHx91zZW0VR/t6NFvPRyTAKmv2ew+G1
+Dni+6dRl9Zbag==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:31:49 2026 by rpki-client