Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File:                     Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier:          DflUclCBZtyDLUKqxagnZ+qP68RLboeiFmTjZKjG4sE=
Subject key identifier:   47:6C:AB:6E:82:8F:65:85:59:0A:22:AE:F2:8D:3F:CC:1E:A1:CA:D0
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer:       /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial:       019EC2C9D0165CA02A1C6087F6EA03CE5174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number:          190B
Signing time:             Sat 13 Jun 2026 21:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:06 +0000
Files and hashes:         1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: Tixq71ziL2We3wB+5YDSqN241JYAUTyWkqawmBvpde4=)
                          2: ezywn8EPx5ODLOytvX7dXsPm7gc.roa (hash: geqaFC8LHCTX2LcxH4kfFFCGPOyVbzF9N0haayABzHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:d0:16:5c:a0:2a:1c:60:87:f6:ea:03:ce:51:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
        Validity
            Not Before: Jun 13 21:01:06 2026 GMT
            Not After : Jun 14 21:01:06 2026 GMT
        Subject: CN=476cab6e828f6585590a22aef28d3fcc1ea1cad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:e7:f7:b5:cf:a5:49:a0:fd:ca:07:d6:bb:
                    ae:23:ac:99:c1:04:92:d3:21:4e:44:40:b0:26:2f:
                    27:d7:92:7a:0e:4f:a5:fa:07:e1:98:96:4b:26:54:
                    c7:01:64:1a:18:f3:65:fa:03:7d:2c:af:a6:9e:f7:
                    35:07:ab:67:9c:6c:e8:1d:0a:e5:b8:07:01:92:8a:
                    49:76:ac:f3:07:de:59:99:5a:13:15:b9:f9:25:84:
                    de:b0:28:bb:ee:c4:7d:1e:7a:7a:b5:a6:19:02:38:
                    70:f4:3c:24:f9:67:6c:a6:e7:39:14:a3:10:57:57:
                    4e:ce:ee:ec:5d:c6:e0:be:42:92:f4:43:78:23:36:
                    5c:01:b0:70:b8:b6:f5:2c:d7:88:30:6c:39:1f:bc:
                    5c:22:71:4f:4b:e6:c2:65:e2:ba:e9:5f:06:d3:f6:
                    f6:12:f2:4a:ea:bc:bf:2c:01:9f:2d:84:09:f3:63:
                    f3:a6:50:44:56:cc:ce:d1:b8:a4:ca:fe:34:0c:99:
                    97:7f:c3:6d:41:0f:3e:4b:ac:e3:49:5c:eb:e2:7b:
                    6b:89:34:95:d0:c9:5c:84:b7:33:87:65:72:aa:60:
                    b0:63:bf:e3:19:90:0f:c1:30:8f:31:08:58:63:30:
                    49:5e:05:79:e6:c4:e1:09:eb:25:f6:1f:0d:9f:4e:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6C:AB:6E:82:8F:65:85:59:0A:22:AE:F2:8D:3F:CC:1E:A1:CA:D0
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:22:84:ab:bf:c9:d4:bc:7f:6b:be:90:b7:d6:62:fb:0c:57:
         6a:e4:42:75:9f:5d:93:33:70:43:a4:59:35:71:2d:cb:dd:e5:
         5e:dc:6f:41:86:bb:5d:a0:40:3e:6b:94:d2:c6:87:cb:07:10:
         8f:d3:c7:34:fb:3d:af:1b:bb:fa:d0:44:91:f3:20:a1:c1:ca:
         3b:6f:26:34:c8:f8:07:27:11:1f:a8:29:f8:eb:34:46:5c:4f:
         5e:04:09:59:9a:8e:49:a6:5c:6b:8f:17:26:5f:fe:8e:0d:7a:
         8f:86:67:7d:57:b7:a3:ae:ac:56:bd:42:05:32:8d:05:76:cd:
         0c:b4:6a:5f:54:a7:90:91:dd:21:e4:f1:07:a8:f7:7a:68:3e:
         47:00:93:f0:6e:f9:7c:b9:16:07:89:09:a8:49:ce:7b:62:53:
         b5:44:93:14:7f:6c:55:c4:e0:ba:05:92:14:30:4d:f8:eb:8e:
         b2:93:3a:ca:2a:13:71:9f:05:93:18:6b:23:81:2c:c8:62:a3:
         d7:35:a9:bf:83:81:c5:56:56:77:ac:f5:e1:65:d8:ee:09:ec:
         cb:0d:18:23:fc:8a:56:de:b9:82:28:ce:24:37:e2:52:e9:ca:
         e6:00:f1:f0:3f:1c:c7:bf:15:ec:08:b9:b3:fb:6c:1d:0f:b2:
         70:f0:b1:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CydAWXKAqHGCH9uoDzlF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5
NjcyYjcwHhcNMjYwNjEzMjEwMTA2WhcNMjYwNjE0MjEwMTA2WjAzMTEwLwYDVQQD
Eyg0NzZjYWI2ZTgyOGY2NTg1NTkwYTIyYWVmMjhkM2ZjYzFlYTFjYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3n97XPpUmg/coH1ruuI6yZwQSS
0yFORECwJi8n15J6Dk+l+gfhmJZLJlTHAWQaGPNl+gN9LK+mnvc1B6tnnGzoHQrl
uAcBkopJdqzzB95ZmVoTFbn5JYTesCi77sR9Hnp6taYZAjhw9Dwk+Wdspuc5FKMQ
V1dOzu7sXcbgvkKS9EN4IzZcAbBwuLb1LNeIMGw5H7xcInFPS+bCZeK66V8G0/b2
EvJK6ry/LAGfLYQJ82PzplBEVszO0bikyv40DJmXf8NtQQ8+S6zjSVzr4ntriTSV
0MlchLczh2VyqmCwY7/jGZAPwTCPMQhYYzBJXgV55sThCesl9h8Nn07KbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdsq26Cj2WFWQoirvKNP8weocrQMB8GA1UdIwQY
MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt
ZTg0Y2IxZGEyMWJkLzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk
LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCKEq7/J
1Lx/a76Qt9Zi+wxXauRCdZ9dkzNwQ6RZNXEty93lXtxvQYa7XaBAPmuU0saHywcQ
j9PHNPs9rxu7+tBEkfMgocHKO28mNMj4BycRH6gp+Os0RlxPXgQJWZqOSaZca48X
Jl/+jg16j4ZnfVe3o66sVr1CBTKNBXbNDLRqX1SnkJHdIeTxB6j3emg+RwCT8G75
fLkWB4kJqEnOe2JTtUSTFH9sVcTgugWSFDBN+OuOspM6yioTcZ8FkxhrI4EsyGKj
1zWpv4OBxVZWd6z14WXY7gnsyw0YI/yKVt65gijOJDfiUunK5gDx8D8cx78V7Ai5
s/tsHQ+ycPCx3A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:14:47 2026 by rpki-client