Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File:                     tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier:          yQExJVjaZcPK9+CfHPAAcnslCSROu96Nvzh6NjmfYVw=
Subject key identifier:   78:7B:8D:79:A0:C4:1C:4D:1F:4E:B8:47:CA:DF:72:7E:71:2D:6A:79
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer:       /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial:       019EC11216C4356D0FF61ADDC9A5ACE6A880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 13:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:48 +0000
Files and hashes:         1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
                          2: _dnntVUjWH4EUr4UpgbEErzH-do.asa (hash: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY=)
                          3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: f8yZraPCllMKBx9UccU24a3ZzFEN+OjWDnLCJMg3THc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:16:c4:35:6d:0f:f6:1a:dd:c9:a5:ac:e6:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
        Validity
            Not Before: Jun 13 13:00:48 2026 GMT
            Not After : Jun 14 13:00:48 2026 GMT
        Subject: CN=787b8d79a0c41c4d1f4eb847cadf727e712d6a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:99:f8:7b:28:5f:93:1b:d6:91:d0:d6:54:
                    b2:ff:9e:1a:16:22:3f:d6:30:ae:5d:28:31:0f:a6:
                    66:0e:43:cc:91:8f:3d:07:bd:38:ab:8e:7f:77:db:
                    32:00:fe:96:06:40:39:27:c1:f2:62:5a:5e:ab:8d:
                    d4:67:4b:b7:aa:ee:27:70:53:f0:5b:bc:b4:d3:bc:
                    6d:6d:05:37:0a:33:21:6b:fb:dc:f0:1c:4c:f7:2f:
                    d0:6b:07:11:2b:8b:50:bb:46:b0:a8:5d:10:21:e9:
                    b9:b0:c5:21:4d:bf:d8:56:9f:c2:7f:c5:fb:d5:bd:
                    e2:f4:f1:2b:55:d6:59:33:50:0a:d4:1d:3d:61:d5:
                    fc:d0:cb:24:e3:23:59:2e:98:58:a1:91:f9:fe:17:
                    1d:23:36:17:f2:dc:c7:24:40:8e:99:ec:31:82:67:
                    08:26:31:c8:49:2f:9d:c5:1c:5d:73:84:12:02:5d:
                    dd:a3:95:f9:fd:7f:61:e1:f2:42:ca:98:f9:c6:b7:
                    b1:0e:26:44:a5:79:0f:8b:30:49:87:4f:be:0b:89:
                    3c:ff:dc:de:31:9b:17:aa:24:54:11:02:c7:24:3c:
                    72:20:29:38:34:e3:db:b3:8a:7e:b8:4b:c1:ea:ff:
                    18:9d:76:67:51:e7:64:88:43:8c:7f:d8:fa:6c:e3:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7B:8D:79:A0:C4:1C:4D:1F:4E:B8:47:CA:DF:72:7E:71:2D:6A:79
            X509v3 Authority Key Identifier:
                keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:09:89:1d:b8:17:e7:92:71:b1:5a:cd:8d:20:e8:99:9d:
         e2:2a:49:fa:39:38:22:18:c0:23:88:2f:73:e7:8e:a5:4b:df:
         b4:ff:ef:52:3a:f7:15:48:d5:05:c5:60:2d:5f:54:87:09:d7:
         f9:43:bb:cf:30:b9:3e:3b:ce:46:d5:5f:b6:5c:c4:7b:e8:a7:
         fb:c6:f8:a9:f4:f1:3b:bb:b7:e5:f0:c5:01:48:ac:7a:64:78:
         15:f2:cb:fc:db:67:dd:60:9a:87:2d:d9:6a:5b:af:b9:61:b5:
         81:21:43:78:3f:17:f3:3d:68:c6:f7:90:7d:b7:69:10:3b:19:
         89:8b:82:77:f4:33:47:50:c2:18:46:91:2c:4e:55:71:41:23:
         ea:94:c2:c0:83:86:00:68:ad:13:38:01:39:f9:f1:18:1b:90:
         06:c2:3c:d4:49:23:19:d1:f4:2e:16:6e:9f:e5:c2:d9:e2:ef:
         fd:65:98:8f:2a:28:0f:b4:5c:36:57:1b:95:7d:6f:ed:9d:6f:
         ed:a4:98:38:66:1c:4c:4f:df:fb:ee:f9:3e:aa:02:6a:f6:01:
         08:a3:4e:72:02:3e:30:d7:3f:8f:12:7a:93:63:31:4e:84:e6:
         d0:f0:c0:e4:8e:2b:b9:6f:25:58:c7:94:93:f6:cf:9a:d4:b5:
         1b:ad:18:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEhbENW0P9hrdyaWs5qiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh
MGRmODQwHhcNMjYwNjEzMTMwMDQ4WhcNMjYwNjE0MTMwMDQ4WjAzMTEwLwYDVQQD
Eyg3ODdiOGQ3OWEwYzQxYzRkMWY0ZWI4NDdjYWRmNzI3ZTcxMmQ2YTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg2Z+HsoX5Mb1pHQ1lSy/54aFiI/
1jCuXSgxD6ZmDkPMkY89B704q45/d9syAP6WBkA5J8HyYlpeq43UZ0u3qu4ncFPw
W7y007xtbQU3CjMha/vc8BxM9y/QawcRK4tQu0awqF0QIem5sMUhTb/YVp/Cf8X7
1b3i9PErVdZZM1AK1B09YdX80Msk4yNZLphYoZH5/hcdIzYX8tzHJECOmewxgmcI
JjHISS+dxRxdc4QSAl3do5X5/X9h4fJCypj5xrexDiZEpXkPizBJh0++C4k8/9ze
MZsXqiRUEQLHJDxyICk4NOPbs4p+uEvB6v8YnXZnUedkiEOMf9j6bOPrmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh7jXmgxBxNH064R8rfcn5xLWp5MB8GA1UdIwQY
MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct
NzczY2ZjNDMzM2UxLzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux
LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcoJiR24
F+eScbFazY0g6Jmd4ipJ+jk4IhjAI4gvc+eOpUvftP/vUjr3FUjVBcVgLV9UhwnX
+UO7zzC5PjvORtVftlzEe+in+8b4qfTxO7u35fDFAUisemR4FfLL/Ntn3WCahy3Z
aluvuWG1gSFDeD8X8z1oxveQfbdpEDsZiYuCd/QzR1DCGEaRLE5VcUEj6pTCwIOG
AGitEzgBOfnxGBuQBsI81EkjGdH0LhZun+XC2eLv/WWYjyooD7RcNlcblX1v7Z1v
7aSYOGYcTE/f++75PqoCavYBCKNOcgI+MNc/jxJ6k2MxToTm0PDA5I4ruW8lWMeU
k/bPmtS1G60Ygw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:14 2026 by rpki-client