Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File:                     sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier:          6h8JLBMrSxI2VNgq3SjBFXyI7/IfNNLeIS7N2+GzcRY=
Subject key identifier:   44:AD:62:4C:DE:F5:53:96:89:3F:4E:C2:43:2A:9D:07:F9:40:8D:A8
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer:       /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial:       019EC112282BEE5638EAA849AE1A1F1F4EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number:          182B
Signing time:             Sat 13 Jun 2026 13:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:52 +0000
Files and hashes:         1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
                          2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: xMDANccP7B44K6mT0lOJmIK5YKuysVzVsqW+aqbYjbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:28:2b:ee:56:38:ea:a8:49:ae:1a:1f:1f:4e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
        Validity
            Not Before: Jun 13 13:00:52 2026 GMT
            Not After : Jun 14 13:00:52 2026 GMT
        Subject: CN=44ad624cdef55396893f4ec2432a9d07f9408da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:b0:2d:16:87:f1:60:92:f2:0a:40:8a:ae:
                    ba:29:a9:07:3e:b9:7f:64:a9:48:79:04:01:82:70:
                    dd:c5:14:91:6a:94:21:0f:23:47:03:3d:c8:a6:66:
                    90:d0:86:54:b4:11:3a:ec:1f:06:eb:9e:5b:8a:99:
                    71:2f:0a:b5:dc:5b:9f:52:c1:ca:0f:5f:93:e4:cf:
                    4c:be:5b:bf:ff:41:c8:51:72:a3:0f:c7:9c:a2:df:
                    d5:0c:f0:a6:a5:13:0e:67:63:2e:a5:6c:48:7b:2d:
                    11:dc:1c:39:43:ce:39:69:ce:fd:cf:68:83:8c:ff:
                    79:ff:c7:9a:dd:e2:0e:75:7c:88:07:c1:c5:43:89:
                    36:dc:42:12:85:98:23:42:67:5e:df:33:e5:0e:73:
                    86:7e:a5:22:3b:33:0e:2b:7e:44:d9:07:47:93:70:
                    a1:cf:b3:29:11:cc:6d:32:45:32:c7:e8:33:8b:c6:
                    2b:16:06:89:d5:a0:f1:f9:80:05:56:7a:e5:67:69:
                    14:32:4c:a6:d5:0b:22:4d:e7:22:e0:74:34:33:4b:
                    a3:75:43:3f:8a:ac:66:63:bb:00:a7:bd:d3:50:c7:
                    ae:e7:1f:b5:77:2e:27:23:93:23:58:3c:3f:a3:f9:
                    21:ac:42:3e:c4:7e:a7:36:b4:cf:0d:13:35:b0:03:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AD:62:4C:DE:F5:53:96:89:3F:4E:C2:43:2A:9D:07:F9:40:8D:A8
            X509v3 Authority Key Identifier:
                keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:79:f8:d5:76:ba:da:27:b6:25:05:ea:3d:f5:23:99:9f:7a:
         b3:7b:08:92:df:7f:55:86:3b:01:48:72:57:15:55:13:2d:42:
         00:a3:60:18:cf:86:1a:ca:e8:2e:20:cb:d0:e1:3b:86:8a:01:
         03:49:e3:73:f7:20:4f:3b:81:ed:10:50:b6:d4:fb:48:cf:54:
         e2:1d:02:78:a1:ba:94:8c:49:e8:b4:ec:59:7c:1c:3b:9f:b6:
         12:60:dc:10:82:86:2f:33:d7:2a:b0:46:b0:5e:89:e0:e6:1f:
         18:4f:a3:ec:a3:eb:b7:d3:5f:86:8c:0a:53:1e:bc:bd:d5:ca:
         06:9e:42:f2:af:d9:0f:d3:71:43:ed:b3:f9:0b:4d:70:d5:34:
         1e:e0:58:d9:d3:e5:ba:48:0e:11:74:35:9a:b4:d4:4d:dc:65:
         ed:2f:7d:65:15:61:c6:e6:04:24:cf:9a:ca:d0:a3:f3:74:ea:
         3b:ab:0f:ef:19:11:bc:e2:81:dc:f5:35:b7:4b:84:ae:bf:d3:
         40:5f:51:41:9b:e0:8f:dd:69:a8:e2:30:9d:3d:15:29:54:b8:
         94:5b:ca:4e:b1:1a:0a:53:f9:f0:0f:9e:20:00:e8:5a:a7:14:
         99:fd:ab:c3:62:17:be:6d:86:df:71:5c:2b:32:5c:bc:22:7f:
         65:3b:ee:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEigr7lY46qhJrhofH06+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTRmYzJhZjM4YWY1YjRmNTg2MWUyN2ZkMDA3ZTYyNGI1
ZjliMDIwHhcNMjYwNjEzMTMwMDUyWhcNMjYwNjE0MTMwMDUyWjAzMTEwLwYDVQQD
Eyg0NGFkNjI0Y2RlZjU1Mzk2ODkzZjRlYzI0MzJhOWQwN2Y5NDA4ZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S6wLRaH8WCS8gpAiq66KakHPrl/
ZKlIeQQBgnDdxRSRapQhDyNHAz3IpmaQ0IZUtBE67B8G655biplxLwq13FufUsHK
D1+T5M9Mvlu//0HIUXKjD8ecot/VDPCmpRMOZ2MupWxIey0R3Bw5Q845ac79z2iD
jP95/8ea3eIOdXyIB8HFQ4k23EIShZgjQmde3zPlDnOGfqUiOzMOK35E2QdHk3Ch
z7MpEcxtMkUyx+gzi8YrFgaJ1aDx+YAFVnrlZ2kUMkym1QsiTeci4HQ0M0ujdUM/
iqxmY7sAp73TUMeu5x+1dy4nI5MjWDw/o/khrEI+xH6nNrTPDRM1sANEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEStYkze9VOWiT9OwkMqnQf5QI2oMB8GA1UdIwQY
MBaAFLCk/CrzivW09YYeJ/0AfmJLX5sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYt
NjhmZTA4NjIyNjE0LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYtNjhmZTA4NjIyNjE0
LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHn41Xa6
2ie2JQXqPfUjmZ96s3sIkt9/VYY7AUhyVxVVEy1CAKNgGM+GGsroLiDL0OE7hooB
A0njc/cgTzuB7RBQttT7SM9U4h0CeKG6lIxJ6LTsWXwcO5+2EmDcEIKGLzPXKrBG
sF6J4OYfGE+j7KPrt9NfhowKUx68vdXKBp5C8q/ZD9NxQ+2z+QtNcNU0HuBY2dPl
ukgOEXQ1mrTUTdxl7S99ZRVhxuYEJM+aytCj83TqO6sP7xkRvOKB3PU1t0uErr/T
QF9RQZvgj91pqOIwnT0VKVS4lFvKTrEaClP58A+eIADoWqcUmf2rw2IXvm2G33Fc
KzJcvCJ/ZTvuVw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:35 2026 by rpki-client