Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          szoQWHg3tg1JYwvQwDVwn+blTgxzGyswNJf6Neh9yGQ=
Subject key identifier:   9D:6D:03:F2:D2:EE:46:90:DA:3B:2E:DE:B3:92:01:C2:18:71:90:C5
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019EBEB650BBD9D9CDEF30FCA5AA7D2F619A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          0EFF
Signing time:             Sat 13 Jun 2026 02:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:19 +0000
Files and hashes:         1: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (hash: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k=)
                          2: B19k1PitIujJpaB0ZKwK-7amv2k.roa (hash: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=)
                          3: CI5OA6QXqxDb_vQORKk6q2XDhKs.roa (hash: EhsJRsPXMO4K43zEnBLLLlr95wCN5evyvOqkDdEQez8=)
                          4: C_i3BFwSyufK3kEKnj8AwQJSM-g.roa (hash: RqeBg4qnPKs7LMu02pA0RKL7OpjvJCoQwZAVatnEMK4=)
                          5: G978p2Z4fjPEzTOjuXppglSIr4s.roa (hash: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8=)
                          6: GNGk2dk3owBh0t7XjA8lYKtdBNY.roa (hash: C0SSoQPsvhCvPcaamLjO8oeUMsL4lVyuJZ6NEzbK8t8=)
                          7: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (hash: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk=)
                          8: M8jgCbSmS_f7pdpfIZJACPF9zFQ.roa (hash: pXnnl9PZijaHt9S33eJN6xuH7nQxj7MBnjM8e2gGQQQ=)
                          9: Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa (hash: okx1A4+uPrtu1VfsVJTCRu2rdB0eV794sdfC0zgIhxk=)
                          10: QFBIL98nhWZihq6X9otfp-26AW8.roa (hash: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=)
                          11: UG4gN9aA_f7YEAcfB1dO7NY5_ek.roa (hash: nJyT2MQFpU6Fg7zPK7kL/FvpROU0th0KaXDPuCdaUZ0=)
                          12: YFekMV6k_znI9JX_sw8Tv3F6sTI.roa (hash: m5Hdd1gjDtnmRTylaY7LXFqGy5f9ant1wS9vgjPqwac=)
                          13: ZqwWAGksfiZKKct8ToZ_J_LNgwo.roa (hash: yNA9Iud4iZ26wPkbKHA01kAUSSNsLVBFRoknHNyK1a0=)
                          14: aagIksMopc799P33hATJVhYhv50.roa (hash: iIkNSdTVd4sXcPwrjUX8C5eltdaFk4s2uMI1T070mOQ=)
                          15: b_rbJD0ZQG4ZvUjkt34Qlu8-Ccc.roa (hash: PVGQ7PuJO29dq4nCPNz/ExdypC2r9RCf0bTTn6uhOlw=)
                          16: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (hash: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns=)
                          17: iKgelSgdHhyAKexXbXYmueOaeUg.roa (hash: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY=)
                          18: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: mNsYvHOjVfjG/EnCRfk2web45Y1kHteJkRrSoFSRZ2o=)
                          19: rmDqg6_mwNfYbcdrFON7FhlqYh0.roa (hash: jIARmAph/9tdERae1K6C9u4rfY/UdNtYyTUK8kLHly0=)
                          20: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (hash: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4=)
                          21: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (hash: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo=)
                          22: yFniHWXO7_eCIiqp5zEklB0-E4M.roa (hash: AVejDieEOPpUjiHa4BQgEX+ocNwhYeJQ16YzzFkL1AM=)
                          23: zACbew-GGDfV_PK86Nbolx1SxaQ.roa (hash: D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=)
                          24: zSrZfDynMxjHsni65bw3lNFxjdo.roa (hash: B3r/Ky/6d0oUxMT1wJmgm/sCz+cdvAcj1deLNp7FbDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:50:bb:d9:d9:cd:ef:30:fc:a5:aa:7d:2f:61:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Jun 13 02:01:19 2026 GMT
            Not After : Jun 14 02:01:19 2026 GMT
        Subject: CN=9d6d03f2d2ee4690da3b2edeb39201c2187190c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:50:83:ee:3c:43:05:b5:d9:da:07:3e:bc:
                    8f:28:56:3f:f4:33:39:25:77:b7:27:54:34:4c:2b:
                    ff:4d:d4:7f:7f:fa:bd:7c:15:a7:15:6e:95:f9:b7:
                    8c:f1:15:2f:00:72:eb:5c:f0:a0:57:1d:b0:99:64:
                    54:7a:1a:f4:91:7c:91:00:13:d0:6a:76:cc:7d:ac:
                    81:28:d2:74:06:17:07:e9:cb:21:ed:d0:29:2e:0e:
                    40:53:ac:e6:3e:9e:2d:f8:50:38:29:c3:9e:e0:ba:
                    3d:7e:51:db:e0:92:8c:85:4e:7d:9a:6a:ed:8d:5f:
                    75:9f:ff:48:db:af:38:fc:53:41:f7:a1:15:86:71:
                    13:26:30:cc:0d:38:35:13:cb:68:15:88:06:73:bf:
                    0b:c0:c6:44:d0:38:b8:7b:2d:31:6c:2a:84:82:31:
                    82:e9:ef:23:a3:42:3d:ff:4d:ba:34:0c:f5:2d:f2:
                    50:da:8d:e3:94:d1:c2:b4:02:20:04:ef:89:3f:f5:
                    06:d2:d1:92:e0:10:db:1c:4b:21:50:20:2c:72:dc:
                    be:53:f9:c6:14:75:59:85:bd:68:6e:98:a0:00:05:
                    af:c5:03:b8:48:8d:88:5a:f4:0e:b8:d4:11:0c:a6:
                    1d:9d:40:a5:3f:ca:ff:65:ec:58:a7:eb:62:1e:d8:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:03:F2:D2:EE:46:90:DA:3B:2E:DE:B3:92:01:C2:18:71:90:C5
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7c:72:12:c8:cf:c8:2c:ca:35:74:b2:ee:6e:26:43:4f:ee:
         25:2a:4f:9d:ad:21:cd:77:b4:d0:b6:6f:31:c5:90:c3:aa:9f:
         55:d0:1e:da:63:50:d2:82:2c:5a:65:d9:0f:bf:9b:b9:11:23:
         0d:b6:20:24:f4:5c:b0:0b:eb:93:a5:e9:56:e0:9c:f0:04:00:
         ff:3d:cb:43:24:f8:16:6c:42:1f:b3:73:8b:8e:1d:c0:d8:d7:
         b4:22:cc:38:b4:74:df:1a:41:df:7e:2b:3d:f0:88:a5:13:af:
         15:9a:64:b1:7c:1c:b9:9a:10:bd:5f:24:bf:13:4e:e0:02:55:
         ca:00:a2:26:65:31:7c:03:11:48:c2:83:4f:24:7b:78:7a:f2:
         7f:c5:81:7f:a8:9b:d3:12:7c:5e:8b:de:64:7e:16:f7:8e:1e:
         6a:93:9a:7e:80:5b:67:84:3c:4e:6e:bf:5a:01:27:c3:45:d9:
         0b:9c:d6:7f:dd:26:0d:c6:bd:ae:ed:c8:86:66:1e:39:f1:c8:
         ae:3b:40:27:44:8c:22:1a:b3:84:82:df:90:0a:53:f2:c8:69:
         ab:2c:f5:b9:78:d6:29:53:8b:e8:bc:cb:cb:2c:0a:d9:22:7c:
         5d:4b:e2:0f:51:fa:39:84:16:30:ce:2b:c3:1d:ef:db:2c:17:
         b9:56:0a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tlC72dnN7zD8pap9L2GaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjYwNjEzMDIwMTE5WhcNMjYwNjE0MDIwMTE5WjAzMTEwLwYDVQQD
Eyg5ZDZkMDNmMmQyZWU0NjkwZGEzYjJlZGViMzkyMDFjMjE4NzE5MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPlQg+48QwW12doHPryPKFY/9DM5
JXe3J1Q0TCv/TdR/f/q9fBWnFW6V+beM8RUvAHLrXPCgVx2wmWRUehr0kXyRABPQ
anbMfayBKNJ0BhcH6csh7dApLg5AU6zmPp4t+FA4KcOe4Lo9flHb4JKMhU59mmrt
jV91n/9I2684/FNB96EVhnETJjDMDTg1E8toFYgGc78LwMZE0Di4ey0xbCqEgjGC
6e8jo0I9/026NAz1LfJQ2o3jlNHCtAIgBO+JP/UG0tGS4BDbHEshUCAscty+U/nG
FHVZhb1obpigAAWvxQO4SI2IWvQOuNQRDKYdnUClP8r/ZexYp+tiHthIxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1tA/LS7kaQ2jsu3rOSAcIYcZDFMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXxyEsjP
yCzKNXSy7m4mQ0/uJSpPna0hzXe00LZvMcWQw6qfVdAe2mNQ0oIsWmXZD7+buREj
DbYgJPRcsAvrk6XpVuCc8AQA/z3LQyT4FmxCH7Nzi44dwNjXtCLMOLR03xpB334r
PfCIpROvFZpksXwcuZoQvV8kvxNO4AJVygCiJmUxfAMRSMKDTyR7eHryf8WBf6ib
0xJ8XoveZH4W944eapOafoBbZ4Q8Tm6/WgEnw0XZC5zWf90mDca9ru3IhmYeOfHI
rjtAJ0SMIhqzhILfkApT8shpqyz1uXjWKVOL6LzLyywK2SJ8XUviD1H6OYQWMM4r
wx3v2ywXuVYKDg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:41 2026 by rpki-client