Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          Zmvu2zgCR5oapmwTC0PFe2IAG+Eqqy6glpFtg2PqxG0=
Subject key identifier:   D3:71:7B:36:02:00:54:FE:D5:24:4E:F5:DD:E2:C9:B7:6C:E9:F1:27
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       019EBFFFB9BF231DCD2AD4143B98C252024F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 08:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 08:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 08:01:07 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: 7G6mqSPNaRvI38ZVcffGg6AhHyPiXLMS7q2xd3fcgcY=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:b9:bf:23:1d:cd:2a:d4:14:3b:98:c2:52:02:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Jun 13 08:01:07 2026 GMT
            Not After : Jun 14 08:01:07 2026 GMT
        Subject: CN=d3717b36020054fed5244ef5dde2c9b76ce9f127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:d3:bf:f4:35:d5:a1:73:e4:8e:56:a1:85:
                    e4:73:fb:66:34:6b:b7:1c:c2:73:69:73:fa:b3:1c:
                    04:03:71:a7:af:90:c9:43:22:f4:27:31:ab:37:6b:
                    a7:6c:92:3b:73:6c:0a:85:0d:88:64:a0:43:3d:51:
                    42:e0:93:6b:5c:d2:7b:4c:fd:62:c3:8c:c9:66:ad:
                    c6:40:7b:ba:df:29:8e:3d:27:85:11:95:60:c9:05:
                    a5:26:a5:2e:cd:69:3a:32:9a:16:29:e9:44:c3:b4:
                    5f:1e:7a:8d:6f:6e:ae:bb:1a:ee:a8:c8:9b:a4:54:
                    e9:1f:6d:00:37:95:9d:49:7b:65:a6:dc:46:be:4c:
                    30:8d:23:88:9a:53:0e:05:cb:f1:b6:7c:cc:cd:12:
                    af:dc:a1:31:5e:0c:52:43:e3:f4:0f:cb:bc:77:95:
                    e4:ed:6b:c9:33:70:79:18:c7:7a:da:43:95:09:1a:
                    78:ca:d8:85:c5:07:9e:67:aa:1a:90:86:98:be:71:
                    1b:84:82:d6:43:62:c9:90:39:b2:d4:9f:21:65:fb:
                    33:f6:80:38:44:de:e0:a6:cf:57:f4:c9:7f:d6:eb:
                    55:94:00:7a:6f:06:8d:a0:4f:90:6d:7e:b1:c1:cb:
                    2e:ba:f7:e2:a1:78:2a:9f:42:79:35:b6:76:c7:a1:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:71:7B:36:02:00:54:FE:D5:24:4E:F5:DD:E2:C9:B7:6C:E9:F1:27
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ff:89:a4:3f:f8:b2:32:43:0d:75:ea:8d:61:e3:77:47:67:
         74:69:89:91:4d:5c:d5:fb:a6:cc:c0:a4:bb:a4:c2:57:f9:22:
         6f:e5:88:7b:a6:2f:d5:d8:f8:96:4f:ce:e7:e6:ba:61:c8:89:
         51:b8:94:59:64:28:d8:f9:c0:39:65:1e:25:ad:fd:2e:15:6f:
         a9:30:c4:90:f5:b4:64:29:49:11:f3:aa:0d:2f:c0:e7:5c:85:
         eb:09:49:cc:6d:42:0c:9f:3c:19:8a:f1:12:b7:89:a8:7b:5c:
         37:80:d8:71:0d:62:7a:95:91:e6:e8:e1:d7:68:92:4c:9d:ba:
         b6:36:4a:f2:3d:2f:27:63:9e:29:d1:27:d6:e9:0e:1f:a1:af:
         0a:dc:79:20:85:5c:2b:f0:17:d9:99:f6:20:37:35:e2:6a:4f:
         35:f8:f8:db:f7:fe:cb:65:5a:05:16:6c:e9:52:06:e5:14:8d:
         08:59:2c:cb:25:02:82:f1:1b:2a:ce:ec:05:3f:0c:e6:97:b5:
         a9:a2:42:39:d0:37:41:ef:a4:c6:4e:37:ff:34:c2:a2:45:af:
         30:5a:f8:01:ab:1f:96:f6:99:64:f7:dd:e8:0f:76:9a:51:54:
         a8:e3:5c:07:ab:e9:c8:27:bd:03:35:5f:a2:6d:e8:79:ff:43:
         b0:68:4d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//7m/Ix3NKtQUO5jCUgJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjYwNjEzMDgwMTA3WhcNMjYwNjE0MDgwMTA3WjAzMTEwLwYDVQQD
EyhkMzcxN2IzNjAyMDA1NGZlZDUyNDRlZjVkZGUyYzliNzZjZTlmMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D/Tv/Q11aFz5I5WoYXkc/tmNGu3
HMJzaXP6sxwEA3Gnr5DJQyL0JzGrN2unbJI7c2wKhQ2IZKBDPVFC4JNrXNJ7TP1i
w4zJZq3GQHu63ymOPSeFEZVgyQWlJqUuzWk6MpoWKelEw7RfHnqNb26uuxruqMib
pFTpH20AN5WdSXtlptxGvkwwjSOImlMOBcvxtnzMzRKv3KExXgxSQ+P0D8u8d5Xk
7WvJM3B5GMd62kOVCRp4ytiFxQeeZ6oakIaYvnEbhILWQ2LJkDmy1J8hZfsz9oA4
RN7gps9X9Ml/1utVlAB6bwaNoE+QbX6xwcsuuvfioXgqn0J5NbZ2x6G0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNxezYCAFT+1SRO9d3iybds6fEnMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuv+JpD/4
sjJDDXXqjWHjd0dndGmJkU1c1fumzMCku6TCV/kib+WIe6Yv1dj4lk/O5+a6YciJ
UbiUWWQo2PnAOWUeJa39LhVvqTDEkPW0ZClJEfOqDS/A51yF6wlJzG1CDJ88GYrx
EreJqHtcN4DYcQ1iepWR5ujh12iSTJ26tjZK8j0vJ2OeKdEn1ukOH6GvCtx5IIVc
K/AX2Zn2IDc14mpPNfj42/f+y2VaBRZs6VIG5RSNCFksyyUCgvEbKs7sBT8M5pe1
qaJCOdA3Qe+kxk43/zTCokWvMFr4AasflvaZZPfd6A92mlFUqONcB6vpyCe9AzVf
om3oef9DsGhNBw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:58 2026 by rpki-client