Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File:                     F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier:          IPO2mHO5VmoCDBBb9dY8fqY1MelD7StTqoVWxVExclg=
Subject key identifier:   DF:1F:E1:F1:36:89:71:E0:9F:1B:49:07:DA:A6:19:C0:12:02:C7:C2
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer:       /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial:       019EC2C910675E731E4902F9430094384DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 21:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:17 +0000
Files and hashes:         1: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: KkQ4FM6Y7iAzvbUiTlivx44ccmyvBovGxzOQsFQPzb4=)
                          2: SPz2rFTEb-eYf1B5B0X4hMlLB6c.roa (hash: TFR/CByQTCa7JUwD+ZC4TVDsRbIrDuQPNxLGIxqBjU4=)
                          3: UfSYcax7hrnZsapdP8nX8CdA6ac.roa (hash: HfQ6PLxHcu26WVTPLuKbtbJcFW7jFqcjCu8B7qggBio=)
                          4: kNHeejH9UWVsvWWApLpc25wsTxE.roa (hash: fxr+p6jIf+XT5GupHuF/9yqj6BcoS+KmnsW6mYE/AOY=)
                          5: kRf-p4qBBa9Rvu5gFKi-QWl32VU.roa (hash: fVpCGOPHxxPr7Wk2f1pVCS7IR1cjhvdExLaBFxIvrYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:10:67:5e:73:1e:49:02:f9:43:00:94:38:4d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
        Validity
            Not Before: Jun 13 21:00:17 2026 GMT
            Not After : Jun 14 21:00:17 2026 GMT
        Subject: CN=df1fe1f1368971e09f1b4907daa619c01202c7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:90:54:97:fa:70:10:65:1a:09:65:83:e6:
                    87:7c:85:7b:96:1f:de:9f:52:36:fc:e9:32:d8:cd:
                    a8:bd:c1:38:76:49:c0:65:a8:04:13:71:24:6c:67:
                    48:57:06:b1:cb:54:57:c8:48:c6:ed:c4:dd:da:77:
                    45:45:59:4b:e5:45:6d:19:7f:20:d9:1a:5d:a8:2f:
                    63:01:08:7a:9b:e9:b6:82:0f:6a:b8:31:e8:c7:ae:
                    f4:f6:a7:ca:df:a7:2f:9b:6a:0e:a0:f9:fb:24:d8:
                    9c:ba:59:2b:3d:4a:41:cd:33:c8:7f:fb:db:61:62:
                    30:54:ff:8c:34:5b:92:7a:0b:a3:cd:fb:a8:42:31:
                    8e:b3:ce:6f:6e:7e:d5:2e:73:fc:74:b8:17:8b:d6:
                    bb:8a:67:26:78:a8:5b:94:c0:e8:5e:6e:2d:9e:55:
                    bb:e1:db:ba:77:70:1c:cf:78:c9:00:cb:13:d3:03:
                    53:c8:c7:4e:c6:a0:35:23:ee:37:0e:63:86:12:14:
                    57:54:50:ef:91:aa:51:35:bf:6a:5e:9d:73:47:50:
                    15:7b:ad:48:32:ec:74:21:dd:d8:3c:8c:a2:2c:42:
                    ac:32:60:e9:ed:6b:14:aa:f0:68:5e:7c:ea:4e:81:
                    d0:bb:f3:a0:99:cd:9d:c5:fe:e4:7e:ac:42:1f:2a:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1F:E1:F1:36:89:71:E0:9F:1B:49:07:DA:A6:19:C0:12:02:C7:C2
            X509v3 Authority Key Identifier:
                keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:44:2a:97:89:62:9e:75:7f:8a:09:fc:96:f3:20:57:1c:
         2a:8d:73:91:6f:94:fd:82:fb:ad:f0:65:da:88:8c:cd:49:1f:
         68:3b:46:40:ee:3b:c1:33:fa:cc:da:b3:04:4d:dc:b4:df:69:
         dd:3a:c0:94:0d:83:a4:c5:f3:96:32:34:30:b0:10:2d:97:bb:
         f3:d3:82:29:9b:3f:f8:da:2f:c5:79:7e:b6:78:64:b8:56:bb:
         37:bd:45:3d:56:8d:cf:99:f1:e5:89:f8:94:56:d3:28:4c:ea:
         99:5b:1b:b4:59:38:b6:32:59:28:5c:ee:cb:de:00:45:87:d6:
         47:cb:a0:ad:e7:c4:b3:89:3e:0b:d1:50:5b:10:7d:75:f9:88:
         7c:f4:77:62:38:db:6f:49:8d:12:68:96:28:cd:f5:9b:93:64:
         7f:09:7f:46:df:3f:f8:b1:93:eb:8a:4a:29:7b:35:41:ab:64:
         7a:63:73:84:7f:3e:d8:ea:2b:5c:76:f3:97:56:76:a1:14:b6:
         a6:23:94:a9:cf:c6:d2:d5:a2:4b:9e:0e:ee:3e:e6:40:a5:67:
         35:c6:e5:5f:ea:8c:10:02:08:18:ec:95:42:05:e6:0b:88:3b:
         86:40:1b:a6:be:c3:8c:c5:c2:37:29:1b:67:93:a7:33:ec:62:
         49:76:c8:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyRBnXnMeSQL5QwCUOE30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjhiZWI1NTVkYWZhODJjM2Q2YWEzMzY5MDlhZTVhZGUz
NWE4M2QwHhcNMjYwNjEzMjEwMDE3WhcNMjYwNjE0MjEwMDE3WjAzMTEwLwYDVQQD
EyhkZjFmZTFmMTM2ODk3MWUwOWYxYjQ5MDdkYWE2MTljMDEyMDJjN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEaQVJf6cBBlGgllg+aHfIV7lh/e
n1I2/Oky2M2ovcE4dknAZagEE3EkbGdIVwaxy1RXyEjG7cTd2ndFRVlL5UVtGX8g
2RpdqC9jAQh6m+m2gg9quDHox6709qfK36cvm2oOoPn7JNiculkrPUpBzTPIf/vb
YWIwVP+MNFuSegujzfuoQjGOs85vbn7VLnP8dLgXi9a7imcmeKhblMDoXm4tnlW7
4du6d3Acz3jJAMsT0wNTyMdOxqA1I+43DmOGEhRXVFDvkapRNb9qXp1zR1AVe61I
Mux0Id3YPIyiLEKsMmDp7WsUqvBoXnzqToHQu/Ogmc2dxf7kfqxCHyodHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8f4fE2iXHgnxtJB9qmGcASAsfCMB8GA1UdIwQY
MBaAFBe4vrVV2vqCw9aqM2kJrlreNag9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAt
N2UyNDI2NzRkZWZjLzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAtN2UyNDI2NzRkZWZj
LzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqxEKpeJ
Yp51f4oJ/JbzIFccKo1zkW+U/YL7rfBl2oiMzUkfaDtGQO47wTP6zNqzBE3ctN9p
3TrAlA2DpMXzljI0MLAQLZe789OCKZs/+NovxXl+tnhkuFa7N71FPVaNz5nx5Yn4
lFbTKEzqmVsbtFk4tjJZKFzuy94ARYfWR8ugrefEs4k+C9FQWxB9dfmIfPR3Yjjb
b0mNEmiWKM31m5Nkfwl/Rt8/+LGT64pKKXs1QatkemNzhH8+2OorXHbzl1Z2oRS2
piOUqc/G0tWiS54O7j7mQKVnNcblX+qMEAIIGOyVQgXmC4g7hkAbpr7DjMXCNykb
Z5OnM+xiSXbIUg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:56:32 2026 by rpki-client