Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File:                     is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier:          VnSRzR7yV3IFa7m2q0IWrs0NghiTbDm88Mwhf3dcTn0=
Subject key identifier:   5B:F1:4D:2B:06:75:9B:CC:AF:8B:6F:2C:F4:6A:E8:15:15:98:8D:7A
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer:       /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial:       019EC29269A654AE2CBA79AF33597E09F268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number:          09FD
Signing time:             Sat 13 Jun 2026 20:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:35 +0000
Files and hashes:         1: V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa (hash: XQIlYXeV6ifizyIfOjtUETRq073y4wC5uk9DBtAE+iM=)
                          2: dnN8Qbgzlqa5jVekVWfdeYwMnr0.roa (hash: 2SBvdtsFiLZ+3pTsa8tg6rA3awhSjVKAsmyNnLuEU6w=)
                          3: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: H+OoyCHew7NFEKivTZWmAv4gFg0WczxYU/mTdn9YLz4=)
                          4: qEOd0JSRITKmwn_MrAq43anHLe8.roa (hash: Mq7M3zfHqSv4p6zFUAXdeS8k6DJ4Psbdqulheqnt9F0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:69:a6:54:ae:2c:ba:79:af:33:59:7e:09:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
        Validity
            Not Before: Jun 13 20:00:35 2026 GMT
            Not After : Jun 14 20:00:35 2026 GMT
        Subject: CN=5bf14d2b06759bccaf8b6f2cf46ae81515988d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:03:07:e5:88:f4:37:76:4b:49:ad:70:35:
                    b8:c8:6a:0b:8c:b0:98:2a:90:aa:96:e1:45:1d:c7:
                    1c:aa:b4:6c:ed:7e:c8:75:59:46:8b:67:4e:bc:3a:
                    6e:c9:1d:60:ee:40:78:0b:5c:37:fc:a2:a1:a5:18:
                    ca:0d:b8:40:48:d6:50:ed:9c:59:47:5e:f2:d6:50:
                    ed:9b:48:1b:97:22:7d:b5:f6:f0:01:e9:b3:2c:68:
                    a6:21:75:4c:20:2e:3c:19:34:7b:8a:ff:37:4a:c9:
                    06:45:32:49:d3:7d:c6:d8:c3:3e:9c:1c:bf:0e:bc:
                    72:ef:75:2b:44:ee:8a:ea:25:ab:f2:93:03:c5:52:
                    91:2a:91:09:18:c0:e0:1e:99:27:f9:67:d4:3a:71:
                    5d:70:52:43:0a:f2:19:79:2f:c0:62:47:db:af:8c:
                    d7:99:24:66:8b:e3:e3:31:85:9f:64:b5:a6:53:1d:
                    dc:e7:39:2e:f8:95:02:4c:81:df:2b:5b:83:db:73:
                    30:6b:26:79:e7:fa:ed:cc:3d:94:c9:ee:ed:2d:96:
                    cd:45:e5:f7:0c:41:c5:91:4d:d2:96:c2:cf:57:c0:
                    ce:f0:6e:11:f6:28:b4:fa:a4:e5:40:cf:cd:33:5f:
                    e0:b3:da:5c:af:f6:1a:8d:36:d3:de:71:b6:c9:e9:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F1:4D:2B:06:75:9B:CC:AF:8B:6F:2C:F4:6A:E8:15:15:98:8D:7A
            X509v3 Authority Key Identifier:
                keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:86:1a:89:44:de:ab:90:06:5d:c3:02:0f:20:68:9d:f3:6a:
         e1:dd:6e:dd:fd:5f:85:12:de:f0:59:7e:fa:f4:15:75:dc:0c:
         95:af:f9:ef:fc:de:26:94:ed:dd:a3:da:fc:64:75:b0:18:eb:
         e5:28:8f:7e:24:62:41:3f:b0:2c:c7:95:64:f5:b3:52:f4:e2:
         5d:75:0c:2a:21:39:12:b2:8e:ee:c5:3a:bb:d4:6c:0a:b5:1e:
         cf:3e:5d:cb:67:f8:2a:bd:22:f0:3a:f6:54:b2:b3:78:81:b5:
         25:56:23:cf:bb:3c:d2:30:1a:8c:fe:e9:33:5d:87:f8:38:f3:
         f1:f8:db:24:25:b3:cd:24:58:5a:fa:d1:fd:db:d4:8b:93:67:
         81:42:e9:11:17:54:77:2b:f9:fe:a4:42:98:b2:3e:34:09:bf:
         ce:4d:fa:f8:0b:6e:d6:8f:2b:87:5c:24:a6:58:a0:7d:65:3e:
         b3:98:e6:27:8a:59:eb:9d:85:f6:66:a5:f4:35:84:ac:94:33:
         63:63:7e:16:36:ea:6d:f6:be:3e:15:42:fd:c0:6d:e2:22:3a:
         26:37:dd:10:68:63:e4:97:92:ae:a9:43:91:4c:aa:75:a0:a9:
         03:e5:7d:54:4d:8c:16:03:6a:a2:e9:42:6d:31:ac:f7:c1:01:
         19:b9:09:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkmmmVK4sunmvM1l+CfJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi
ZGQwMDYwHhcNMjYwNjEzMjAwMDM1WhcNMjYwNjE0MjAwMDM1WjAzMTEwLwYDVQQD
Eyg1YmYxNGQyYjA2NzU5YmNjYWY4YjZmMmNmNDZhZTgxNTE1OTg4ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8UDB+WI9Dd2S0mtcDW4yGoLjLCY
KpCqluFFHcccqrRs7X7IdVlGi2dOvDpuyR1g7kB4C1w3/KKhpRjKDbhASNZQ7ZxZ
R17y1lDtm0gblyJ9tfbwAemzLGimIXVMIC48GTR7iv83SskGRTJJ033G2MM+nBy/
Drxy73UrRO6K6iWr8pMDxVKRKpEJGMDgHpkn+WfUOnFdcFJDCvIZeS/AYkfbr4zX
mSRmi+PjMYWfZLWmUx3c5zku+JUCTIHfK1uD23MwayZ55/rtzD2Uye7tLZbNReX3
DEHFkU3SlsLPV8DO8G4R9ii0+qTlQM/NM1/gs9pcr/YajTbT3nG2yekebQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvxTSsGdZvMr4tvLPRq6BUVmI16MB8GA1UdIwQY
MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt
Nzk0YzlkOTI4Y2RjLzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj
LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYYaiUTe
q5AGXcMCDyBonfNq4d1u3f1fhRLe8Fl++vQVddwMla/57/zeJpTt3aPa/GR1sBjr
5SiPfiRiQT+wLMeVZPWzUvTiXXUMKiE5ErKO7sU6u9RsCrUezz5dy2f4Kr0i8Dr2
VLKzeIG1JVYjz7s80jAajP7pM12H+Djz8fjbJCWzzSRYWvrR/dvUi5NngULpERdU
dyv5/qRCmLI+NAm/zk36+Atu1o8rh1wkpligfWU+s5jmJ4pZ652F9mal9DWErJQz
Y2N+Fjbqbfa+PhVC/cBt4iI6JjfdEGhj5JeSrqlDkUyqdaCpA+V9VE2MFgNqoulC
bTGs98EBGbkJIw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:55 2026 by rpki-client