Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          9Bp0L9edO26Jvh2CZ6lwUzRq1LuFpCeG3gWyuVLmIvI=
Subject key identifier:   4B:EC:A8:A3:E2:D0:DE:76:77:43:47:7C:05:D0:62:51:22:D8:DD:45
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       019EC148CD2960423B58A6BCFECD4F1B75EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          16A6
Signing time:             Sat 13 Jun 2026 14:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:34 +0000
Files and hashes:         1: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (hash: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw=)
                          2: 3JLEaN47mFd4AJ1ulcTajHwX46Q.roa (hash: 7nuv0xJK6J/Wz9ZBABmkHA68zDZCu6LbMkw8k4JA0aY=)
                          3: 3m4ZcWe4AoRitpxIdoHTfvPCTz4.roa (hash: R1IDNKkyr2PRIrfMe44b/uoEQJhofAwIdcVDkSZ0J1s=)
                          4: ktGWBH_rz8CZASP_zJHcbXXlp7Y.roa (hash: WQj8sJ8bysuFkPbFG5oVPz6oUf8fVBbz+1mkOQXAzAY=)
                          5: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (hash: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8=)
                          6: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: 9twz/euDmKD7Ppn5ymhsKFSZqks50BSMLwlhybkppWY=)
                          7: wwateRuj040-ENpDYQ6qLA2XVl0.roa (hash: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:cd:29:60:42:3b:58:a6:bc:fe:cd:4f:1b:75:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Jun 13 14:00:34 2026 GMT
            Not After : Jun 14 14:00:34 2026 GMT
        Subject: CN=4beca8a3e2d0de767743477c05d0625122d8dd45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:21:ff:6e:d0:be:2d:3f:d2:b8:06:07:e5:
                    79:16:bf:63:21:e0:35:93:5a:ac:56:3e:3c:eb:1e:
                    7f:20:32:ab:9d:c8:ba:4c:99:3d:50:30:78:16:a8:
                    84:9f:35:52:99:cc:10:90:8f:32:58:5f:a2:93:01:
                    ba:b0:78:f0:fa:49:2a:8a:c5:a1:51:e3:3c:a0:54:
                    2d:4e:0f:f8:80:fb:51:1f:b2:bb:5b:42:6d:01:f2:
                    42:49:61:17:97:3d:b9:86:21:39:f1:97:2c:92:86:
                    93:37:62:64:3c:fa:a8:76:15:ee:77:3d:32:77:70:
                    4b:fb:b4:22:02:0d:df:8d:54:a6:15:15:bb:13:d8:
                    a9:31:0c:23:97:fd:c0:df:c0:75:82:e7:0e:a5:b8:
                    74:4d:ba:2c:71:b8:c5:b8:ca:15:e7:26:fb:ca:58:
                    b6:20:a3:c0:8f:51:71:14:bc:b7:85:b8:e1:fb:f9:
                    f5:37:03:f0:e8:8e:23:54:77:42:e8:3f:da:80:ea:
                    b1:16:29:25:0b:e0:71:a9:2d:fa:7f:f5:6e:93:df:
                    ec:a4:67:47:31:1c:8a:cd:4a:7e:19:23:1d:57:87:
                    2e:2e:78:f2:d7:55:aa:70:55:1d:ce:a2:17:64:4c:
                    53:b0:c9:9d:f8:62:23:59:65:f1:4b:1c:c4:43:d6:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EC:A8:A3:E2:D0:DE:76:77:43:47:7C:05:D0:62:51:22:D8:DD:45
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:42:3e:f9:c0:75:bb:8f:32:d0:40:90:1a:c8:10:fe:dc:4a:
         c9:0d:82:16:ea:c5:eb:d4:d0:8d:b9:ec:fa:74:cf:53:1a:36:
         c1:02:06:0b:89:30:0f:84:d4:1d:be:a2:8a:a1:29:03:37:dc:
         37:7c:8d:17:5a:5b:2f:c7:d9:56:0a:a7:be:17:9e:53:33:06:
         20:ea:25:d6:2b:f1:0a:79:20:8b:d1:d3:87:7b:3a:23:7c:49:
         41:16:5f:b9:53:f2:8b:42:48:f0:93:f0:a8:95:c8:51:51:9b:
         ed:3b:73:11:a8:f8:98:07:f2:e8:b9:4c:16:60:66:b2:20:a6:
         30:60:14:3b:6b:1f:ab:e5:bd:cc:1e:95:11:65:5b:63:8f:3d:
         06:c5:4b:23:97:49:9e:87:eb:2b:63:76:41:56:9d:ec:08:33:
         a6:a0:c7:25:37:ea:38:ae:1e:67:4d:bd:1c:6a:3d:08:52:d4:
         a6:c8:c6:16:cb:e6:fe:a9:c5:42:ed:04:6d:43:6f:3c:5d:3f:
         99:6e:72:8c:6f:83:eb:42:83:67:63:9c:77:90:db:cf:7d:12:
         43:7c:a1:c0:fe:aa:83:fe:fb:d3:46:84:f8:87:b8:10:4b:ef:
         bc:27:1b:de:09:3b:f4:e6:b1:32:54:8f:be:f5:2f:ff:b9:d7:
         bf:74:19:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSM0pYEI7WKa8/s1PG3XvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4
M2MzOWEwHhcNMjYwNjEzMTQwMDM0WhcNMjYwNjE0MTQwMDM0WjAzMTEwLwYDVQQD
Eyg0YmVjYThhM2UyZDBkZTc2Nzc0MzQ3N2MwNWQwNjI1MTIyZDhkZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S8h/27Qvi0/0rgGB+V5Fr9jIeA1
k1qsVj486x5/IDKrnci6TJk9UDB4FqiEnzVSmcwQkI8yWF+ikwG6sHjw+kkqisWh
UeM8oFQtTg/4gPtRH7K7W0JtAfJCSWEXlz25hiE58ZcskoaTN2JkPPqodhXudz0y
d3BL+7QiAg3fjVSmFRW7E9ipMQwjl/3A38B1gucOpbh0TboscbjFuMoV5yb7yli2
IKPAj1FxFLy3hbjh+/n1NwPw6I4jVHdC6D/agOqxFiklC+BxqS36f/Vuk9/spGdH
MRyKzUp+GSMdV4cuLnjy11WqcFUdzqIXZExTsMmd+GIjWWXxSxzEQ9bxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvsqKPi0N52d0NHfAXQYlEi2N1FMB8GA1UdIwQY
MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt
NDk3YmVkZDcxZWI5LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5
LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEI++cB1
u48y0ECQGsgQ/txKyQ2CFurF69TQjbns+nTPUxo2wQIGC4kwD4TUHb6iiqEpAzfc
N3yNF1pbL8fZVgqnvheeUzMGIOol1ivxCnkgi9HTh3s6I3xJQRZfuVPyi0JI8JPw
qJXIUVGb7TtzEaj4mAfy6LlMFmBmsiCmMGAUO2sfq+W9zB6VEWVbY489BsVLI5dJ
nofrK2N2QVad7AgzpqDHJTfqOK4eZ029HGo9CFLUpsjGFsvm/qnFQu0EbUNvPF0/
mW5yjG+D60KDZ2Ocd5Dbz30SQ3yhwP6qg/7700aE+Ie4EEvvvCcb3gk79OaxMlSP
vvUv/7nXv3QZmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:52 2026 by rpki-client