Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File:                     4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier:          MT55k825b9KwCjS1L9EEF+UVCUC+ilZim+l5Py3n0TQ=
Subject key identifier:   27:FC:FC:67:86:1F:18:37:A8:82:3F:04:53:B4:50:26:4F:80:B4:15
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       019EBFC8B2F63CACE5249D6509B442B5B9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number:          19CB
Signing time:             Sat 13 Jun 2026 07:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:01 +0000
Files and hashes:         1: 1--d0cnUCeMBBJAQCBol8GjOem0A.roa (hash: K1CkZ/qUDDNfccO9OiBBdc3yV0iu0FE3gUcsryaKkr0=)
                          2: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: EzSZnX5ta+bjphUHK5kcfgst7uy+c0/24LnCLyrXd2I=)
                          3: 4N_Z86kKGskabTlxZnPF7BSpKvo.roa (hash: Z8pKZCmKOcQjlZpsSY0pMle3h8toFSwx20ZSHQFRkmE=)
                          4: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
                          5: 8MxVvwEohbQmIikgrwper0uymEc.roa (hash: Xz+dhMsydC+qsZLDpjaa9cvEI5H7yFeVKoYAKozIz24=)
                          6: 9rTu4PcQFiCP_VDRYFNI1sC8EVA.roa (hash: LfIKzDfX2NY8Nh4yHctuFIsaaZBhsdsuRe9sJHF3gj4=)
                          7: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=)
                          8: CPFUjdYmYvlsWtWYLd7v5035Xuw.roa (hash: 7sSnoPkIa2/4PXjqT4j8dkD8edXrnocaOy0KeObQQ4s=)
                          9: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (hash: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k=)
                          10: KBUYbnEmKpEx437gfeTp4nSlR1A.roa (hash: gcQVnPYTURZEc5h1Lzi0hWMw9iLS8qNgx0WoGepXwWE=)
                          11: LJD0wszJHZ-p4v3JPuOMJg7uKmo.roa (hash: TJ3xrBMjWHKG9ZSq93tozgGEeJxQ3QPVN2RdVHYWMkY=)
                          12: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
                          13: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=)
                          14: QE7hnRKM-pIX463UZ_tra0EKYOg.roa (hash: fsT9JglSf+xfQNMVUetiVbQpKYSJUuYkpRqKMcd4NGU=)
                          15: Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa (hash: v6myRWOIyHvBSB5K6wXjkQvrFI1AFI2YvdioGAkLuFI=)
                          16: USXvFGnAypWHrQsUpHflyE7AkBw.roa (hash: leJb5YM9g0TdZzX8je+gHf/RsV+l7VFjkyGBSWLgWYo=)
                          17: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
                          18: ZrPtSCJ532i12xugeZ1dO4rY230.roa (hash: dH4IWysW7Ys5TJ2lt17gZtfQSYeKivQxpHQG4qiY7zQ=)
                          19: _AhqSMXzSMZFbHcqNodKDi0IAzM.roa (hash: wvol9PJfQddzQCHHullYDweNMpi9bpx2stFM7mxl7Do=)
                          20: bi2Pu8sFtY0UVOt3mxHocxrNLIM.roa (hash: 784OKifqP67yGlXNQorK1EncKrSn66YYLvyMakrT7ho=)
                          21: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
                          22: qSsSKMXAzMPltH2BBycU_pVvqZE.roa (hash: PuojaS0Tleeayk3Hu/aVSje12Yabrh9wKKfmqv8ekjs=)
                          23: vGXTEVlZEvvy_OO65LppPnLWzds.roa (hash: qVUACJdOYqZMXJXhZVtMk9bckrNCEf6pmzMIUiKZwR4=)
                          24: wLocbmUMe22Q0_z17ABS3IwjG9U.roa (hash: eyLQ2EHsSzHSKJPSOCX/RrI5ZzjB4y9V5Grt58tisxQ=)
                          25: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:b2:f6:3c:ac:e5:24:9d:65:09:b4:42:b5:b9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Jun 13 07:01:01 2026 GMT
            Not After : Jun 14 07:01:01 2026 GMT
        Subject: CN=27fcfc67861f1837a8823f0453b450264f80b415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:00:de:b6:3f:7a:02:2c:09:8f:f4:59:d1:
                    d3:ef:6a:35:8e:d5:80:5c:25:46:21:f9:4e:90:0b:
                    e2:46:65:08:f2:14:7e:a4:ac:77:4d:d6:08:3f:71:
                    01:b1:6a:94:50:8d:33:b3:ad:67:9a:7b:65:07:db:
                    e1:f0:0b:cf:35:6b:fc:23:cf:f7:e9:cd:37:b6:0c:
                    34:76:b1:40:5f:eb:77:3c:c9:c0:95:0a:35:b4:36:
                    92:24:da:93:e7:9d:1f:48:be:dd:50:08:a6:06:91:
                    8e:a5:19:cd:2f:37:8b:c9:4e:d6:35:bf:26:9a:ea:
                    33:4b:5d:cc:0a:2a:97:d2:35:cc:8f:31:13:80:58:
                    ed:50:4c:94:c4:47:54:83:14:74:63:b7:2d:62:0d:
                    10:bf:47:53:8b:9c:61:fc:6f:93:3f:ab:62:0d:f3:
                    b7:59:e7:3d:27:2f:cd:36:ba:02:61:33:1b:cb:58:
                    09:ee:8a:f8:bf:3d:78:26:9a:1c:66:26:be:72:5c:
                    3f:bf:42:33:02:95:0c:1e:39:84:53:8e:5c:d4:a8:
                    23:3e:7f:d9:4c:6d:82:10:a5:01:73:a8:26:a0:9b:
                    21:25:22:f4:86:21:63:cf:bd:b4:54:2d:f2:0e:0a:
                    f5:bc:dc:0e:c8:c8:ac:74:c7:a6:5b:99:21:36:d7:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:FC:67:86:1F:18:37:A8:82:3F:04:53:B4:50:26:4F:80:B4:15
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fe:d8:73:21:e1:ab:4b:32:39:7e:23:37:75:cd:6f:82:73:
         c2:fa:5c:19:eb:27:85:c2:8b:68:c2:c2:6d:97:f6:15:f8:18:
         4a:f7:31:4c:ef:8f:87:1a:89:56:72:19:79:8d:95:7b:89:f4:
         b7:2e:38:d6:41:11:68:60:7a:ab:07:8f:b1:10:c3:73:a5:82:
         2f:4d:bc:2b:7c:4f:aa:90:5f:f6:2d:46:c1:4d:36:8a:9b:c0:
         88:34:47:9b:89:c8:ce:73:f5:67:3b:7a:4a:ad:f9:79:19:95:
         91:54:13:bb:b7:0f:34:96:12:39:6c:8a:ac:5d:e1:96:b3:b0:
         48:77:7b:ab:0a:95:eb:51:c6:3f:bf:4b:8a:58:7b:27:4e:28:
         ae:14:45:02:ef:27:67:c8:57:d5:9d:81:77:a5:b7:09:44:52:
         14:89:29:b5:f8:66:17:0f:69:7f:84:e4:11:3d:f4:97:fe:9e:
         45:e1:cc:d5:e2:fa:20:fe:f4:bb:9e:51:ae:67:05:27:0d:b8:
         48:77:5b:f8:50:0b:99:da:c9:51:99:da:fc:80:97:cc:a8:52:
         fe:67:12:d2:59:ca:52:bf:fb:f5:4e:e1:5d:a2:c0:22:49:d6:
         2f:a7:4c:38:0a:8f:45:7d:35:cd:9e:50:d5:f1:b6:c2:32:63:
         60:07:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:49 2026 by rpki-client