Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
File:                     tjrC5OTds-VAdW8XqpcNSoowqFw.mft (raw, json)
Hash identifier:          n1tz5KwHC59o+hBEWBgSKh0Xam5LJGmbOWD3Adnt6Oc=
Subject key identifier:   95:E7:FB:C5:47:66:48:93:04:B8:3B:94:12:0C:F3:0D:B0:C1:77:63
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Certificate issuer:       /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial:       019EBEB5CC1C90FEB7787DF809C36EBD0D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
Manifest number:          65
Signing time:             Sat 13 Jun 2026 02:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:45 +0000
Files and hashes:         1: 9Uh8hi2XjzjTI07m52BOUEVY774.roa (hash: yoDrm0qg0msJJ0YvgT2enc8jij0zEDKh7V20lRAU8j4=)
                          2: pIrh8t_NNRD8MCPix_SqJSVgY7E.roa (hash: eE3cynxx6yPYag5fkQ+E+tY5KNgvElDMK0Zwn7c5OSI=)
                          3: tjrC5OTds-VAdW8XqpcNSoowqFw.crl (hash: xxDeVDmJbc+FpqGFP+YPAgh6zxXk8Sam7MTmZLozWGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:cc:1c:90:fe:b7:78:7d:f8:09:c3:6e:bd:0d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
        Validity
            Not Before: Jun 13 02:00:45 2026 GMT
            Not After : Jun 14 02:00:45 2026 GMT
        Subject: CN=95e7fbc54766489304b83b94120cf30db0c17763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:e4:5e:35:6e:58:af:68:2a:3e:78:e1:1f:
                    24:81:f8:07:29:68:84:a8:c5:65:42:c3:2b:86:71:
                    f2:77:7f:48:6b:57:63:95:a2:3a:a7:02:75:ad:75:
                    7a:12:3c:a3:4e:ba:ce:4c:8e:86:cc:71:f4:1e:1c:
                    35:75:44:f8:9c:ee:87:fd:d1:43:77:79:24:9c:92:
                    ba:d3:12:c7:03:18:4e:b6:3b:2e:bb:e8:8d:2f:ec:
                    3a:48:10:b0:17:58:bf:9d:72:05:f4:5e:41:15:67:
                    23:07:68:c0:d4:48:99:06:d9:7c:0e:28:54:d2:21:
                    44:37:db:02:91:9d:76:c0:c1:7f:47:08:d0:51:d8:
                    1b:8c:49:eb:1b:77:fd:86:31:35:3d:c4:90:7a:dd:
                    c4:01:6a:46:59:73:19:13:d0:50:b3:c0:27:e4:bc:
                    2f:fd:a9:85:e3:cb:ac:f0:27:d7:cf:59:a4:7a:f2:
                    5c:42:f2:5b:33:ca:7f:16:19:0b:97:41:42:4b:aa:
                    25:53:c9:f6:31:1c:17:fd:37:99:a6:0e:0e:8d:64:
                    67:79:cf:9b:7e:d7:ae:5e:9f:03:81:64:ed:9b:08:
                    62:48:f7:a4:27:c4:6d:82:f1:1a:dd:92:8f:db:23:
                    77:e0:1e:35:0d:bd:48:cf:ba:bd:e7:6a:6b:68:3e:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E7:FB:C5:47:66:48:93:04:B8:3B:94:12:0C:F3:0D:B0:C1:77:63
            X509v3 Authority Key Identifier:
                keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:57:8e:d3:b2:e8:48:68:bd:b2:0d:81:31:1f:a5:a2:b1:
         79:b6:07:d8:bc:00:cf:d2:1a:be:31:7a:ef:b3:6c:81:0b:e8:
         fd:1f:12:78:ec:9a:ba:47:9a:c7:e8:ef:54:2e:dd:88:b5:3b:
         65:a7:1c:e1:a5:09:07:55:7a:87:c3:43:9e:ca:7f:47:d1:61:
         a9:0c:52:a2:4b:71:f1:76:61:06:b6:17:a5:86:be:f6:1d:c5:
         bb:08:65:56:80:f1:19:b9:9b:b5:7e:2f:85:a3:27:4e:51:b8:
         79:2b:62:38:53:44:f3:ca:4d:be:c7:ea:6a:8a:5a:e5:32:79:
         d8:6c:23:79:7d:ef:b5:3c:03:44:20:50:28:bb:56:c4:2d:49:
         f7:fe:3f:26:00:57:df:61:43:c9:86:29:61:6d:88:bc:46:5c:
         8a:fd:07:0b:d1:49:af:61:9f:6e:65:ae:40:81:37:47:7f:22:
         a7:03:d5:cb:27:8b:de:8f:86:9d:9a:35:d3:dd:53:13:cb:fc:
         84:d0:57:9e:22:82:da:61:e2:f9:e7:d5:9d:51:94:51:aa:99:
         e0:0f:80:25:49:bd:2a:5e:d5:71:21:69:59:aa:49:2c:b9:54:
         3e:ad:96:7b:ef:e8:73:02:f7:9c:82:67:da:34:8e:65:29:d8:
         3d:a1:71:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tcwckP63eH34CcNuvQ1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2FjMmU0ZTRkZGIzZTU0MDc1NmYxN2FhOTcwZDRhOGEz
MGE4NWMwHhcNMjYwNjEzMDIwMDQ1WhcNMjYwNjE0MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg5NWU3ZmJjNTQ3NjY0ODkzMDRiODNiOTQxMjBjZjMwZGIwYzE3NzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vDkXjVuWK9oKj544R8kgfgHKWiE
qMVlQsMrhnHyd39Ia1djlaI6pwJ1rXV6EjyjTrrOTI6GzHH0Hhw1dUT4nO6H/dFD
d3kknJK60xLHAxhOtjsuu+iNL+w6SBCwF1i/nXIF9F5BFWcjB2jA1EiZBtl8DihU
0iFEN9sCkZ12wMF/RwjQUdgbjEnrG3f9hjE1PcSQet3EAWpGWXMZE9BQs8An5Lwv
/amF48us8CfXz1mkevJcQvJbM8p/FhkLl0FCS6olU8n2MRwX/TeZpg4OjWRnec+b
fteuXp8DgWTtmwhiSPekJ8RtgvEa3ZKP2yN34B41Db1Iz7q952praD4fQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXn+8VHZkiTBLg7lBIM8w2wwXdjMB8GA1UdIwQY
MBaAFLY6wuTk3bPlQHVvF6qXDUqKMKhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82Yzc5NzAtOGNmOC00ZDNhLWEyMzAt
ZDYyZTU4NWM4MTYxLzEvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82Yzc5NzAtOGNmOC00ZDNhLWEyMzAtZDYyZTU4NWM4MTYx
LzEvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOhXjtOy
6EhovbINgTEfpaKxebYH2LwAz9IavjF677NsgQvo/R8SeOyaukeax+jvVC7diLU7
Zacc4aUJB1V6h8NDnsp/R9FhqQxSoktx8XZhBrYXpYa+9h3FuwhlVoDxGbmbtX4v
haMnTlG4eStiOFNE88pNvsfqaopa5TJ52GwjeX3vtTwDRCBQKLtWxC1J9/4/JgBX
32FDyYYpYW2IvEZciv0HC9FJr2GfbmWuQIE3R38ipwPVyyeL3o+GnZo1091TE8v8
hNBXniKC2mHi+efVnVGUUaqZ4A+AJUm9Kl7VcSFpWapJLLlUPq2We+/ocwL3nIJn
2jSOZSnYPaFxAw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:09 2026 by rpki-client