Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File:                     fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier:          Ruo/j0PBAajtPET9jdbpi8NBlkDKiFPWWPx2VtreuIM=
Subject key identifier:   10:7C:F4:89:D8:48:FC:A6:68:0A:3C:E4:66:5B:AE:E2:40:D0:86:F5
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer:       /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial:       019EC1B74FC91B1083C6FBF278FDA4792B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number:          0513
Signing time:             Sat 13 Jun 2026 16:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:16 +0000
Files and hashes:         1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: ylQRbalNOO/zEkAEuh0ZCQ6DRWX8V+voC1/nPg3wqk0=)
                          2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:4f:c9:1b:10:83:c6:fb:f2:78:fd:a4:79:2b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
        Validity
            Not Before: Jun 13 16:01:16 2026 GMT
            Not After : Jun 14 16:01:16 2026 GMT
        Subject: CN=107cf489d848fca6680a3ce4665baee240d086f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:59:bf:3a:06:d9:17:7f:c1:e5:f0:e5:a9:
                    2d:4c:60:da:0e:5b:37:43:4b:1b:e6:6e:92:16:f6:
                    13:26:75:1b:55:05:52:7c:61:e3:49:f2:02:f2:9d:
                    a1:f3:4e:69:7b:e1:1f:4b:2d:60:ba:2f:de:f9:c8:
                    06:39:13:3c:f0:ff:a6:b9:71:0f:da:87:61:ea:99:
                    89:89:5f:cd:04:60:92:cc:4c:c2:32:f2:3d:8c:87:
                    74:52:88:ac:35:e0:a9:73:35:31:9a:6b:5e:54:7c:
                    41:5a:eb:64:32:eb:73:02:7b:71:ee:40:27:6f:cc:
                    93:5d:ae:25:f2:2c:2d:5e:c0:7a:d7:c4:73:aa:f8:
                    85:cb:d1:93:37:df:b6:d0:55:00:c6:0d:7f:eb:c9:
                    96:0b:1b:cd:7a:9f:06:fb:ae:fa:92:2f:28:7f:49:
                    c7:86:f5:ba:06:0d:ca:18:0d:b9:23:34:80:2c:ab:
                    ce:4e:51:f6:58:30:a4:dd:7b:8b:3a:6b:17:20:31:
                    20:60:99:52:30:60:85:99:f2:ae:3b:b4:bd:fb:78:
                    83:4e:39:d9:83:6d:97:a4:cb:56:27:ec:53:fc:4b:
                    94:50:59:b4:cc:fb:78:e2:8b:4e:e0:67:5c:29:f8:
                    ee:43:3b:6d:4d:d6:e2:60:dc:33:75:da:ea:6b:86:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:F4:89:D8:48:FC:A6:68:0A:3C:E4:66:5B:AE:E2:40:D0:86:F5
            X509v3 Authority Key Identifier:
                keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:22:46:6b:7c:80:3d:03:80:be:bd:55:9e:08:e8:ce:3f:59:
         dd:97:45:9d:e8:bb:ae:24:84:b9:be:85:df:9d:20:d4:45:48:
         f1:1b:03:8f:97:80:9a:a3:5f:d4:53:02:d4:26:34:f5:4b:a4:
         90:c3:64:f4:af:49:d6:65:45:20:8f:f9:a4:c6:6b:e9:05:85:
         4c:c1:93:fd:ac:a7:de:b4:c5:ef:1a:e1:88:62:15:8b:ef:88:
         89:11:22:74:74:16:2b:87:02:7a:21:52:2b:6d:52:d3:70:dd:
         d3:3d:01:d4:ca:be:05:45:31:0c:94:c0:ce:53:f0:1f:88:c1:
         ca:cc:c5:6c:e8:f4:f2:e2:c9:d2:51:e3:0e:89:88:c6:c0:45:
         e2:f8:8a:f9:ac:0f:b4:08:b4:ed:fc:95:92:55:b3:fe:cc:b8:
         9e:7f:93:48:d2:c7:d7:1b:8d:07:69:b0:f9:9a:8c:bd:c5:78:
         3c:b3:ad:54:8e:42:5f:c8:2f:59:11:c3:29:af:57:83:98:39:
         65:fc:e3:75:23:22:07:69:60:22:f5:4b:00:03:98:e3:40:cf:
         3e:ae:f3:f1:7f:b1:bb:0c:a4:eb:e0:55:74:a1:ab:af:1c:a5:
         fd:b3:fe:21:43:ec:05:62:75:31:ec:fa:09:cc:2a:15:dd:17:
         d1:5a:80:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt0/JGxCDxvvyeP2keSsZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTM0MGVkMjMyM2E5Mjg2ZTk4MGY2NjQ2OTk5MGE5YTFl
MzA3NWQwHhcNMjYwNjEzMTYwMTE2WhcNMjYwNjE0MTYwMTE2WjAzMTEwLwYDVQQD
EygxMDdjZjQ4OWQ4NDhmY2E2NjgwYTNjZTQ2NjViYWVlMjQwZDA4NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte1ZvzoG2Rd/weXw5aktTGDaDls3
Q0sb5m6SFvYTJnUbVQVSfGHjSfIC8p2h805pe+EfSy1gui/e+cgGORM88P+muXEP
2odh6pmJiV/NBGCSzEzCMvI9jId0UoisNeCpczUxmmteVHxBWutkMutzAntx7kAn
b8yTXa4l8iwtXsB618RzqviFy9GTN9+20FUAxg1/68mWCxvNep8G+676ki8of0nH
hvW6Bg3KGA25IzSALKvOTlH2WDCk3XuLOmsXIDEgYJlSMGCFmfKuO7S9+3iDTjnZ
g22XpMtWJ+xT/EuUUFm0zPt44otO4GdcKfjuQzttTdbiYNwzddrqa4ZBHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB89InYSPymaAo85GZbruJA0Ib1MB8GA1UdIwQY
MBaAFH4TQO0jI6kobpgPZkaZkKmh4wddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMt
ZmUwMjdhMDM0NDQ5LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMtZmUwMjdhMDM0NDQ5
LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSJGa3yA
PQOAvr1Vngjozj9Z3ZdFnei7riSEub6F350g1EVI8RsDj5eAmqNf1FMC1CY09Uuk
kMNk9K9J1mVFII/5pMZr6QWFTMGT/ayn3rTF7xrhiGIVi++IiREidHQWK4cCeiFS
K21S03Dd0z0B1Mq+BUUxDJTAzlPwH4jByszFbOj08uLJ0lHjDomIxsBF4viK+awP
tAi07fyVklWz/sy4nn+TSNLH1xuNB2mw+ZqMvcV4PLOtVI5CX8gvWRHDKa9Xg5g5
ZfzjdSMiB2lgIvVLAAOY40DPPq7z8X+xuwyk6+BVdKGrrxyl/bP+IUPsBWJ1Mez6
CcwqFd0X0VqAug==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:48:12 2026 by rpki-client