Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.mft
File:                     vqnzCuk54vKu9_9WpwLQ3n93ZcE.mft (raw, json)
Hash identifier:          eY/rjTgbpwQ/4W6WO1JFO0QqO5hWMNRYUiKUFVAHyig=
Subject key identifier:   C8:95:5F:3A:0F:B7:69:19:B1:38:7A:A8:D1:3F:5A:AF:0A:EF:A7:10
Authority key identifier: BE:A9:F3:0A:E9:39:E2:F2:AE:F7:FF:56:A7:02:D0:DE:7F:77:65:C1
Certificate issuer:       /CN=bea9f30ae939e2f2aef7ff56a702d0de7f7765c1
Certificate serial:       019EC1B6542F55E72E10F9087323255B1FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.mft
Manifest number:          18
Signing time:             Sat 13 Jun 2026 16:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:12 +0000
Files and hashes:         1: 9a7AiwDzEdepE21q5QIgpC-QQJg.roa (hash: J06hMIeVTSaFdIFwsDShPyHIC1yuFakT1lXZGtETdE8=)
                          2: vqnzCuk54vKu9_9WpwLQ3n93ZcE.crl (hash: UUDBYlu/0b/4oWLpmvuDmV/tFgQhr/dwpGO1/nj80H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:54:2f:55:e7:2e:10:f9:08:73:23:25:5b:1f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea9f30ae939e2f2aef7ff56a702d0de7f7765c1
        Validity
            Not Before: Jun 13 16:00:12 2026 GMT
            Not After : Jun 14 16:00:12 2026 GMT
        Subject: CN=c8955f3a0fb76919b1387aa8d13f5aaf0aefa710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:bc:78:dc:29:54:1d:d1:db:7c:a9:6f:e0:
                    5b:a1:5b:92:70:6a:75:76:4b:56:36:ad:2f:2c:16:
                    1f:7f:4c:24:9c:7d:98:72:b1:70:96:8d:e9:60:f0:
                    a7:bd:90:fc:3e:0a:14:07:c1:67:71:51:2c:2a:ed:
                    e8:a3:2b:f9:24:93:ec:ba:77:91:6f:0f:29:90:e5:
                    8d:42:3d:f0:fd:f7:bd:13:4c:79:3a:4f:43:c7:26:
                    a6:90:5a:f8:a3:d8:a1:80:93:ba:39:a9:ad:9e:bb:
                    7c:0e:b3:12:69:b5:e4:cb:e4:32:b1:62:bd:62:ac:
                    c1:1e:00:c2:7e:2b:f9:75:28:ad:a3:d2:93:3d:2f:
                    30:b9:7e:c4:25:0c:0f:eb:95:da:b5:fb:9f:ec:4b:
                    7f:db:cc:4d:ce:28:59:b8:fc:20:3c:fb:0e:17:2c:
                    46:2b:51:6f:11:d3:02:ba:0b:80:96:98:30:d5:61:
                    ff:34:a1:dd:b2:27:9b:23:0b:71:7a:7d:04:c7:d5:
                    8d:1d:c4:9a:5d:3e:b5:fb:83:3f:df:f5:6c:04:52:
                    6d:01:84:49:94:2a:a3:4c:16:d8:c8:b3:2a:1d:9e:
                    8f:0c:46:84:b2:8e:d9:34:33:58:46:4f:30:7c:19:
                    c7:1e:f0:2d:c0:d9:10:19:6d:ee:20:e8:9e:82:80:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:95:5F:3A:0F:B7:69:19:B1:38:7A:A8:D1:3F:5A:AF:0A:EF:A7:10
            X509v3 Authority Key Identifier:
                keyid:BE:A9:F3:0A:E9:39:E2:F2:AE:F7:FF:56:A7:02:D0:DE:7F:77:65:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d8:db:9f:4e:1e:db:fc:78:83:fb:87:5b:2e:c6:8d:fd:cb:
         bd:dd:01:61:d3:fb:7b:f2:f7:f8:85:29:81:e7:8a:61:57:76:
         0c:40:a4:9b:fd:ed:ee:f7:98:12:89:9b:59:ee:7d:eb:16:75:
         e4:14:63:cd:56:fe:67:cd:63:1b:8f:51:8e:f6:37:dd:f0:cc:
         f6:d2:e9:28:56:38:55:e2:6e:e0:03:ca:fc:94:09:34:ed:84:
         7c:e7:29:99:dd:6f:b9:9b:f2:0e:80:c9:f4:f4:1b:46:3b:cc:
         47:5b:ab:28:db:1c:e9:fe:a3:6a:51:89:e4:09:08:79:46:6d:
         e5:66:85:bf:72:19:c2:9f:a0:e0:f5:a1:d6:53:60:f2:26:4e:
         61:a8:a6:b5:99:e3:27:23:0b:37:10:aa:38:04:00:a8:70:8a:
         83:8a:70:3f:3b:8d:ad:03:76:ad:74:20:f2:6d:4e:03:34:26:
         d4:19:5f:03:64:ea:76:27:3d:f1:54:7c:a4:e9:7c:0b:fd:a8:
         ee:a6:9c:22:38:0c:25:ed:fd:87:66:22:83:0e:75:9b:0e:25:
         2a:ff:2f:05:db:6c:4f:16:eb:ac:e1:17:94:46:c2:99:e6:f0:
         b8:84:07:ea:6f:5c:a7:fa:ab:39:f0:0c:77:42:5c:a4:0c:28:
         d3:0a:7c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtlQvVecuEPkIcyMlWx+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTlmMzBhZTkzOWUyZjJhZWY3ZmY1NmE3MDJkMGRlN2Y3
NzY1YzEwHhcNMjYwNjEzMTYwMDEyWhcNMjYwNjE0MTYwMDEyWjAzMTEwLwYDVQQD
EyhjODk1NWYzYTBmYjc2OTE5YjEzODdhYThkMTNmNWFhZjBhZWZhNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXC8eNwpVB3R23ypb+BboVuScGp1
dktWNq0vLBYff0wknH2YcrFwlo3pYPCnvZD8PgoUB8FncVEsKu3ooyv5JJPsuneR
bw8pkOWNQj3w/fe9E0x5Ok9DxyamkFr4o9ihgJO6Oamtnrt8DrMSabXky+QysWK9
YqzBHgDCfiv5dSito9KTPS8wuX7EJQwP65Xatfuf7Et/28xNzihZuPwgPPsOFyxG
K1FvEdMCuguAlpgw1WH/NKHdsiebIwtxen0Ex9WNHcSaXT61+4M/3/VsBFJtAYRJ
lCqjTBbYyLMqHZ6PDEaEso7ZNDNYRk8wfBnHHvAtwNkQGW3uIOiegoDfrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiVXzoPt2kZsTh6qNE/Wq8K76cQMB8GA1UdIwQY
MBaAFL6p8wrpOeLyrvf/VqcC0N5/d2XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFuekN1azU0dkt1OV85V3B3TFEzbjkzWmNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MzgyZTEtYWNkOC00ZjhiLTkyYjgt
MTA3YTI3MjIwMDcxLzEvdnFuekN1azU0dkt1OV85V3B3TFEzbjkzWmNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MzgyZTEtYWNkOC00ZjhiLTkyYjgtMTA3YTI3MjIwMDcx
LzEvdnFuekN1azU0dkt1OV85V3B3TFEzbjkzWmNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNjbn04e
2/x4g/uHWy7Gjf3Lvd0BYdP7e/L3+IUpgeeKYVd2DECkm/3t7veYEombWe596xZ1
5BRjzVb+Z81jG49RjvY33fDM9tLpKFY4VeJu4APK/JQJNO2EfOcpmd1vuZvyDoDJ
9PQbRjvMR1urKNsc6f6jalGJ5AkIeUZt5WaFv3IZwp+g4PWh1lNg8iZOYaimtZnj
JyMLNxCqOAQAqHCKg4pwPzuNrQN2rXQg8m1OAzQm1BlfA2Tqdic98VR8pOl8C/2o
7qacIjgMJe39h2Yigw51mw4lKv8vBdtsTxbrrOEXlEbCmebwuIQH6m9cp/qrOfAM
d0JcpAwo0wp8zw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:05 2026 by rpki-client