Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File:                     CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier:          KZtJiFRJJdNNt/txpV4w+8DiZSNXleP7va2lD4kYzQg=
Subject key identifier:   89:2C:A0:6D:C2:51:1F:BF:5C:6E:1F:89:3D:C6:9B:09:65:CA:A0:75
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer:       /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial:       019EBF5A78BA17B99388361B9698EE3A77A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 05:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:37 +0000
Files and hashes:         1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: TfmNmn6B83arIIFDMR+hfmdtesEmiiSWO5e7F7w6pvM=)
                          2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:78:ba:17:b9:93:88:36:1b:96:98:ee:3a:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
        Validity
            Not Before: Jun 13 05:00:37 2026 GMT
            Not After : Jun 14 05:00:37 2026 GMT
        Subject: CN=892ca06dc2511fbf5c6e1f893dc69b0965caa075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:d1:85:c9:ea:0f:44:13:37:bf:9b:43:aa:
                    e7:40:6d:29:73:ce:a3:93:c4:92:f8:80:47:e0:39:
                    89:ca:a3:85:c6:65:df:55:49:2b:27:03:f9:54:a3:
                    37:7e:00:0f:a7:14:d3:82:4a:bb:17:87:44:53:02:
                    94:fa:06:0c:58:bf:c5:5a:9f:e8:bb:5c:39:17:b2:
                    85:73:99:03:c4:67:b6:9e:02:b2:82:49:d8:cc:a2:
                    5e:04:8b:03:fc:c0:1a:e8:ea:0b:08:51:6c:49:b6:
                    7f:a4:e5:41:38:a6:af:d8:6c:73:0a:70:6b:4d:ce:
                    75:38:d9:84:82:f6:2b:70:ab:06:8c:4e:f8:96:ea:
                    33:ac:b1:d0:6d:9d:c6:5b:c0:70:eb:24:ce:0f:a6:
                    2d:c0:81:68:2b:47:12:7d:02:c1:cf:0e:c6:9a:ff:
                    8b:81:97:be:3b:d0:b4:b2:0f:98:02:a8:36:da:09:
                    f5:14:d6:78:72:ee:fd:de:3a:05:43:19:c2:13:31:
                    46:45:81:f4:15:87:2e:28:72:f1:cc:3b:bc:49:bc:
                    98:e8:9b:bd:4e:01:78:5c:b7:4d:a6:8d:0f:95:5a:
                    fa:db:a1:25:32:6f:25:a6:80:ae:21:fa:85:8e:b7:
                    0a:2c:41:aa:b2:a6:d4:98:16:7b:1f:f7:d9:07:07:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2C:A0:6D:C2:51:1F:BF:5C:6E:1F:89:3D:C6:9B:09:65:CA:A0:75
            X509v3 Authority Key Identifier:
                keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:bc:ab:ed:4f:73:af:28:0e:c0:98:bf:29:f8:84:5f:57:
         17:e4:9b:e1:38:e8:39:26:f2:62:6c:44:f1:36:11:92:cc:a8:
         64:e0:12:62:c2:72:41:ec:f6:37:88:03:f2:38:14:01:29:fd:
         4b:20:6e:7a:1a:de:b3:61:f9:7e:4f:08:24:09:ad:9b:b2:c1:
         88:c2:c5:c7:03:bc:7a:63:42:e5:d7:42:32:70:c4:1f:6b:f1:
         ac:1c:10:8b:d3:a3:8b:91:9c:7f:d5:b9:29:67:fc:89:06:b3:
         b3:b7:c3:ee:44:f7:1c:4b:7d:3b:17:82:b3:01:f5:57:08:9a:
         fc:8d:3e:c1:ea:a6:b2:5a:53:71:87:50:c7:fd:24:f4:b9:cc:
         2f:d6:6c:c3:ba:27:72:9c:2c:cd:d1:8f:92:43:9a:d9:a4:17:
         d9:ff:cb:25:ea:e7:9c:eb:89:f4:0c:2d:33:88:c0:9c:25:54:
         1c:04:b5:ca:da:8b:45:78:cc:fc:da:32:ba:c8:07:e0:d4:dc:
         8f:1f:54:4e:96:12:8a:d1:d1:d7:35:80:08:03:28:40:ef:c0:
         3b:27:ad:17:53:52:eb:f6:af:2e:55:86:f7:de:0a:ac:97:49:
         79:9f:d3:c3:6a:d2:8c:b6:7e:ff:92:00:c0:7d:a3:87:e7:41:
         23:d4:2e:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wni6F7mTiDYblpjuOneoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNhNjBlMDQ4NDdiZDJmN2M0NWM4Njg3ZTVmNWFhZDFm
ZWU4ZmIwHhcNMjYwNjEzMDUwMDM3WhcNMjYwNjE0MDUwMDM3WjAzMTEwLwYDVQQD
Eyg4OTJjYTA2ZGMyNTExZmJmNWM2ZTFmODkzZGM2OWIwOTY1Y2FhMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GDRhcnqD0QTN7+bQ6rnQG0pc86j
k8SS+IBH4DmJyqOFxmXfVUkrJwP5VKM3fgAPpxTTgkq7F4dEUwKU+gYMWL/FWp/o
u1w5F7KFc5kDxGe2ngKygknYzKJeBIsD/MAa6OoLCFFsSbZ/pOVBOKav2GxzCnBr
Tc51ONmEgvYrcKsGjE74luozrLHQbZ3GW8Bw6yTOD6YtwIFoK0cSfQLBzw7Gmv+L
gZe+O9C0sg+YAqg22gn1FNZ4cu793joFQxnCEzFGRYH0FYcuKHLxzDu8SbyY6Ju9
TgF4XLdNpo0PlVr626ElMm8lpoCuIfqFjrcKLEGqsqbUmBZ7H/fZBwdvEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIksoG3CUR+/XG4fiT3GmwllyqB1MB8GA1UdIwQY
MBaAFAgcpg4EhHvS98Rchofl9arR/uj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMt
YjdhYjY4NmMwNzZlLzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMtYjdhYjY4NmMwNzZl
LzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG128q+1P
c68oDsCYvyn4hF9XF+Sb4TjoOSbyYmxE8TYRksyoZOASYsJyQez2N4gD8jgUASn9
SyBuehres2H5fk8IJAmtm7LBiMLFxwO8emNC5ddCMnDEH2vxrBwQi9Oji5Gcf9W5
KWf8iQazs7fD7kT3HEt9OxeCswH1Vwia/I0+weqmslpTcYdQx/0k9LnML9Zsw7on
cpwszdGPkkOa2aQX2f/LJernnOuJ9AwtM4jAnCVUHAS1ytqLRXjM/NoyusgH4NTc
jx9UTpYSitHR1zWACAMoQO/AOyetF1NS6/avLlWG994KrJdJeZ/Tw2rSjLZ+/5IA
wH2jh+dBI9Qulw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:41 2026 by rpki-client