Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File:                     UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier:          NVgShRgvWQ04bfkM0teZ1flmfKIiWeUKa6nwMALTw+k=
Subject key identifier:   72:49:92:EE:4B:1E:8B:66:BD:EB:79:11:BC:A0:DB:B3:64:7B:02:7E
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer:       /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial:       019EC292C0FDD4BE910D2EF60B01DA10949A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number:          12AC
Signing time:             Sat 13 Jun 2026 20:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:58 +0000
Files and hashes:         1: 1-vw_YpjLtL2osMGBDqhaMbBPjy0.roa (hash: y1eYYcI99eIq1QFUMBnmXcbeI9owv4tyUVDJFPBTheQ=)
                          2: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: +zpQTnq/ELXAfIjqk95nxC8KQS1Ls53alCEl+foo6bY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:c0:fd:d4:be:91:0d:2e:f6:0b:01:da:10:94:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
        Validity
            Not Before: Jun 13 20:00:58 2026 GMT
            Not After : Jun 14 20:00:58 2026 GMT
        Subject: CN=724992ee4b1e8b66bdeb7911bca0dbb3647b027e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:b6:09:e8:a5:6b:7a:57:7f:93:a1:9c:20:
                    78:05:da:57:c2:19:ea:b8:50:32:66:20:e2:f4:93:
                    9c:c9:e3:d3:ca:77:97:a3:f8:d8:2f:8e:f0:8c:08:
                    94:97:60:be:5c:7b:14:68:e5:94:94:d6:3a:fe:4f:
                    f9:0b:ec:59:d9:73:9d:04:15:11:78:d1:21:ac:ba:
                    d2:7f:64:20:53:6f:fb:93:2b:f2:14:5c:bb:53:9e:
                    2a:0e:02:e7:88:b6:16:d9:58:60:f2:ee:60:1c:6d:
                    93:4b:4a:0a:16:9e:b7:04:32:e7:92:3e:cb:0e:99:
                    03:78:a8:c2:78:24:bc:1c:df:ca:99:6d:0c:35:ae:
                    46:9a:c0:15:cd:a6:f3:a1:b0:ad:2d:3d:af:d3:d6:
                    8f:41:73:6e:a6:a1:84:66:0f:87:f6:a5:17:a9:19:
                    ce:32:a9:c0:e3:fe:4a:ff:ef:30:a0:b3:4d:98:7f:
                    9e:ef:ad:9a:01:05:f4:c4:48:d5:93:be:b5:e8:75:
                    43:69:cf:e4:94:5f:1d:69:fe:38:89:f7:fc:e7:06:
                    2a:51:a6:be:f0:62:4f:d6:ad:31:dd:81:b7:49:99:
                    c4:5c:f5:06:a5:1d:cd:d8:29:a7:06:92:2a:6a:b7:
                    23:16:3e:31:2f:ba:19:25:fb:00:0e:c5:b7:3e:97:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:92:EE:4B:1E:8B:66:BD:EB:79:11:BC:A0:DB:B3:64:7B:02:7E
            X509v3 Authority Key Identifier:
                keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:28:cd:3d:a3:64:ff:30:7c:a4:bc:53:63:10:c5:ae:94:
         ec:e1:e6:a1:a3:1c:e7:65:fa:38:01:93:bb:28:b1:00:91:e8:
         26:b6:fb:e5:d9:df:41:d0:32:0b:96:53:a6:9f:ec:0e:b1:fe:
         52:b6:b7:18:58:02:42:c1:08:52:e7:60:77:fd:b4:1c:93:93:
         96:cb:f3:fd:0a:dd:37:59:c2:41:7d:71:0a:56:44:e3:4e:97:
         e0:75:ff:b1:a6:f2:b3:cb:ad:80:f0:28:56:b3:5a:ca:f6:f2:
         14:3a:57:42:e4:74:13:ca:93:23:c2:6e:06:1d:8f:10:aa:54:
         db:50:8f:1b:e8:6a:44:96:54:49:ef:e6:fa:7e:b2:74:31:4e:
         33:a8:62:b7:fa:39:2b:bf:1e:b5:7e:8b:1e:79:7f:ef:77:be:
         cd:1d:74:c5:dd:ce:11:15:e5:b5:ab:4b:2f:f7:ee:d9:77:b3:
         75:77:fe:98:6e:57:65:f5:f1:9a:f3:8c:e3:01:54:88:c8:e0:
         97:00:38:44:d7:e4:f8:e4:fa:19:f6:fd:4a:f5:18:61:8a:4a:
         b0:be:b2:ef:13:d4:5a:f9:4e:be:fa:ea:78:fd:11:f6:a0:62:
         f8:21:ab:f4:5d:86:b8:10:01:f1:15:0c:68:ee:17:b1:d1:06:
         67:c5:e0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CksD91L6RDS72CwHaEJSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMjQxNDQ5MmJiMmNmYTQwOGZmNTczYWEwNjhmY2Y5YTVl
Nzc4ZWUwHhcNMjYwNjEzMjAwMDU4WhcNMjYwNjE0MjAwMDU4WjAzMTEwLwYDVQQD
Eyg3MjQ5OTJlZTRiMWU4YjY2YmRlYjc5MTFiY2EwZGJiMzY0N2IwMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qK2Ceila3pXf5OhnCB4BdpXwhnq
uFAyZiDi9JOcyePTyneXo/jYL47wjAiUl2C+XHsUaOWUlNY6/k/5C+xZ2XOdBBUR
eNEhrLrSf2QgU2/7kyvyFFy7U54qDgLniLYW2Vhg8u5gHG2TS0oKFp63BDLnkj7L
DpkDeKjCeCS8HN/KmW0MNa5GmsAVzabzobCtLT2v09aPQXNupqGEZg+H9qUXqRnO
MqnA4/5K/+8woLNNmH+e762aAQX0xEjVk7616HVDac/klF8daf44iff85wYqUaa+
8GJP1q0x3YG3SZnEXPUGpR3N2CmnBpIqarcjFj4xL7oZJfsADsW3Ppf/+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJJku5LHotmvet5Ebyg27NkewJ+MB8GA1UdIwQY
MBaAFFMkFEkrss+kCP9XOqBo/Pml53juMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYt
Y2Q2NzY2YzM2OWExLzEvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYtY2Q2NzY2YzM2OWEx
LzEvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhIozT2j
ZP8wfKS8U2MQxa6U7OHmoaMc52X6OAGTuyixAJHoJrb75dnfQdAyC5ZTpp/sDrH+
Ura3GFgCQsEIUudgd/20HJOTlsvz/QrdN1nCQX1xClZE406X4HX/sabys8utgPAo
VrNayvbyFDpXQuR0E8qTI8JuBh2PEKpU21CPG+hqRJZUSe/m+n6ydDFOM6hit/o5
K78etX6LHnl/73e+zR10xd3OERXltatLL/fu2XezdXf+mG5XZfXxmvOM4wFUiMjg
lwA4RNfk+OT6Gfb9SvUYYYpKsL6y7xPUWvlOvvrqeP0R9qBi+CGr9F2GuBAB8RUM
aO4XsdEGZ8Xgag==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:48 2026 by rpki-client