Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File:                     VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier:          XFmv0u6AsKDEWUZVqz6bnfwPID9FoNQcH5lktsVBtnc=
Subject key identifier:   62:15:7B:AF:C7:FF:07:D2:09:4B:4E:A0:B4:08:1E:08:DF:10:15:53
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer:       /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial:       019EC0A468F2DB1105AEC9E31D7D34361753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number:          1977
Signing time:             Sat 13 Jun 2026 11:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 11:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 11:01:00 +0000
Files and hashes:         1: 35RKWFaAWG0FZ0_sumSRQjo-ZTk.roa (hash: ZVFWp4+g/AarEhCpcB89stJLNFioN0GCQ4WE7V4D3XE=)
                          2: 3e1aB77stWTp_pcWReBzNO2IJyQ.roa (hash: y600ju7YKSbJWZwn4QGcu4eyhB4Kn+pcLohTFXP1j3U=)
                          3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: WGmCpznEp3/yfTKkdh+1/RYt0E3lxp3QKxE45SpiJr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:68:f2:db:11:05:ae:c9:e3:1d:7d:34:36:17:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
        Validity
            Not Before: Jun 13 11:01:00 2026 GMT
            Not After : Jun 14 11:01:00 2026 GMT
        Subject: CN=62157bafc7ff07d2094b4ea0b4081e08df101553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:d4:dc:9d:96:f7:f7:af:74:5b:e8:d4:e4:
                    65:80:63:67:8e:0b:84:2b:f7:27:85:28:65:b4:b2:
                    31:2e:b5:9d:8c:c6:ba:46:69:b6:fe:84:83:78:f1:
                    59:43:d9:77:9b:5f:ff:dc:9b:43:5c:8b:32:ed:7a:
                    5b:c7:2d:15:fc:5a:98:b1:fc:fb:c8:bc:75:f7:95:
                    bb:48:df:b0:82:5b:2e:c0:c5:bd:ec:19:94:39:c0:
                    36:1a:ed:35:bb:bc:e3:ee:53:20:22:14:65:5c:89:
                    0d:9d:8d:e6:65:8d:2e:64:f4:0f:9d:03:2b:58:2d:
                    73:74:a9:05:b9:d4:85:f6:f9:99:96:0e:62:7e:3e:
                    6b:74:d1:fc:4e:5f:0e:0b:34:d6:9d:9e:99:fa:fc:
                    7d:53:46:87:fd:4c:61:b6:e8:7c:ef:1d:98:f6:45:
                    62:ad:19:08:3e:ea:da:dc:1a:2c:d4:3b:ee:e5:6f:
                    cb:11:4d:f8:72:08:45:45:fb:36:7d:e6:fe:c9:60:
                    7f:b2:f7:f6:35:92:da:af:d7:3b:fc:6f:f3:d6:69:
                    e3:13:64:50:9d:bc:1d:06:8a:6c:7d:cb:a8:54:c7:
                    3c:2a:2e:aa:50:84:1b:59:f4:cf:c0:21:d5:57:13:
                    bd:cb:ec:51:95:b8:7c:61:3a:b2:06:1f:03:bf:04:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:15:7B:AF:C7:FF:07:D2:09:4B:4E:A0:B4:08:1E:08:DF:10:15:53
            X509v3 Authority Key Identifier:
                keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:ec:c2:12:2e:f4:4f:4f:04:a0:1b:ad:95:db:dd:59:ae:
         f4:66:28:26:b4:72:7c:90:b0:03:31:f0:c7:f7:21:f4:d9:59:
         de:31:49:63:32:61:6b:a9:cc:0d:30:da:4d:ed:ac:9d:de:cd:
         ab:59:81:fe:20:29:1b:c7:6c:c2:a7:46:10:12:8c:4a:31:72:
         d9:29:e9:10:c3:35:7f:15:4a:f3:4f:ea:10:1b:ed:a4:10:76:
         4a:a2:ac:e7:ab:88:58:60:3f:f5:5c:6e:30:4f:94:19:37:91:
         7e:83:0d:74:67:47:29:4a:73:1c:e5:10:c8:fe:26:ee:f4:e1:
         dd:c5:66:c5:80:1d:1d:27:33:8f:9b:57:0d:86:3a:fc:f5:83:
         05:76:97:94:3e:9b:57:5d:68:2b:1a:16:d4:e6:09:ce:79:07:
         c3:47:a8:c8:9f:49:65:bd:fa:3d:29:6e:ab:b5:79:47:90:c5:
         fe:f8:f6:fb:ec:10:7b:2e:eb:15:a6:e9:d2:ae:a2:5c:15:1c:
         b1:40:fe:d3:00:e0:37:fe:c2:52:d9:b4:ca:da:1c:04:1a:a8:
         75:1b:2a:fc:49:05:76:60:46:f9:f7:ad:fa:11:88:9d:51:c7:
         1f:ce:21:6e:33:68:b2:b7:2e:52:9e:d9:92:cd:24:b1:a0:09:
         3d:a5:61:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApGjy2xEFrsnjHX00NhdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjYwNjEzMTEwMTAwWhcNMjYwNjE0MTEwMTAwWjAzMTEwLwYDVQQD
Eyg2MjE1N2JhZmM3ZmYwN2QyMDk0YjRlYTBiNDA4MWUwOGRmMTAxNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9DU3J2W9/evdFvo1ORlgGNnjguE
K/cnhShltLIxLrWdjMa6Rmm2/oSDePFZQ9l3m1//3JtDXIsy7Xpbxy0V/FqYsfz7
yLx195W7SN+wglsuwMW97BmUOcA2Gu01u7zj7lMgIhRlXIkNnY3mZY0uZPQPnQMr
WC1zdKkFudSF9vmZlg5ifj5rdNH8Tl8OCzTWnZ6Z+vx9U0aH/Uxhtuh87x2Y9kVi
rRkIPura3Bos1Dvu5W/LEU34cghFRfs2feb+yWB/svf2NZLar9c7/G/z1mnjE2RQ
nbwdBopsfcuoVMc8Ki6qUIQbWfTPwCHVVxO9y+xRlbh8YTqyBh8DvwTKawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIVe6/H/wfSCUtOoLQIHgjfEBVTMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO7swhIu
9E9PBKAbrZXb3Vmu9GYoJrRyfJCwAzHwx/ch9NlZ3jFJYzJha6nMDTDaTe2snd7N
q1mB/iApG8dswqdGEBKMSjFy2SnpEMM1fxVK80/qEBvtpBB2SqKs56uIWGA/9Vxu
ME+UGTeRfoMNdGdHKUpzHOUQyP4m7vTh3cVmxYAdHSczj5tXDYY6/PWDBXaXlD6b
V11oKxoW1OYJznkHw0eoyJ9JZb36PSluq7V5R5DF/vj2++wQey7rFabp0q6iXBUc
sUD+0wDgN/7CUtm0ytocBBqodRsq/EkFdmBG+fet+hGInVHHH84hbjNosrcuUp7Z
ks0ksaAJPaVhkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:52 2026 by rpki-client