Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          e31P7w3CqAtFzDP9VQXOUe6Q2YTYuTQT+WMwzyIwY2w=
Subject key identifier:   70:A5:F6:FC:61:C9:8B:66:82:38:49:50:46:E0:57:D2:8E:52:43:D2
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019EBF5B27D1E2F0C6A2636BD70BCE9E0202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          199F
Signing time:             Sat 13 Jun 2026 05:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:22 +0000
Files and hashes:         1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=)
                          2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=)
                          3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=)
                          4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=)
                          5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=)
                          6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=)
                          7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=)
                          8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=)
                          9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: jEWZGJeepDE9n2ntrcel53BP13q4sC13sPL021l9JQo=)
                          10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=)
                          11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=)
                          12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=)
                          13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=)
                          14: jOWVYK7gkC0LkmTchBPKIshY1wg.roa (hash: GtMSCed+k6Ff9NDCC09DG2TdmxdSLzC8T5DFgatfys0=)
                          15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=)
                          16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=)
                          17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:27:d1:e2:f0:c6:a2:63:6b:d7:0b:ce:9e:02:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Jun 13 05:01:22 2026 GMT
            Not After : Jun 14 05:01:22 2026 GMT
        Subject: CN=70a5f6fc61c98b668238495046e057d28e5243d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:df:47:1a:7c:ab:61:81:b4:08:d1:3f:2b:
                    58:fb:22:67:fa:8b:f6:3d:3d:66:c3:51:ca:99:2a:
                    4e:92:c6:00:5b:6b:b7:cf:d7:72:d7:e2:34:3e:ba:
                    7e:be:c1:02:29:0d:93:b4:e8:ef:bc:8a:d7:60:eb:
                    ea:8c:1b:23:1d:63:c4:0d:55:fb:2b:c3:4a:c8:ef:
                    16:ce:db:e0:23:94:db:68:3b:44:66:38:be:39:9a:
                    ac:ea:17:77:70:65:61:36:17:2e:76:4b:22:0f:f6:
                    e3:8e:56:9a:d6:b9:f2:6f:69:61:67:12:4d:c0:84:
                    3a:ee:98:68:c2:eb:f1:96:43:82:d1:68:a6:54:90:
                    e1:6d:dd:84:60:b7:dc:53:19:16:53:3c:fb:f8:35:
                    dc:28:74:29:18:f8:f9:ec:3c:e2:6d:3f:9b:fb:7e:
                    e7:77:f4:9a:d2:49:47:0a:f6:9c:a5:ff:9b:a4:ed:
                    5d:87:11:29:1a:51:fa:79:0b:49:fd:3c:28:c9:2f:
                    29:38:0b:39:95:c1:6d:0f:f8:c1:74:6e:ac:2c:2a:
                    63:08:00:56:5d:ca:9b:f9:a5:ba:16:67:e0:86:67:
                    f3:92:d7:7d:5c:8b:b3:c4:5f:7b:2a:21:d2:d6:fa:
                    8d:7b:c5:42:90:bf:c4:73:31:9a:3f:b2:b4:e2:2f:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A5:F6:FC:61:C9:8B:66:82:38:49:50:46:E0:57:D2:8E:52:43:D2
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:36:ab:bb:7a:83:82:25:6c:9d:a5:43:54:d2:fb:9c:66:f1:
         61:cd:a7:39:5c:db:3f:1d:27:7e:96:40:7e:09:ed:be:ac:91:
         16:e9:9e:12:36:2a:9b:c5:a5:2a:0d:c5:32:88:fd:c7:a9:6a:
         46:7a:5d:b0:75:a3:d2:24:8b:c8:03:e7:02:6c:d1:e3:53:3b:
         1f:fc:1c:86:38:55:29:dc:18:31:6c:be:98:1b:fa:9d:f1:c8:
         da:eb:d8:ac:b7:19:45:64:9e:98:35:c3:a6:e9:43:17:34:0d:
         58:fb:35:22:ee:51:d5:c5:32:0d:f0:d0:f4:3d:51:a2:37:c5:
         d9:52:42:b2:4a:ea:92:e2:fc:41:d2:fd:c0:aa:5d:3c:6b:0f:
         bf:01:7a:07:92:be:7a:9b:7e:d5:8d:2d:b4:39:4a:41:5e:8a:
         4e:0b:36:86:db:80:8d:8d:cf:e7:e6:48:2a:53:71:b5:f9:55:
         c3:fe:3a:4f:04:3d:32:0a:f8:58:d7:34:17:fd:d2:d6:09:e4:
         3c:aa:5e:41:dc:ff:26:45:87:9f:7e:31:da:68:29:5d:6e:5d:
         7c:2e:e6:4c:31:e2:81:12:e9:94:27:46:1a:cf:7b:fa:76:49:
         e8:73:e0:92:2b:f1:36:1b:4b:10:83:57:1c:d6:9c:c3:de:68:
         5a:f0:86:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WyfR4vDGomNr1wvOngICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjYwNjEzMDUwMTIyWhcNMjYwNjE0MDUwMTIyWjAzMTEwLwYDVQQD
Eyg3MGE1ZjZmYzYxYzk4YjY2ODIzODQ5NTA0NmUwNTdkMjhlNTI0M2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34nfRxp8q2GBtAjRPytY+yJn+ov2
PT1mw1HKmSpOksYAW2u3z9dy1+I0Prp+vsECKQ2TtOjvvIrXYOvqjBsjHWPEDVX7
K8NKyO8WztvgI5TbaDtEZji+OZqs6hd3cGVhNhcudksiD/bjjlaa1rnyb2lhZxJN
wIQ67phowuvxlkOC0WimVJDhbd2EYLfcUxkWUzz7+DXcKHQpGPj57DzibT+b+37n
d/Sa0klHCvacpf+bpO1dhxEpGlH6eQtJ/TwoyS8pOAs5lcFtD/jBdG6sLCpjCABW
Xcqb+aW6Fmfghmfzktd9XIuzxF97KiHS1vqNe8VCkL/EczGaP7K04i+LXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCl9vxhyYtmgjhJUEbgV9KOUkPSMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjaru3qD
giVsnaVDVNL7nGbxYc2nOVzbPx0nfpZAfgntvqyRFumeEjYqm8WlKg3FMoj9x6lq
RnpdsHWj0iSLyAPnAmzR41M7H/wchjhVKdwYMWy+mBv6nfHI2uvYrLcZRWSemDXD
pulDFzQNWPs1Iu5R1cUyDfDQ9D1RojfF2VJCskrqkuL8QdL9wKpdPGsPvwF6B5K+
ept+1Y0ttDlKQV6KTgs2htuAjY3P5+ZIKlNxtflVw/46TwQ9Mgr4WNc0F/3S1gnk
PKpeQdz/JkWHn34x2mgpXW5dfC7mTDHigRLplCdGGs97+nZJ6HPgkivxNhtLEINX
HNacw95oWvCGiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:44:39 2026 by rpki-client