Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File:                     rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier:          26RGm1wdi2IMYVr0e0gM0RobzuxcbBDBIDpXkHDGwUE=
Subject key identifier:   EC:FF:07:B9:4C:21:F8:26:59:ED:F2:5C:52:B6:BC:87:24:34:36:76
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer:       /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial:       019EC0DB04EC5B3A34F29D049B5F0BDF60F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 12:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:39 +0000
Files and hashes:         1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
                          2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: FH8+vt+WbBbfhGM1Visxlgt9Sb70sDF/swUKHVsQ2iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:04:ec:5b:3a:34:f2:9d:04:9b:5f:0b:df:60:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
        Validity
            Not Before: Jun 13 12:00:39 2026 GMT
            Not After : Jun 14 12:00:39 2026 GMT
        Subject: CN=ecff07b94c21f82659edf25c52b6bc8724343676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:5f:5f:d8:56:6b:47:e9:36:9b:31:06:b5:
                    a4:df:a5:5f:90:1b:ca:5e:17:25:c2:72:74:54:f8:
                    63:42:46:f9:cf:69:e5:9b:cd:0c:95:d0:55:85:dc:
                    d0:e3:17:88:b4:b2:8f:a8:72:99:26:f5:07:5d:15:
                    1b:fc:29:4d:99:90:03:f5:84:17:f2:88:10:49:4a:
                    90:46:98:dc:d7:2a:70:dd:fd:ea:54:f0:3d:70:16:
                    94:7b:b3:aa:b4:90:f7:1c:9d:54:9e:ce:53:5f:b9:
                    e5:97:37:2f:92:e0:b3:b1:f5:4e:a1:c0:42:ab:68:
                    6f:77:3a:54:65:31:c6:3d:e5:d4:2f:8e:69:c6:1d:
                    31:8e:3c:49:e7:04:a9:77:42:a5:b6:9b:d5:75:d2:
                    a3:75:c7:bc:dc:06:64:f3:d7:eb:74:86:92:f9:45:
                    69:bb:f9:b5:87:d3:d4:27:d1:9e:06:ce:79:86:2d:
                    80:8d:84:d4:25:b4:70:0c:4c:ea:91:2b:03:b5:4c:
                    bf:8f:c5:0b:6d:53:ca:f3:cf:9c:a5:00:6a:b2:7f:
                    2c:17:ad:b9:61:d7:64:5a:3a:c7:46:38:0e:01:ff:
                    04:d9:85:91:4c:5d:3a:97:44:5a:db:3a:92:e5:59:
                    8b:5e:8b:35:70:c7:27:c0:59:71:51:0e:17:44:5e:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FF:07:B9:4C:21:F8:26:59:ED:F2:5C:52:B6:BC:87:24:34:36:76
            X509v3 Authority Key Identifier:
                keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:a4:d5:41:62:11:f0:79:1a:ee:9c:f6:cf:0d:ee:0e:fc:
         ea:4e:5a:20:d0:ac:a3:ef:80:17:97:58:76:a1:71:6c:1c:41:
         d7:df:e1:56:7c:b0:f5:52:1c:bd:ec:12:78:20:be:ad:f3:24:
         2c:f2:24:f4:8f:3b:70:da:67:a3:4f:a9:27:26:f1:61:c5:e2:
         9f:44:73:53:6d:9a:af:46:54:47:ef:aa:3a:04:da:7a:be:8a:
         fe:2e:6b:e0:47:af:1e:c1:27:36:70:3f:ba:6d:b6:07:4c:60:
         53:26:51:4f:b0:93:06:b0:1b:57:80:60:3f:83:2f:8e:5e:73:
         d9:6f:78:13:68:b2:9c:42:c2:61:70:b8:fa:1f:4a:62:2b:b5:
         a4:45:4a:4a:1f:79:27:11:cf:59:b4:15:b0:e0:2f:aa:18:35:
         e6:ab:ef:c5:0d:58:5c:fc:0f:c7:32:ae:4c:a1:83:30:57:cc:
         39:79:cf:db:5f:b6:94:ce:41:90:c3:b5:98:a3:3f:a6:98:5e:
         df:9b:2b:b4:5d:cd:15:93:e3:13:83:16:b3:f7:2e:e7:04:74:
         71:4f:d5:a4:81:8a:4f:1e:40:9f:15:c6:a1:c1:2b:dd:48:41:
         06:be:cf:df:47:57:ab:5f:d2:36:f0:c5:e4:da:c9:6e:3a:33:
         e3:5f:5c:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2wTsWzo08p0Em18L32DyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWVmM2Q2MjZhNzU0ZTQzZDA3YzcwMGQwNTEzYzExNGI2
NjBlZjUwHhcNMjYwNjEzMTIwMDM5WhcNMjYwNjE0MTIwMDM5WjAzMTEwLwYDVQQD
EyhlY2ZmMDdiOTRjMjFmODI2NTllZGYyNWM1MmI2YmM4NzI0MzQzNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8pfX9hWa0fpNpsxBrWk36VfkBvK
XhclwnJ0VPhjQkb5z2nlm80MldBVhdzQ4xeItLKPqHKZJvUHXRUb/ClNmZAD9YQX
8ogQSUqQRpjc1ypw3f3qVPA9cBaUe7OqtJD3HJ1Uns5TX7nllzcvkuCzsfVOocBC
q2hvdzpUZTHGPeXUL45pxh0xjjxJ5wSpd0KltpvVddKjdce83AZk89frdIaS+UVp
u/m1h9PUJ9GeBs55hi2AjYTUJbRwDEzqkSsDtUy/j8ULbVPK88+cpQBqsn8sF625
YddkWjrHRjgOAf8E2YWRTF06l0Ra2zqS5VmLXos1cMcnwFlxUQ4XRF48UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz/B7lMIfgmWe3yXFK2vIckNDZ2MB8GA1UdIwQY
MBaAFK4e89Ymp1TkPQfHANBRPBFLZg71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUt
OGU4MWQxMzUwNzM2LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUtOGU4MWQxMzUwNzM2
LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACr2k1UFi
EfB5Gu6c9s8N7g786k5aINCso++AF5dYdqFxbBxB19/hVnyw9VIcvewSeCC+rfMk
LPIk9I87cNpno0+pJybxYcXin0RzU22ar0ZUR++qOgTaer6K/i5r4EevHsEnNnA/
um22B0xgUyZRT7CTBrAbV4BgP4Mvjl5z2W94E2iynELCYXC4+h9KYiu1pEVKSh95
JxHPWbQVsOAvqhg15qvvxQ1YXPwPxzKuTKGDMFfMOXnP21+2lM5BkMO1mKM/pphe
35srtF3NFZPjE4MWs/cu5wR0cU/VpIGKTx5AnxXGocEr3UhBBr7P30dXq1/SNvDF
5NrJbjoz419cZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:09:19 2026 by rpki-client