Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File:                     sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier:          Kf9kDXyST1O+pbXK3CFZeQ686GqIDDRT/QKUGBe3I+U=
Subject key identifier:   47:05:01:2B:BB:EC:3D:DE:F0:5B:DF:1D:80:E3:A4:95:31:3C:91:A9
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer:       /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial:       019EC0A411FE871AF8BA756D8721D20A4E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number:          18EC
Signing time:             Sat 13 Jun 2026 11:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:38 +0000
Files and hashes:         1: IRpFGeK75W2NCoLOiJ_s8Xp5yew.roa (hash: BhIo7ljP7ZgEPGbs9sKTB4qik1eSNnRy76SvPdzQrR4=)
                          2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: cev4jNHYI7MKdLnwfTPyzrleCH7RGcYvtD+fRbQG/CM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:11:fe:87:1a:f8:ba:75:6d:87:21:d2:0a:4e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
        Validity
            Not Before: Jun 13 11:00:38 2026 GMT
            Not After : Jun 14 11:00:38 2026 GMT
        Subject: CN=4705012bbbec3ddef05bdf1d80e3a495313c91a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:b8:8d:cb:6d:31:c5:00:e9:1b:74:29:15:
                    53:8e:84:1e:88:1e:cc:4c:14:47:dd:13:92:53:18:
                    a1:8d:8e:1b:52:70:64:52:e7:11:02:a2:5f:cb:73:
                    49:2d:56:67:a9:5c:6f:3a:da:d7:93:7b:3f:02:31:
                    32:65:f6:e2:c1:c0:63:4d:fe:59:20:2c:44:63:2c:
                    56:93:cb:c7:1f:d7:bb:3d:5b:fd:16:6f:a4:2e:55:
                    86:92:c2:e7:9f:74:e6:b5:f3:4c:7f:d4:36:1a:e8:
                    2b:b3:7b:80:77:83:f9:31:cb:3f:ba:9f:31:a4:a7:
                    8d:22:d0:8b:cb:23:2c:be:7a:7d:e5:e4:8f:12:65:
                    c8:af:1d:42:94:56:57:f1:d9:f5:38:25:53:09:02:
                    d1:66:b9:84:85:13:64:6a:7d:97:54:c5:c5:b9:ae:
                    ad:8e:2c:a4:4d:07:5c:83:8c:15:26:fc:f9:c4:a8:
                    03:f5:6a:83:d4:5e:5a:db:e4:30:11:58:d8:e1:90:
                    53:8f:c3:5c:05:88:e5:25:31:85:b5:b8:a8:6b:6a:
                    28:41:0d:77:ef:2e:e6:cf:7e:e4:0f:a3:d8:c9:2c:
                    6b:4c:38:91:33:b3:70:bf:0a:22:ce:9c:7f:89:44:
                    bc:e6:f4:b8:e0:5c:98:8f:58:8e:ee:7e:3d:f7:19:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:05:01:2B:BB:EC:3D:DE:F0:5B:DF:1D:80:E3:A4:95:31:3C:91:A9
            X509v3 Authority Key Identifier:
                keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:52:e0:9b:76:f2:ea:89:80:e4:05:17:ce:4b:7a:3d:62:63:
         9e:e0:b6:72:72:49:38:90:6c:3f:26:00:d5:5f:d5:b3:63:34:
         0a:dc:08:b1:cb:7a:d7:81:c2:4d:6d:66:b4:7b:15:1a:77:53:
         0f:51:dc:c8:0a:fb:1a:dc:51:b4:d1:ba:ea:4d:d0:11:c8:96:
         ed:c8:d8:f1:09:56:7f:36:0d:71:8e:e8:65:72:04:ea:00:43:
         8f:4c:a4:0a:20:c7:1e:28:45:a8:db:a9:10:48:1b:01:d1:fb:
         7f:a5:ac:b3:33:4a:d9:43:3c:24:41:0a:8e:39:ba:7e:dd:a9:
         fa:af:66:66:a6:4b:20:5f:fb:d7:32:bd:4e:4d:e3:c5:1c:9e:
         87:8f:ef:91:d9:e4:68:0d:cb:82:d9:c0:0a:25:60:56:d3:78:
         32:cc:13:f7:88:51:6e:3d:d4:69:d9:1a:b9:13:f3:90:37:a5:
         9c:2d:7a:77:93:9c:4c:ea:08:5b:39:ae:04:bb:bc:60:c6:28:
         8a:a8:55:f5:18:3e:c7:fe:48:13:d8:c6:90:c4:c5:91:77:74:
         37:f4:4e:c2:a2:8b:a6:26:a6:9a:77:f1:c5:61:44:0b:e9:c0:
         fd:ee:72:ca:b4:87:6f:06:b6:d8:59:93:33:a5:2d:3d:71:e5:
         56:2b:20:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApBH+hxr4unVthyHSCk5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDc4MGRmMzZiNWI5NDJmNjYwZTQwM2EyZmU2MDhhNzVl
NGU1N2QwHhcNMjYwNjEzMTEwMDM4WhcNMjYwNjE0MTEwMDM4WjAzMTEwLwYDVQQD
Eyg0NzA1MDEyYmJiZWMzZGRlZjA1YmRmMWQ4MGUzYTQ5NTMxM2M5MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn24jcttMcUA6Rt0KRVTjoQeiB7M
TBRH3ROSUxihjY4bUnBkUucRAqJfy3NJLVZnqVxvOtrXk3s/AjEyZfbiwcBjTf5Z
ICxEYyxWk8vHH9e7PVv9Fm+kLlWGksLnn3TmtfNMf9Q2Gugrs3uAd4P5Mcs/up8x
pKeNItCLyyMsvnp95eSPEmXIrx1ClFZX8dn1OCVTCQLRZrmEhRNkan2XVMXFua6t
jiykTQdcg4wVJvz5xKgD9WqD1F5a2+QwEVjY4ZBTj8NcBYjlJTGFtbioa2ooQQ13
7y7mz37kD6PYySxrTDiRM7Nwvwoizpx/iUS85vS44FyYj1iO7n499xn4lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcFASu77D3e8FvfHYDjpJUxPJGpMB8GA1UdIwQY
MBaAFLEHgN82tblC9mDkA6L+YIp15OV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAt
YTBhZGVjZmQ1ZmE5LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAtYTBhZGVjZmQ1ZmE5
LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1Lgm3by
6omA5AUXzkt6PWJjnuC2cnJJOJBsPyYA1V/Vs2M0CtwIsct614HCTW1mtHsVGndT
D1HcyAr7GtxRtNG66k3QEciW7cjY8QlWfzYNcY7oZXIE6gBDj0ykCiDHHihFqNup
EEgbAdH7f6WsszNK2UM8JEEKjjm6ft2p+q9mZqZLIF/71zK9Tk3jxRyeh4/vkdnk
aA3LgtnACiVgVtN4MswT94hRbj3UadkauRPzkDelnC16d5OcTOoIWzmuBLu8YMYo
iqhV9Rg+x/5IE9jGkMTFkXd0N/ROwqKLpiammnfxxWFEC+nA/e5yyrSHbwa22FmT
M6UtPXHlVisgLg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:35:21 2026 by rpki-client