Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
File:                     rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json)
Hash identifier:          /PtME0WZoFHwQMpHrK2jUeNhkhgU1l16f0aUMeKbMgI=
Subject key identifier:   B7:AF:B6:52:C8:68:35:83:59:42:F7:1C:67:FC:23:35:D1:1B:01:EC
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Certificate issuer:       /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial:       019EC2C9663623B2CAF5B4FB65C82FD01CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
Manifest number:          196F
Signing time:             Sat 13 Jun 2026 21:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:39 +0000
Files and hashes:         1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=)
                          2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=)
                          3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=)
                          4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=)
                          5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=)
                          6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=)
                          7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=)
                          8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=)
                          9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=)
                          10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=)
                          11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=)
                          12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=)
                          13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=)
                          14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=)
                          15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: RhDk+8AItNUx8Z8Ew+8+XR8asxUrZqM0Hf5mXdUj5hs=)
                          16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=)
                          17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=)
                          18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:66:36:23:b2:ca:f5:b4:fb:65:c8:2f:d0:1c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
        Validity
            Not Before: Jun 13 21:00:39 2026 GMT
            Not After : Jun 14 21:00:39 2026 GMT
        Subject: CN=b7afb652c86835835942f71c67fc2335d11b01ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:db:76:10:ef:2d:2b:01:6d:d4:44:58:26:
                    0f:64:25:db:40:b7:5f:e2:71:8e:a2:c8:9f:38:7b:
                    2a:2a:a2:55:c3:6a:58:50:f3:22:80:98:de:2f:6d:
                    bb:3a:e3:fa:c4:7e:d9:9e:78:d9:eb:c3:87:15:ff:
                    f8:6a:42:a8:98:88:fd:4e:a1:27:1a:c2:55:da:6a:
                    68:60:a3:04:8a:50:46:85:ab:c9:49:86:d6:ce:1f:
                    7d:cc:36:24:c0:f1:b9:01:70:16:a0:f9:5e:8c:76:
                    2a:ff:59:2e:1e:c3:e2:eb:9e:a0:ce:08:58:13:75:
                    cc:eb:78:c3:ee:c2:1f:45:91:50:54:c2:1d:4c:43:
                    90:80:b0:df:50:21:03:1f:71:1f:ad:f7:8c:bc:33:
                    91:58:4f:3a:be:ac:83:c4:f9:3f:a1:07:6c:3f:24:
                    36:eb:6b:06:28:36:5f:b6:15:98:4f:f3:f6:a2:b5:
                    89:34:09:1a:1a:72:6b:61:78:0e:dc:ea:52:f7:80:
                    16:f9:96:bc:7a:26:81:c3:b8:98:9e:76:25:a4:e8:
                    f3:42:e4:c3:02:8a:50:24:8f:62:a7:ac:e1:7b:40:
                    c5:3e:9f:94:94:cb:fe:2d:d5:93:c8:9b:6c:cf:cc:
                    ee:9f:65:9e:77:e6:f8:2d:29:ed:41:57:2b:24:97:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AF:B6:52:C8:68:35:83:59:42:F7:1C:67:FC:23:35:D1:1B:01:EC
            X509v3 Authority Key Identifier:
                keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:db:ef:bd:32:a1:ab:2c:3a:23:14:d3:99:b4:fb:6c:20:
         79:9e:b6:9d:ea:8f:57:fd:37:47:a7:98:d0:4c:22:eb:46:d7:
         81:7d:62:63:c6:af:ca:3f:4b:39:0f:26:45:99:55:dc:5a:c5:
         c9:95:37:99:dd:38:5d:aa:bd:e7:f0:68:8d:d1:57:b7:85:e5:
         50:5d:8e:ba:ae:0e:aa:3d:70:dd:6a:9d:ce:d5:52:12:48:65:
         32:6c:f9:03:d6:02:0b:d2:23:1a:5d:dd:c4:a2:c1:b7:0c:c3:
         4e:68:df:a1:11:ef:ce:c5:f2:b8:d3:ba:3f:2c:cd:66:4f:5b:
         b1:eb:31:65:b4:2a:f7:15:cf:97:a0:1e:9f:fc:dd:a3:51:8c:
         97:62:77:5a:3f:2a:2b:5a:90:f3:eb:02:e2:2d:4d:d6:9e:77:
         fd:7d:e6:8a:2c:07:50:56:57:86:20:4a:d8:10:e2:09:f3:f8:
         b9:42:11:21:b3:2f:10:89:7d:29:d1:e9:6f:88:a0:4a:7d:f6:
         ab:c9:ce:24:ab:a0:3e:a2:e6:56:d2:b6:00:80:91:69:27:7c:
         71:07:39:cf:f5:5b:b5:b5:ec:0e:14:ff:27:c2:bc:2c:04:dc:
         be:f4:df:36:90:59:54:b0:78:b6:4d:f2:94:12:58:2e:c8:0a:
         9e:53:da:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyWY2I7LK9bT7Zcgv0BzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjYwNjEzMjEwMDM5WhcNMjYwNjE0MjEwMDM5WjAzMTEwLwYDVQQD
EyhiN2FmYjY1MmM4NjgzNTgzNTk0MmY3MWM2N2ZjMjMzNWQxMWIwMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ULbdhDvLSsBbdREWCYPZCXbQLdf
4nGOosifOHsqKqJVw2pYUPMigJjeL227OuP6xH7ZnnjZ68OHFf/4akKomIj9TqEn
GsJV2mpoYKMEilBGhavJSYbWzh99zDYkwPG5AXAWoPlejHYq/1kuHsPi656gzghY
E3XM63jD7sIfRZFQVMIdTEOQgLDfUCEDH3EfrfeMvDORWE86vqyDxPk/oQdsPyQ2
62sGKDZfthWYT/P2orWJNAkaGnJrYXgO3OpS94AW+Za8eiaBw7iYnnYlpOjzQuTD
AopQJI9ip6zhe0DFPp+UlMv+LdWTyJtsz8zun2Wed+b4LSntQVcrJJdF+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLevtlLIaDWDWUL3HGf8IzXRGwHsMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtfb770y
oassOiMU05m0+2wgeZ62neqPV/03R6eY0Ewi60bXgX1iY8avyj9LOQ8mRZlV3FrF
yZU3md04Xaq95/BojdFXt4XlUF2Ouq4Oqj1w3WqdztVSEkhlMmz5A9YCC9IjGl3d
xKLBtwzDTmjfoRHvzsXyuNO6PyzNZk9bsesxZbQq9xXPl6Aen/zdo1GMl2J3Wj8q
K1qQ8+sC4i1N1p53/X3miiwHUFZXhiBK2BDiCfP4uUIRIbMvEIl9KdHpb4igSn32
q8nOJKugPqLmVtK2AICRaSd8cQc5z/VbtbXsDhT/J8K8LATcvvTfNpBZVLB4tk3y
lBJYLsgKnlPaqQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:36 2026 by rpki-client