Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File:                     tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier:          8KiBGXsAcVjkkrRdLhA02Hm31ajTvKPIUq2up+4EUhI=
Subject key identifier:   E7:EA:5D:5F:48:73:3E:11:21:FD:CA:FB:9E:0C:01:C7:B8:6E:D6:1B
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer:       /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial:       019ED3F4891696A729F0FC8BDE13E674D7CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number:          0B31
Signing time:             Wed 17 Jun 2026 05:01:18 +0000
Manifest this update:     Wed 17 Jun 2026 05:01:18 +0000
Manifest next update:     Thu 18 Jun 2026 05:01:18 +0000
Files and hashes:         1: HhEHXcVrA4jYly_4JLZyYZncnvg.roa (hash: 6iTpuhytQNXUI4g8368tGo5DhJ/PIFrnzj+J0UysgLI=)
                          2: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: x6kbv/R2VNe4UDFU2oYFZpxg7HiaJpo7wxDyCxg3mrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:89:16:96:a7:29:f0:fc:8b:de:13:e6:74:d7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
        Validity
            Not Before: Jun 17 05:01:18 2026 GMT
            Not After : Jun 18 05:01:18 2026 GMT
        Subject: CN=e7ea5d5f48733e1121fdcafb9e0c01c7b86ed61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:06:3f:6c:27:27:74:62:ed:f0:b1:6f:a3:
                    8b:c9:43:9e:ae:92:ec:f6:69:9e:7c:09:48:89:5d:
                    db:70:bc:ed:25:d3:c0:1d:20:60:de:c4:03:43:87:
                    a1:76:85:3e:06:71:cc:57:7f:8e:e9:19:82:d8:16:
                    2e:01:ef:cb:b2:01:fe:8a:5d:8a:13:f6:e8:9f:4b:
                    c2:f8:f9:31:0e:31:21:b4:82:04:4a:5e:a7:57:f7:
                    ea:9a:54:ad:d3:59:2d:7b:ea:10:ad:63:51:e7:ae:
                    ee:0c:ea:d1:d1:ad:0c:b2:3c:49:07:e5:ae:59:f4:
                    40:77:6c:36:63:ea:c4:27:77:32:94:ef:37:cd:3b:
                    1f:07:cf:df:f3:ac:39:2f:9b:da:f9:93:e8:c6:8c:
                    3e:b8:97:50:2e:58:11:d9:86:4b:46:88:11:fd:bf:
                    2f:36:72:ea:40:2a:e6:c5:20:fb:37:30:55:1b:5a:
                    92:11:29:45:77:6e:74:2e:94:e3:17:97:86:bd:84:
                    9d:c9:44:7f:78:91:3a:bb:64:02:e2:22:08:54:b9:
                    05:49:1f:84:ca:2b:32:f4:82:f0:d6:a8:d4:01:13:
                    1a:ac:5d:7e:3e:05:6b:de:15:97:de:cf:df:00:50:
                    2a:27:41:ce:1d:ae:2b:82:06:de:ba:0a:9e:67:8c:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EA:5D:5F:48:73:3E:11:21:FD:CA:FB:9E:0C:01:C7:B8:6E:D6:1B
            X509v3 Authority Key Identifier:
                keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:de:e9:2b:f0:02:a3:cf:90:ab:3a:d6:69:c4:7e:ec:a8:
         5d:18:7b:c7:3d:6e:79:3c:2e:05:9b:55:77:43:ec:a9:10:3d:
         f2:51:27:4f:b2:38:02:2e:73:c1:bd:28:49:e9:3c:e3:f6:bd:
         ac:aa:2c:de:6f:d1:00:80:2a:11:c9:c2:b4:c4:03:54:35:9e:
         47:c1:08:c1:5c:f1:af:e9:4a:26:69:6c:f1:87:65:df:ae:79:
         1e:69:3a:7d:75:46:1a:10:9e:34:3d:10:6c:cd:df:3a:be:51:
         f1:97:20:8b:e4:5d:31:11:61:5c:6d:d8:0f:2d:65:40:7d:a7:
         76:2a:b2:9c:7e:69:a3:43:ee:c6:30:57:15:57:40:a8:ea:ec:
         22:e0:6b:99:50:1f:4f:f2:56:8e:4a:c1:3f:2b:c1:28:c5:99:
         7f:11:cd:7f:0b:ed:34:4f:13:d5:6a:46:58:e7:1c:c5:54:2c:
         0c:91:76:6e:22:fe:ed:e9:39:5d:9c:86:d1:94:c7:df:79:ae:
         28:55:2c:0e:27:19:0b:ab:b4:cd:e9:de:8e:8f:6e:2a:7b:bb:
         95:24:c9:20:d1:bf:4c:6d:0d:ef:b9:ec:b3:c5:06:fc:2a:e1:
         dc:90:39:a3:92:7d:51:eb:8b:8f:8e:95:90:48:26:53:27:f4:
         cf:42:43:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7T9IkWlqcp8PyL3hPmdNfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjQ5Njk4ZDA4ZThjMjgzYzBkZjJhODJmMTY5OTdlNjI1
OWJhYjYwHhcNMjYwNjE3MDUwMTE4WhcNMjYwNjE4MDUwMTE4WjAzMTEwLwYDVQQD
EyhlN2VhNWQ1ZjQ4NzMzZTExMjFmZGNhZmI5ZTBjMDFjN2I4NmVkNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfAGP2wnJ3Ri7fCxb6OLyUOerpLs
9mmefAlIiV3bcLztJdPAHSBg3sQDQ4ehdoU+BnHMV3+O6RmC2BYuAe/LsgH+il2K
E/bon0vC+PkxDjEhtIIESl6nV/fqmlSt01kte+oQrWNR567uDOrR0a0MsjxJB+Wu
WfRAd2w2Y+rEJ3cylO83zTsfB8/f86w5L5va+ZPoxow+uJdQLlgR2YZLRogR/b8v
NnLqQCrmxSD7NzBVG1qSESlFd250LpTjF5eGvYSdyUR/eJE6u2QC4iIIVLkFSR+E
yisy9ILw1qjUARMarF1+PgVr3hWX3s/fAFAqJ0HOHa4rggbeugqeZ4wp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfqXV9Icz4RIf3K+54MAce4btYbMB8GA1UdIwQY
MBaAFLT0lpjQjowoPA3yqC8WmX5iWbq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMt
OWY3YWEwOTQzMDNiLzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMtOWY3YWEwOTQzMDNi
LzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTne6Svw
AqPPkKs61mnEfuyoXRh7xz1ueTwuBZtVd0PsqRA98lEnT7I4Ai5zwb0oSek84/a9
rKos3m/RAIAqEcnCtMQDVDWeR8EIwVzxr+lKJmls8Ydl3655Hmk6fXVGGhCeND0Q
bM3fOr5R8Zcgi+RdMRFhXG3YDy1lQH2ndiqynH5po0PuxjBXFVdAqOrsIuBrmVAf
T/JWjkrBPyvBKMWZfxHNfwvtNE8T1WpGWOccxVQsDJF2biL+7ek5XZyG0ZTH33mu
KFUsDicZC6u0zenejo9uKnu7lSTJING/TG0N77nss8UG/Crh3JA5o5J9UeuLj46V
kEgmUyf0z0JDrw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:35:15 2026 by rpki-client