Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File:                     jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier:          24GUKXY950zgCkoq9rWGmo9g3yTTpYjzHhTqbuFWk5c=
Subject key identifier:   57:C2:FD:26:56:AD:97:BB:BE:6E:9A:35:34:CD:1B:44:91:5C:6C:14
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer:       /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial:       019EC337874C0B8C53BB4EEE6E848755C84A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number:          1179
Signing time:             Sat 13 Jun 2026 23:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:56 +0000
Files and hashes:         1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
                          2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: FUSb+GmdP+KGg9LuB6pAOwF1q28L9FLvtUmLMZymH0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:87:4c:0b:8c:53:bb:4e:ee:6e:84:87:55:c8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
        Validity
            Not Before: Jun 13 23:00:56 2026 GMT
            Not After : Jun 14 23:00:56 2026 GMT
        Subject: CN=57c2fd2656ad97bbbe6e9a3534cd1b44915c6c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:3f:e2:e9:02:02:3a:15:58:79:32:0f:68:
                    60:f0:e0:3e:f0:bc:4c:4e:58:20:19:52:18:f1:31:
                    91:9c:af:22:eb:ce:39:29:e1:7f:3d:1e:fa:15:7c:
                    c5:de:cb:2a:22:56:03:a5:20:3c:69:9b:62:95:cd:
                    54:86:6f:23:d8:66:55:5b:5d:c1:4e:de:84:50:59:
                    ac:fd:0f:1c:e8:15:15:a3:cd:89:25:83:4b:1c:a0:
                    b0:c1:81:74:b3:e5:d0:b4:ec:a0:80:d0:9f:5e:a2:
                    aa:82:16:00:98:8f:3a:bc:3b:da:85:b3:8b:a9:7a:
                    73:9a:3a:95:fe:7e:6a:8c:64:dc:f3:eb:5b:65:b8:
                    29:06:f3:1a:f6:ce:08:88:28:09:81:6a:17:bc:9b:
                    86:2d:06:c1:39:56:a9:4e:c0:b3:3f:f4:3a:74:ef:
                    5d:3f:57:d0:66:db:60:4d:0c:5d:6d:bb:83:98:26:
                    80:db:01:39:43:1c:1b:54:cd:02:16:a2:59:61:aa:
                    62:d9:91:03:d5:3d:b6:7e:21:b0:75:23:f5:ea:eb:
                    5c:e0:c7:87:9d:0c:87:a9:93:ae:d9:e9:c8:37:43:
                    75:89:cc:ac:0c:70:fa:c7:44:c8:1e:ec:0f:2a:80:
                    09:cf:05:c4:fb:71:dd:15:30:2a:dc:c7:d0:c9:a7:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:FD:26:56:AD:97:BB:BE:6E:9A:35:34:CD:1B:44:91:5C:6C:14
            X509v3 Authority Key Identifier:
                keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:09:43:ff:ed:3f:dc:74:bc:f9:41:a5:86:24:dd:21:7d:
         2b:64:fd:45:93:33:6f:7a:e4:8d:70:72:29:52:76:ee:51:50:
         ff:33:c8:10:33:dc:25:19:77:c2:54:cc:71:9c:07:dc:51:54:
         ad:74:d9:75:e1:1d:5d:de:17:18:ba:5a:3b:92:b0:77:5d:cc:
         ee:34:2c:95:75:8f:42:71:ab:52:eb:4c:40:4e:2e:a9:57:ff:
         dc:47:5f:7a:f1:20:ee:60:dc:19:af:d3:85:55:ba:73:95:66:
         4b:97:6d:89:f7:21:14:f0:45:61:bd:9f:ec:d2:b2:d2:64:72:
         2e:7b:0f:90:f4:4c:35:5d:65:ef:97:ab:51:4d:17:3d:42:7a:
         ce:e0:9d:cd:05:2a:93:21:0e:55:e1:d9:cf:33:de:54:57:5c:
         ba:92:13:9f:9c:d4:83:9f:8b:65:87:47:4d:dd:9c:18:b9:77:
         64:dc:a2:a0:93:d3:03:7d:f9:e4:ec:92:68:96:bc:23:76:69:
         19:c1:b2:cf:f5:92:16:7e:eb:cc:ab:77:c0:37:27:54:c2:d8:
         d5:35:48:48:14:3d:2b:31:2e:80:0d:b8:e7:d6:84:10:07:d0:
         4d:eb:95:df:f1:5f:a7:7b:56:c3:9d:76:54:c0:5e:10:d2:3e:
         52:ba:e1:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN4dMC4xTu07uboSHVchKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTRhODQ2NjMyZTgzMzQwZTExNGQwZDM1NTkxYjNkNDIx
ODhiNzYwHhcNMjYwNjEzMjMwMDU2WhcNMjYwNjE0MjMwMDU2WjAzMTEwLwYDVQQD
Eyg1N2MyZmQyNjU2YWQ5N2JiYmU2ZTlhMzUzNGNkMWI0NDkxNWM2YzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseo/4ukCAjoVWHkyD2hg8OA+8LxM
TlggGVIY8TGRnK8i6845KeF/PR76FXzF3ssqIlYDpSA8aZtilc1Uhm8j2GZVW13B
Tt6EUFms/Q8c6BUVo82JJYNLHKCwwYF0s+XQtOyggNCfXqKqghYAmI86vDvahbOL
qXpzmjqV/n5qjGTc8+tbZbgpBvMa9s4IiCgJgWoXvJuGLQbBOVapTsCzP/Q6dO9d
P1fQZttgTQxdbbuDmCaA2wE5QxwbVM0CFqJZYapi2ZED1T22fiGwdSP16utc4MeH
nQyHqZOu2enIN0N1icysDHD6x0TIHuwPKoAJzwXE+3HdFTAq3MfQyafU4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfC/SZWrZe7vm6aNTTNG0SRXGwUMB8GA1UdIwQY
MBaAFIxUqEZjLoM0DhFNDTVZGz1CGIt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2Mt
MzQ1OWJlMjY2NzMxLzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2MtMzQ1OWJlMjY2NzMx
LzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8QJQ//t
P9x0vPlBpYYk3SF9K2T9RZMzb3rkjXByKVJ27lFQ/zPIEDPcJRl3wlTMcZwH3FFU
rXTZdeEdXd4XGLpaO5Kwd13M7jQslXWPQnGrUutMQE4uqVf/3EdfevEg7mDcGa/T
hVW6c5VmS5dtifchFPBFYb2f7NKy0mRyLnsPkPRMNV1l75erUU0XPUJ6zuCdzQUq
kyEOVeHZzzPeVFdcupITn5zUg5+LZYdHTd2cGLl3ZNyioJPTA3355OySaJa8I3Zp
GcGyz/WSFn7rzKt3wDcnVMLY1TVISBQ9KzEugA2459aEEAfQTeuV3/Ffp3tWw512
VMBeENI+UrrhxA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:52:59 2026 by rpki-client