Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File:                     z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier:          SqlFLg/92SJ2VepturcNWSDtGV2Xlrc8vCkCp/+3RJo=
Subject key identifier:   58:E2:7C:24:D3:82:14:FC:35:45:F9:5A:6F:0D:57:28:CD:AC:E0:24
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer:       /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial:       019EC2C961D9152879853E0128D13CF60DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number:          10D2
Signing time:             Sat 13 Jun 2026 21:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:38 +0000
Files and hashes:         1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
                          2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
                          3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: kJHuOv1uFV12kUXRbxXDgxfwvtI9wx0yjBz4W38c4Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:61:d9:15:28:79:85:3e:01:28:d1:3c:f6:0d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
        Validity
            Not Before: Jun 13 21:00:38 2026 GMT
            Not After : Jun 14 21:00:38 2026 GMT
        Subject: CN=58e27c24d38214fc3545f95a6f0d5728cdace024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:93:7e:1d:55:22:a1:b8:19:d4:4e:57:dd:
                    1a:38:f6:95:b3:fd:62:fe:2b:9e:4e:1c:27:22:05:
                    53:15:95:bf:b5:02:5a:77:c1:84:04:45:f7:3d:6e:
                    c2:0a:21:b1:60:a1:95:2c:af:4d:a7:a4:c3:ce:0a:
                    10:93:da:37:49:f4:ad:c0:fa:cf:eb:ef:87:0a:91:
                    eb:42:ed:5c:4e:1e:86:64:96:e5:18:6d:f1:9d:62:
                    ca:14:7c:08:fb:90:38:87:96:a8:7e:a8:38:04:ec:
                    9b:77:5c:b0:50:f1:b7:d4:79:9f:cd:a9:25:0d:c2:
                    75:8c:a8:d7:ed:d2:43:63:cb:e6:5b:12:bc:9f:fb:
                    bc:8d:46:ca:78:c4:64:5f:e3:cd:ba:de:92:71:99:
                    29:03:64:b5:ce:5d:91:44:6b:ac:f7:9f:4a:32:6c:
                    d4:8a:5e:7b:1c:cc:2d:58:40:e4:c0:64:4c:52:a4:
                    29:49:aa:b5:29:33:a3:f1:6c:af:d4:6a:4f:7f:67:
                    48:90:da:fb:ea:34:11:74:2a:7c:db:f2:6c:7d:1d:
                    fd:ab:bf:2d:e2:db:67:56:1b:44:b2:3f:f1:0d:27:
                    07:6f:53:57:ca:85:85:c0:5a:84:0b:98:4a:a7:8d:
                    8e:21:9f:15:7d:e0:6b:3a:aa:e1:ed:2d:30:44:79:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E2:7C:24:D3:82:14:FC:35:45:F9:5A:6F:0D:57:28:CD:AC:E0:24
            X509v3 Authority Key Identifier:
                keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:f7:3a:00:2e:16:a0:82:cf:4a:e8:2d:11:d5:cd:20:03:
         94:d6:61:87:f9:ba:18:f5:ab:3a:56:cf:c8:f9:3d:e8:66:70:
         2a:94:c7:62:8c:eb:5a:ec:79:c8:fb:f5:2a:38:73:82:c4:e2:
         74:c2:d2:7f:65:1b:b6:12:a7:b2:56:bd:b8:a4:d8:83:80:72:
         70:63:59:97:b5:c6:40:16:f3:00:e3:68:4f:0c:f6:4b:63:14:
         e2:9c:5c:0c:7f:53:fa:2d:d6:82:ca:bb:e8:c5:60:e7:eb:8a:
         b5:53:48:3a:03:88:b1:55:c4:be:dd:13:3b:c0:99:9d:cd:ab:
         17:35:37:de:08:23:60:72:44:fb:95:63:46:bd:a1:8c:67:2c:
         b5:79:d8:77:5a:f7:cc:f0:f8:44:5d:22:8f:1b:5e:69:05:18:
         22:70:b6:9f:f1:cf:f1:e3:1f:d9:c7:72:9c:dc:94:70:eb:f2:
         e2:34:09:19:7e:96:00:f1:4d:55:92:0c:73:cc:60:82:55:9f:
         10:c9:29:ef:ff:bc:c1:24:bd:e6:6c:40:46:0b:a9:c2:5b:0a:
         9b:7b:93:5b:af:18:5c:42:48:88:d0:1e:86:32:35:ee:11:db:
         16:39:99:6f:4e:fc:9c:e3:fb:69:c8:97:fa:82:81:5e:f1:ac:
         4f:ec:3f:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyWHZFSh5hT4BKNE89g3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh
ZGVhZWMwHhcNMjYwNjEzMjEwMDM4WhcNMjYwNjE0MjEwMDM4WjAzMTEwLwYDVQQD
Eyg1OGUyN2MyNGQzODIxNGZjMzU0NWY5NWE2ZjBkNTcyOGNkYWNlMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8WTfh1VIqG4GdROV90aOPaVs/1i
/iueThwnIgVTFZW/tQJad8GEBEX3PW7CCiGxYKGVLK9Np6TDzgoQk9o3SfStwPrP
6++HCpHrQu1cTh6GZJblGG3xnWLKFHwI+5A4h5aofqg4BOybd1ywUPG31Hmfzakl
DcJ1jKjX7dJDY8vmWxK8n/u8jUbKeMRkX+PNut6ScZkpA2S1zl2RRGus959KMmzU
il57HMwtWEDkwGRMUqQpSaq1KTOj8Wyv1GpPf2dIkNr76jQRdCp82/JsfR39q78t
4ttnVhtEsj/xDScHb1NXyoWFwFqEC5hKp42OIZ8VfeBrOqrh7S0wRHlRxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjifCTTghT8NUX5Wm8NVyjNrOAkMB8GA1UdIwQY
MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt
ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj
LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWV33OgAu
FqCCz0roLRHVzSADlNZhh/m6GPWrOlbPyPk96GZwKpTHYozrWux5yPv1KjhzgsTi
dMLSf2UbthKnsla9uKTYg4BycGNZl7XGQBbzAONoTwz2S2MU4pxcDH9T+i3Wgsq7
6MVg5+uKtVNIOgOIsVXEvt0TO8CZnc2rFzU33ggjYHJE+5VjRr2hjGcstXnYd1r3
zPD4RF0ijxteaQUYInC2n/HP8eMf2cdynNyUcOvy4jQJGX6WAPFNVZIMc8xgglWf
EMkp7/+8wSS95mxARgupwlsKm3uTW68YXEJIiNAehjI17hHbFjmZb078nOP7aciX
+oKBXvGsT+w/KA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:25:28 2026 by rpki-client