Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File:                     5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier:          f+rEBC2wkA2wmPnu/7zmcZJaldK1c4/ZN5YrpLUGSLI=
Subject key identifier:   81:E0:2B:D7:33:90:3C:E4:8C:C9:C4:0D:CB:30:26:3C:83:B3:B7:C0
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer:       /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial:       019EBFC94AD729549EF714A3B9834DF1D12E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number:          125E
Signing time:             Sat 13 Jun 2026 07:01:40 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:40 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:40 +0000
Files and hashes:         1: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (hash: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0=)
                          2: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (hash: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g=)
                          3: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: MW20lQb0Jfe1I8Q4tt67atjN7B2XfS2Pdal2vAZCs3M=)
                          4: 6ecKe0A8FdH_pCFTNXNYem6VwN0.roa (hash: KZ+1oly4tcR/bcNP0ACIfGBzE0lasROyGqTBaCkUeaU=)
                          5: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (hash: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc=)
                          6: CZHwjRKRoezncj5wC2tcP7BId0k.roa (hash: NtnGWR67eyLICzLT2JOCuoqA4A2EyKFmQWPiA8KDgfI=)
                          7: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (hash: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:4a:d7:29:54:9e:f7:14:a3:b9:83:4d:f1:d1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
        Validity
            Not Before: Jun 13 07:01:40 2026 GMT
            Not After : Jun 14 07:01:40 2026 GMT
        Subject: CN=81e02bd733903ce48cc9c40dcb30263c83b3b7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:b6:00:4d:8e:b1:7e:05:c0:49:04:04:09:
                    28:6b:52:db:45:8e:0b:67:58:65:f3:98:bc:ff:81:
                    36:55:c6:7d:da:2c:ee:55:c1:97:d4:e1:a0:05:46:
                    6e:8d:b7:4c:54:3b:95:48:fd:ca:97:59:f8:97:11:
                    8e:ed:ad:27:d9:e1:8b:30:d1:29:ae:f8:c5:89:c4:
                    cd:07:a0:1e:ba:f9:f0:d0:4e:f3:83:69:90:19:dd:
                    de:27:0d:c6:02:89:d7:67:b9:f9:b2:c5:23:cf:bd:
                    72:38:dc:8a:72:bf:6c:b9:51:07:ce:da:55:d0:d3:
                    ee:13:1d:f0:6a:bb:e8:32:10:4c:85:70:a1:43:19:
                    d7:d7:b0:82:4f:2e:a0:60:f0:a2:cf:a7:fe:22:fa:
                    34:66:c8:e1:d3:d3:bf:40:42:52:08:ec:b4:28:ca:
                    78:24:fc:f4:52:d6:78:6b:c8:06:7f:29:75:5b:f4:
                    87:bc:15:1b:3d:3d:34:53:e5:06:06:7c:1c:0b:17:
                    17:3d:e3:88:77:97:3b:72:c2:e1:bb:8b:e5:a9:74:
                    c8:6a:f4:00:70:0b:14:f8:92:61:48:29:5d:71:b7:
                    b8:f0:95:5a:26:f2:ec:ae:0e:7b:c3:af:69:78:03:
                    21:7d:e0:f6:54:fc:6a:5f:a0:3c:72:53:8c:e6:19:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E0:2B:D7:33:90:3C:E4:8C:C9:C4:0D:CB:30:26:3C:83:B3:B7:C0
            X509v3 Authority Key Identifier:
                keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:60:e2:2e:29:6f:88:75:ef:02:3e:0a:b9:be:8a:f2:f1:03:
         c0:cd:d2:d1:b0:3f:8a:66:65:7a:8c:c2:51:24:74:7a:59:08:
         9c:92:66:f6:22:88:6b:5e:bf:d6:37:df:af:61:c9:10:05:84:
         0d:4e:53:ba:ad:b1:31:23:6b:b6:fe:3c:48:d2:96:e2:11:5a:
         71:0d:ba:14:96:8d:f5:1c:07:1f:60:8a:24:0b:dd:6f:e4:84:
         ea:63:82:de:76:75:d3:9b:ce:9a:e2:1e:08:35:de:2e:40:7f:
         b7:fe:8f:6e:74:12:8f:1c:69:57:d1:fc:55:0d:a3:53:20:4f:
         ae:93:98:64:78:ed:77:cc:27:e9:4f:2c:0d:a3:c2:74:e0:bf:
         38:5a:df:fe:18:bb:04:7a:60:85:7b:d0:76:18:d1:0e:38:00:
         16:a9:59:34:3f:bb:ec:3c:ec:42:a2:dc:12:6f:0e:f2:21:b0:
         47:c1:8d:22:c2:34:c4:3e:a6:ff:51:07:66:dd:82:55:3d:0a:
         3d:01:f5:db:08:b2:2d:5b:4b:8a:cf:d8:08:c1:51:e8:ce:6d:
         c9:1f:b5:a9:71:19:c8:e6:ca:66:02:fd:94:23:80:f0:81:20:
         ca:6b:50:4b:ce:c0:fe:44:0d:17:0d:57:df:4a:8a:4c:86:29:
         46:12:0a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yUrXKVSe9xSjuYNN8dEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjYwNjEzMDcwMTQwWhcNMjYwNjE0MDcwMTQwWjAzMTEwLwYDVQQD
Eyg4MWUwMmJkNzMzOTAzY2U0OGNjOWM0MGRjYjMwMjYzYzgzYjNiN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qu2AE2OsX4FwEkEBAkoa1LbRY4L
Z1hl85i8/4E2VcZ92izuVcGX1OGgBUZujbdMVDuVSP3Kl1n4lxGO7a0n2eGLMNEp
rvjFicTNB6Aeuvnw0E7zg2mQGd3eJw3GAonXZ7n5ssUjz71yONyKcr9suVEHztpV
0NPuEx3warvoMhBMhXChQxnX17CCTy6gYPCiz6f+Ivo0Zsjh09O/QEJSCOy0KMp4
JPz0UtZ4a8gGfyl1W/SHvBUbPT00U+UGBnwcCxcXPeOId5c7csLhu4vlqXTIavQA
cAsU+JJhSCldcbe48JVaJvLsrg57w69peAMhfeD2VPxqX6A8clOM5hkPjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHgK9czkDzkjMnEDcswJjyDs7fAMB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmDiLilv
iHXvAj4Kub6K8vEDwM3S0bA/imZleozCUSR0elkInJJm9iKIa16/1jffr2HJEAWE
DU5Tuq2xMSNrtv48SNKW4hFacQ26FJaN9RwHH2CKJAvdb+SE6mOC3nZ105vOmuIe
CDXeLkB/t/6PbnQSjxxpV9H8VQ2jUyBPrpOYZHjtd8wn6U8sDaPCdOC/OFrf/hi7
BHpghXvQdhjRDjgAFqlZND+77DzsQqLcEm8O8iGwR8GNIsI0xD6m/1EHZt2CVT0K
PQH12wiyLVtLis/YCMFR6M5tyR+1qXEZyObKZgL9lCOA8IEgymtQS87A/kQNFw1X
30qKTIYpRhIKLA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:33 2026 by rpki-client