Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File:                     CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier:          Dz7d0bBJ3q3sItI+N0/J2gL4wWIelcYOsGjMOzI4IHg=
Subject key identifier:   4E:A0:4B:57:E9:24:E2:9A:0D:64:E4:D0:77:47:8A:07:2C:BC:2C:8E
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer:       /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial:       019EBEECC236FC2C26A2B0F90D5C7CFD8294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 03:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:47 +0000
Files and hashes:         1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: Q8bgcz7f7vjT3nQ47iR8SvSvBbAFsn0pvEPAHLwQOM0=)
                          2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:c2:36:fc:2c:26:a2:b0:f9:0d:5c:7c:fd:82:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
        Validity
            Not Before: Jun 13 03:00:47 2026 GMT
            Not After : Jun 14 03:00:47 2026 GMT
        Subject: CN=4ea04b57e924e29a0d64e4d077478a072cbc2c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:32:1c:ef:11:61:33:dd:1d:2e:f9:52:11:
                    1e:82:6d:ab:e1:7e:99:f4:6c:04:80:72:a7:1a:6d:
                    ce:1c:2e:d9:fc:12:d3:c1:fd:ee:96:30:2a:0e:53:
                    93:81:16:54:59:e9:10:0c:81:e1:d9:ef:94:e6:80:
                    7b:de:82:f2:89:57:62:3e:d3:0d:ac:df:be:c7:f7:
                    94:7c:d7:c6:23:b3:db:f1:8a:d0:33:3a:55:96:97:
                    17:ea:e1:82:e7:3d:40:a7:1b:8d:83:03:a2:0f:91:
                    0c:bf:ae:99:19:ad:47:95:1b:5f:88:d1:6d:b8:55:
                    d2:89:e3:c9:be:f1:f6:80:a3:03:e1:e2:c5:eb:a7:
                    fd:8a:fc:21:31:33:6c:cd:2a:fe:fe:3b:63:de:66:
                    a9:20:c5:82:5e:9e:6a:a2:74:2a:45:72:c2:a9:a7:
                    a8:32:90:4c:5c:02:1e:2a:b3:24:0f:5b:da:1d:fa:
                    89:fd:3b:15:49:b1:ad:72:ea:90:e4:e3:dc:27:fc:
                    74:cb:31:f6:3e:de:d8:9e:85:ee:27:76:d5:65:7f:
                    67:be:c8:c3:4c:8c:42:dd:15:b7:1b:bc:42:30:73:
                    bf:c5:71:40:02:10:ed:cf:8f:56:e2:3c:12:11:4c:
                    28:9d:03:fb:c0:aa:52:4b:66:23:7b:ee:75:ba:75:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A0:4B:57:E9:24:E2:9A:0D:64:E4:D0:77:47:8A:07:2C:BC:2C:8E
            X509v3 Authority Key Identifier:
                keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:8c:27:68:3a:30:9e:0b:6f:9a:04:5b:c3:b4:32:78:92:
         8d:d2:d2:c0:76:d3:db:26:98:41:2b:34:45:7e:2a:f7:d6:eb:
         6c:d1:59:2a:6f:03:0b:9a:8c:c4:dc:96:9b:5b:d9:98:b7:58:
         b4:2b:d8:aa:25:af:a3:be:d4:fe:80:f8:6b:9f:70:cc:7c:4c:
         02:ae:78:56:b4:3f:67:ee:19:e9:ce:94:dc:af:8c:88:08:6b:
         34:bf:21:46:17:5d:42:9d:b5:7a:0d:d4:d6:27:01:a5:d6:fa:
         d7:bf:bd:e2:9d:87:c4:92:f8:0a:dc:7f:0d:5a:23:a3:3a:4e:
         1c:c1:97:a7:b9:3f:39:fc:c0:76:a9:b9:5c:57:d4:c3:79:c5:
         24:27:bd:15:a7:91:ce:fd:f4:1c:a4:24:a3:45:5b:8e:53:33:
         86:12:d6:91:1e:67:d5:07:a5:99:d7:32:61:c6:a4:e8:58:b1:
         55:b2:3f:64:c5:df:8e:aa:03:3c:63:a9:29:e3:79:17:d1:47:
         41:39:bc:68:9c:a9:4b:dc:cc:d2:be:ad:35:12:10:ee:c2:52:
         36:06:1d:a4:7a:17:31:27:21:f4:cc:5d:3d:52:e8:e6:02:1e:
         58:6c:e6:e0:32:47:42:ff:b7:a0:63:7f:9c:a1:d3:00:a4:e8:
         77:01:55:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7MI2/CwmorD5DVx8/YKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5N2UwNTUxNmZjODc5MzQwNjg2OGI4MTA5ZTNjMDQ0Yjcw
MjcxNmMwHhcNMjYwNjEzMDMwMDQ3WhcNMjYwNjE0MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZWEwNGI1N2U5MjRlMjlhMGQ2NGU0ZDA3NzQ3OGEwNzJjYmMyYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwigyHO8RYTPdHS75UhEegm2r4X6Z
9GwEgHKnGm3OHC7Z/BLTwf3uljAqDlOTgRZUWekQDIHh2e+U5oB73oLyiVdiPtMN
rN++x/eUfNfGI7Pb8YrQMzpVlpcX6uGC5z1ApxuNgwOiD5EMv66ZGa1HlRtfiNFt
uFXSiePJvvH2gKMD4eLF66f9ivwhMTNszSr+/jtj3mapIMWCXp5qonQqRXLCqaeo
MpBMXAIeKrMkD1vaHfqJ/TsVSbGtcuqQ5OPcJ/x0yzH2Pt7YnoXuJ3bVZX9nvsjD
TIxC3RW3G7xCMHO/xXFAAhDtz49W4jwSEUwonQP7wKpSS2Yje+51unUFjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6gS1fpJOKaDWTk0HdHigcsvCyOMB8GA1UdIwQY
MBaAFAl+BVFvyHk0BoaLgQnjwES3AnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQt
MzBiZWNmYzFiMzExLzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQtMzBiZWNmYzFiMzEx
LzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKuMJ2g6
MJ4Lb5oEW8O0MniSjdLSwHbT2yaYQSs0RX4q99brbNFZKm8DC5qMxNyWm1vZmLdY
tCvYqiWvo77U/oD4a59wzHxMAq54VrQ/Z+4Z6c6U3K+MiAhrNL8hRhddQp21eg3U
1icBpdb617+94p2HxJL4Ctx/DVojozpOHMGXp7k/OfzAdqm5XFfUw3nFJCe9FaeR
zv30HKQko0VbjlMzhhLWkR5n1QelmdcyYcak6FixVbI/ZMXfjqoDPGOpKeN5F9FH
QTm8aJypS9zM0r6tNRIQ7sJSNgYdpHoXMSch9MxdPVLo5gIeWGzm4DJHQv+3oGN/
nKHTAKTodwFV0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:53 2026 by rpki-client