Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File:                     0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier:          WWUFJY8lQJu7RpVGI5N9G6aSvQszPrSon7k8wwfT0Cw=
Subject key identifier:   4F:16:B9:88:5B:60:84:37:9E:8F:25:89:63:69:02:D5:BA:AC:9A:9D
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer:       /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial:       019EBE4829C1C3815910B46DCEB072238659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 00:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:00 +0000
Files and hashes:         1: 0jE3hZkv3e72FXBQNOB1Z87I7hE.roa (hash: ufiFlOn3uZQmY7BK2PstScG7xVreKj7F3Ayx+q4ondk=)
                          2: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: XS8/3e1hofWzJlo+wkuClLWvlBmOws91FMFOkWgRqBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:29:c1:c3:81:59:10:b4:6d:ce:b0:72:23:86:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
        Validity
            Not Before: Jun 13 00:01:00 2026 GMT
            Not After : Jun 14 00:01:00 2026 GMT
        Subject: CN=4f16b9885b6084379e8f2589636902d5baac9a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:26:b4:8e:2a:b1:3f:18:bf:42:86:39:10:
                    d1:3a:e6:0e:30:d7:c5:0a:2f:a4:fc:69:1d:8b:d3:
                    30:ce:c4:67:10:ac:b1:f6:99:cc:8f:e6:bf:27:d3:
                    44:a7:f7:5f:26:a6:e2:3a:2d:02:bc:c9:65:a4:ad:
                    5b:84:89:ee:a6:74:78:59:c9:6f:f2:c8:cc:e0:9b:
                    a8:02:bc:cb:1c:64:e0:e1:27:0d:0f:7f:74:44:86:
                    b3:c2:97:be:f4:e3:a1:26:7e:09:bc:b7:66:2e:1b:
                    16:08:02:32:30:5c:f0:d8:3e:d6:b3:89:54:27:1b:
                    38:57:33:39:5e:fa:94:65:1a:30:3c:0c:05:ac:9d:
                    b6:92:5c:f0:a4:9a:df:5c:06:8b:91:48:92:9c:39:
                    63:84:15:4b:0a:f7:d1:d1:08:ae:ab:9e:eb:77:3a:
                    eb:4e:ba:86:ca:d6:34:98:fc:70:1e:c2:30:c1:65:
                    d7:9b:1b:43:a9:eb:fa:a3:f8:1c:c0:92:d3:42:03:
                    c1:12:4a:b3:bb:cd:cc:2c:57:b1:00:0c:73:c1:ed:
                    ab:3f:d3:3d:af:80:a7:bc:63:b0:fb:6d:bb:5e:19:
                    c1:b6:13:6c:11:91:f6:7c:e8:90:8a:36:97:ac:53:
                    13:60:99:f8:f0:bf:3e:ff:99:4c:70:47:94:b9:b6:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:16:B9:88:5B:60:84:37:9E:8F:25:89:63:69:02:D5:BA:AC:9A:9D
            X509v3 Authority Key Identifier:
                keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:44:99:0c:d2:87:b6:22:3c:4a:41:0d:72:32:3e:1c:f9:26:
         06:5c:2f:d3:bf:b5:60:4d:21:bb:6b:42:64:25:80:0d:05:2e:
         3a:31:22:b4:c0:87:32:57:66:1e:a6:cf:76:96:88:95:fd:88:
         5c:69:37:38:67:d2:0e:55:b0:ea:1e:e8:d5:52:56:0d:ba:41:
         a8:cb:22:46:68:6c:4f:08:28:d5:42:dc:58:2f:97:49:8e:a7:
         aa:4a:cf:30:3e:8b:88:a8:70:b3:a5:a4:36:3b:42:c1:4e:5d:
         ce:ce:14:c2:a6:da:e9:c0:eb:34:93:98:9c:a7:3a:d3:fb:8c:
         f0:dd:c3:59:85:10:73:96:5a:13:76:65:d8:1c:35:bf:dd:70:
         9f:44:3f:26:b4:10:09:ca:14:d6:3b:98:5c:89:45:aa:76:5e:
         31:f5:fc:09:44:2b:ec:77:af:c3:71:ba:d4:97:f4:d6:f9:07:
         09:8d:db:a8:fa:73:1a:a6:d2:21:68:4c:72:01:7d:02:c1:a7:
         bc:17:3d:5d:ca:e1:14:69:df:3c:63:c6:4e:b6:15:f9:ed:9e:
         99:b0:86:5d:5a:ba:53:49:ac:99:c1:aa:25:35:7c:da:29:af:
         fa:d4:26:eb:74:97:fb:ea:fa:55:8c:06:32:f9:28:d3:9c:f6:
         6e:37:2f:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+SCnBw4FZELRtzrByI4ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWU1ZTMzODc5NGU2MGQ1ZDhiNTIzYmRiMmI2OGVjNGFj
NzYyY2UwHhcNMjYwNjEzMDAwMTAwWhcNMjYwNjE0MDAwMTAwWjAzMTEwLwYDVQQD
Eyg0ZjE2Yjk4ODViNjA4NDM3OWU4ZjI1ODk2MzY5MDJkNWJhYWM5YTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt4mtI4qsT8Yv0KGORDROuYOMNfF
Ci+k/Gkdi9MwzsRnEKyx9pnMj+a/J9NEp/dfJqbiOi0CvMllpK1bhInupnR4Wclv
8sjM4JuoArzLHGTg4ScND390RIazwpe+9OOhJn4JvLdmLhsWCAIyMFzw2D7Ws4lU
Jxs4VzM5XvqUZRowPAwFrJ22klzwpJrfXAaLkUiSnDljhBVLCvfR0Qiuq57rdzrr
TrqGytY0mPxwHsIwwWXXmxtDqev6o/gcwJLTQgPBEkqzu83MLFexAAxzwe2rP9M9
r4CnvGOw+227XhnBthNsEZH2fOiQijaXrFMTYJn48L8+/5lMcEeUubYw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8WuYhbYIQ3no8liWNpAtW6rJqdMB8GA1UdIwQY
MBaAFNKuXjOHlOYNXYtSO9sraOxKx2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNWRmMDMtYjVlZS00YmY3LWFlZGYt
OGQ4ZTllYTE0MzI1LzEvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNWRmMDMtYjVlZS00YmY3LWFlZGYtOGQ4ZTllYTE0MzI1
LzEvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfESZDNKH
tiI8SkENcjI+HPkmBlwv07+1YE0hu2tCZCWADQUuOjEitMCHMldmHqbPdpaIlf2I
XGk3OGfSDlWw6h7o1VJWDbpBqMsiRmhsTwgo1ULcWC+XSY6nqkrPMD6LiKhws6Wk
NjtCwU5dzs4Uwqba6cDrNJOYnKc60/uM8N3DWYUQc5ZaE3Zl2Bw1v91wn0Q/JrQQ
CcoU1juYXIlFqnZeMfX8CUQr7Hevw3G61Jf01vkHCY3bqPpzGqbSIWhMcgF9AsGn
vBc9XcrhFGnfPGPGTrYV+e2embCGXVq6U0msmcGqJTV82imv+tQm63SX++r6VYwG
Mvko05z2bjcvag==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:26 2026 by rpki-client