Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File:                     ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier:          HCHE+kYktO7tr03W9Vl2gMHFjPF5YoD4h9bzTtMtoSc=
Subject key identifier:   C3:E9:90:CF:B2:9A:50:E1:E0:13:1C:B3:68:D2:45:58:16:1F:95:63
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer:       /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial:       019EC44A54A033D0F3A30E7F7B161159AD29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number:          195C
Signing time:             Sun 14 Jun 2026 04:01:06 +0000
Manifest this update:     Sun 14 Jun 2026 04:01:06 +0000
Manifest next update:     Mon 15 Jun 2026 04:01:06 +0000
Files and hashes:         1: Isf0X2VA5k71HKCeTyJN9hXCDdw.roa (hash: moujoYkwbdpd8nceyk8u6dwvR2yVCkwxf/DT9Cg/itk=)
                          2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: ECS9Dz3PWPdMXPSJt88hCX0ojAe6mf1WF891iEstv7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:54:a0:33:d0:f3:a3:0e:7f:7b:16:11:59:ad:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
        Validity
            Not Before: Jun 14 04:01:06 2026 GMT
            Not After : Jun 15 04:01:06 2026 GMT
        Subject: CN=c3e990cfb29a50e1e0131cb368d24558161f9563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:60:a9:83:37:09:bf:40:0e:6c:97:bc:39:
                    af:87:4d:ea:c2:19:78:3d:16:d6:f1:ca:27:a8:5a:
                    f3:a4:21:da:07:6e:ac:a7:0f:b4:9b:ae:71:a2:c3:
                    79:df:e6:c1:d9:76:5d:25:5d:5d:12:6f:37:82:e6:
                    80:64:34:5b:2c:87:75:58:74:40:0d:c3:b0:b7:eb:
                    49:44:c6:7e:09:8d:10:1d:3b:62:67:1d:06:c9:29:
                    ad:f8:af:9b:a0:df:10:ce:10:74:4a:71:c8:d4:db:
                    c1:33:be:04:33:da:64:d1:68:af:3d:df:3a:23:b5:
                    49:ff:b0:a5:1a:7a:43:32:60:b1:1c:9b:97:b4:f1:
                    5c:2d:05:a2:e2:e1:02:2f:b8:d8:86:0e:c3:bf:20:
                    65:f4:14:af:90:43:60:c9:aa:84:2c:43:11:3a:8c:
                    3e:d1:7f:d1:de:a9:3f:c8:c3:5b:4e:f6:63:8b:d0:
                    f1:0c:4f:09:28:b6:7b:91:ca:7f:63:d3:33:16:e2:
                    c6:57:b0:67:b4:1b:96:f7:dd:60:04:8b:73:23:c5:
                    25:dc:8f:4c:e2:84:ab:7e:bf:22:d6:43:27:ad:f9:
                    1a:a0:9d:db:cf:81:bc:d5:11:be:b1:35:d8:a9:bb:
                    0c:25:63:ba:b6:e3:3a:7d:47:fe:f3:b1:75:ef:83:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:90:CF:B2:9A:50:E1:E0:13:1C:B3:68:D2:45:58:16:1F:95:63
            X509v3 Authority Key Identifier:
                keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0a:06:a4:f3:57:f6:f6:b2:cb:c3:60:0a:9e:bd:29:0a:e6:
         d5:d4:ae:13:78:9c:b3:5d:a7:e2:36:3b:ed:7a:38:ca:c6:2b:
         52:fd:cf:4a:23:b0:e6:33:6b:8b:c0:ba:95:f8:15:02:7c:dd:
         2b:7a:05:43:5b:66:ec:b3:e9:b9:65:e2:47:65:fa:79:0c:a8:
         86:44:38:ae:82:66:ac:68:dc:96:6d:4c:a5:3a:97:03:ba:fe:
         87:87:04:81:74:d0:79:71:a7:51:ee:c7:3a:b5:46:67:ca:6f:
         5a:8b:a5:0b:3e:f3:f7:0e:7c:e9:36:2f:fc:30:45:98:da:6e:
         64:99:b9:24:d4:2a:b6:0b:09:b7:d9:d8:23:e9:52:27:7c:0b:
         22:63:27:86:7a:37:36:4f:98:6d:ac:82:ac:ae:72:0d:13:a9:
         93:6b:6f:a2:65:b0:f1:d3:0f:95:50:b4:8f:b1:00:71:5c:1c:
         23:7b:cc:c7:4f:1f:8a:77:bf:f9:68:ee:a1:98:99:19:8b:e5:
         ef:48:c3:6a:eb:91:6d:53:ce:c2:ff:7b:4e:f7:04:b4:04:8e:
         32:69:5e:ae:a8:19:5d:22:1a:a4:3e:6c:49:0d:4b:9d:e5:60:
         29:03:8b:2c:5f:93:bd:fb:1f:97:af:76:94:83:61:72:0f:a9:
         4b:f8:02:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ESlSgM9Dzow5/exYRWa0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzhkMTE5MWY2NmYxZjAzMTVkZTVmNDVjYzE5NGQxY2Qx
OWQxZmIwHhcNMjYwNjE0MDQwMTA2WhcNMjYwNjE1MDQwMTA2WjAzMTEwLwYDVQQD
EyhjM2U5OTBjZmIyOWE1MGUxZTAxMzFjYjM2OGQyNDU1ODE2MWY5NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwNgqYM3Cb9ADmyXvDmvh03qwhl4
PRbW8conqFrzpCHaB26spw+0m65xosN53+bB2XZdJV1dEm83guaAZDRbLId1WHRA
DcOwt+tJRMZ+CY0QHTtiZx0GySmt+K+boN8QzhB0SnHI1NvBM74EM9pk0WivPd86
I7VJ/7ClGnpDMmCxHJuXtPFcLQWi4uECL7jYhg7DvyBl9BSvkENgyaqELEMROow+
0X/R3qk/yMNbTvZji9DxDE8JKLZ7kcp/Y9MzFuLGV7BntBuW991gBItzI8Ul3I9M
4oSrfr8i1kMnrfkaoJ3bz4G81RG+sTXYqbsMJWO6tuM6fUf+87F174PitQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPpkM+ymlDh4BMcs2jSRVgWH5VjMB8GA1UdIwQY
MBaAFIo40RkfZvHwMV3l9FzBlNHNGdH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEt
ODRmOGZkYzBjNjk4LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEtODRmOGZkYzBjNjk4
LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwoGpPNX
9vayy8NgCp69KQrm1dSuE3ics12n4jY77Xo4ysYrUv3PSiOw5jNri8C6lfgVAnzd
K3oFQ1tm7LPpuWXiR2X6eQyohkQ4roJmrGjclm1MpTqXA7r+h4cEgXTQeXGnUe7H
OrVGZ8pvWoulCz7z9w586TYv/DBFmNpuZJm5JNQqtgsJt9nYI+lSJ3wLImMnhno3
Nk+YbayCrK5yDROpk2tvomWw8dMPlVC0j7EAcVwcI3vMx08fine/+WjuoZiZGYvl
70jDauuRbVPOwv97TvcEtASOMmlerqgZXSIapD5sSQ1LneVgKQOLLF+Tvfsfl692
lINhcg+pS/gCXA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 11:11:29 2026 by rpki-client