Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File:                     RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier:          XRtoe+ji7t4wYynz5UJP4G4D1TiX+vhYOE6uHxYd+CE=
Subject key identifier:   D5:E6:5A:8B:C6:A9:9B:33:C6:EE:91:0F:5B:3D:D0:91:08:D0:48:28
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer:       /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial:       019EC1B70AADB112F01D9F4018F27E5819DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number:          1935
Signing time:             Sat 13 Jun 2026 16:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:58 +0000
Files and hashes:         1: FN53nLLPikhn5-nY05Uj4mP3Vj4.roa (hash: qx+sQ+sLjcsImqJ84C9BFMVyXO8qcwSUngwbw+Vb2nk=)
                          2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: f5IRrLVXGm+2gMZG46KkX/hTJ/8V2KhvZVW/a0QseG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:0a:ad:b1:12:f0:1d:9f:40:18:f2:7e:58:19:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
        Validity
            Not Before: Jun 13 16:00:58 2026 GMT
            Not After : Jun 14 16:00:58 2026 GMT
        Subject: CN=d5e65a8bc6a99b33c6ee910f5b3dd09108d04828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:fd:55:1a:78:c0:3b:6e:27:14:80:8b:ba:
                    a1:1c:fa:ad:e6:e5:5d:95:50:aa:8c:76:3f:e3:ff:
                    b9:90:bb:8c:a9:aa:4e:f2:95:d4:61:72:9a:60:4f:
                    6b:44:50:78:1b:98:f9:31:b7:4a:4c:de:8d:4e:2f:
                    8f:06:3b:20:dd:94:61:a9:c4:4b:bc:da:17:01:26:
                    a2:25:2e:26:fe:36:f0:74:41:ea:12:6b:28:6c:34:
                    31:39:20:42:5b:c7:0e:29:cd:96:f1:29:ce:f5:e4:
                    5e:eb:d2:81:9a:c6:14:ba:0f:ac:04:2a:14:08:82:
                    5a:dd:fd:f9:8f:d0:da:01:8d:9d:ac:3f:1b:0e:e5:
                    46:28:0d:83:08:4f:60:4e:04:1e:8b:d3:24:b0:83:
                    40:07:45:1b:1f:5b:df:aa:28:a7:4b:8f:34:a5:02:
                    b6:a4:e5:7b:a8:75:f2:ea:d9:e1:c6:01:d0:41:dc:
                    31:9a:2c:5d:b7:0c:4b:39:d1:88:fd:3a:42:67:e7:
                    7c:45:50:f6:0d:c7:c8:52:75:92:c1:4b:29:85:cf:
                    36:24:8a:e1:2d:6c:52:70:1a:00:0d:f0:a7:d4:13:
                    ca:26:a4:15:66:45:2c:58:5c:fb:09:9d:47:96:d3:
                    5a:d2:02:2a:00:2e:b8:4b:ab:23:ce:c0:fd:d5:20:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E6:5A:8B:C6:A9:9B:33:C6:EE:91:0F:5B:3D:D0:91:08:D0:48:28
            X509v3 Authority Key Identifier:
                keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:1d:f5:5c:fb:29:d6:23:0d:b4:72:46:c3:d8:59:c0:45:
         76:4a:9a:72:89:99:cd:db:e7:df:85:78:fb:84:49:71:40:39:
         88:3d:55:bf:a5:1f:fa:51:0e:28:ed:e8:5e:9e:97:db:fc:cb:
         34:62:93:8e:76:26:90:88:75:31:84:dc:24:fe:54:2e:84:30:
         d5:13:79:14:97:50:a6:f3:ff:6f:f3:b1:d5:e3:3f:63:b4:bf:
         85:01:fe:63:06:44:1e:64:59:90:d3:a5:4c:0f:6b:37:81:34:
         54:ab:1c:6d:9b:44:a5:28:e2:bc:ab:76:ec:09:77:62:23:83:
         87:0e:90:f2:f3:9d:e6:2c:c7:e3:ae:09:e3:98:67:68:58:53:
         04:72:67:12:ea:68:d0:a2:89:0a:ff:eb:74:e1:e6:c7:3a:94:
         9c:b2:85:ed:d7:a6:68:c8:7e:53:11:e1:3e:f1:d8:82:ef:c1:
         b0:75:23:04:d1:27:c2:21:9f:39:44:f2:a1:9c:c3:16:b4:87:
         e9:bf:9a:85:e1:21:62:d2:a7:5b:56:b9:fa:b5:34:09:e0:97:
         92:1d:d0:13:d5:cb:9b:e6:a0:01:73:8f:01:55:71:24:d0:52:
         37:aa:99:cf:b9:d6:33:af:26:fd:d4:6f:a8:16:e8:52:39:10:
         5e:96:87:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtwqtsRLwHZ9AGPJ+WBnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy
OGFjNzUwHhcNMjYwNjEzMTYwMDU4WhcNMjYwNjE0MTYwMDU4WjAzMTEwLwYDVQQD
EyhkNWU2NWE4YmM2YTk5YjMzYzZlZTkxMGY1YjNkZDA5MTA4ZDA0ODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxn9VRp4wDtuJxSAi7qhHPqt5uVd
lVCqjHY/4/+5kLuMqapO8pXUYXKaYE9rRFB4G5j5MbdKTN6NTi+PBjsg3ZRhqcRL
vNoXASaiJS4m/jbwdEHqEmsobDQxOSBCW8cOKc2W8SnO9eRe69KBmsYUug+sBCoU
CIJa3f35j9DaAY2drD8bDuVGKA2DCE9gTgQei9MksINAB0UbH1vfqiinS480pQK2
pOV7qHXy6tnhxgHQQdwxmixdtwxLOdGI/TpCZ+d8RVD2DcfIUnWSwUsphc82JIrh
LWxScBoADfCn1BPKJqQVZkUsWFz7CZ1HltNa0gIqAC64S6sjzsD91SBZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXmWovGqZszxu6RD1s90JEI0EgoMB8GA1UdIwQY
MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt
Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm
LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyMd9Vz7
KdYjDbRyRsPYWcBFdkqacomZzdvn34V4+4RJcUA5iD1Vv6Uf+lEOKO3oXp6X2/zL
NGKTjnYmkIh1MYTcJP5ULoQw1RN5FJdQpvP/b/Ox1eM/Y7S/hQH+YwZEHmRZkNOl
TA9rN4E0VKscbZtEpSjivKt27Al3YiODhw6Q8vOd5izH464J45hnaFhTBHJnEupo
0KKJCv/rdOHmxzqUnLKF7demaMh+UxHhPvHYgu/BsHUjBNEnwiGfOUTyoZzDFrSH
6b+aheEhYtKnW1a5+rU0CeCXkh3QE9XLm+agAXOPAVVxJNBSN6qZz7nWM68m/dRv
qBboUjkQXpaHMg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:08:19 2026 by rpki-client