Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File:                     tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier:          vir9yBhJhU7Tnygc6f9DKnE8fhCp3f6kfYvVAHOTpLc=
Subject key identifier:   2C:EA:9E:64:87:7F:A6:CC:B6:B9:73:0A:7E:A7:3F:72:8E:B7:89:55
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer:       /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial:       019EC0368DEB03238E48C4ABCFD954D39806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 09:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:00 +0000
Files and hashes:         1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
                          2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: q37Ub4n1ogGeshAKjPg2FdqnjR3bjJlJ89oRlVb7to0=)
                          3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:8d:eb:03:23:8e:48:c4:ab:cf:d9:54:d3:98:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
        Validity
            Not Before: Jun 13 09:01:00 2026 GMT
            Not After : Jun 14 09:01:00 2026 GMT
        Subject: CN=2cea9e64877fa6ccb6b9730a7ea73f728eb78955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:94:d7:49:6f:1d:67:a8:dd:2f:ae:78:b1:
                    fe:be:27:6c:d2:29:22:89:ad:4e:b2:60:83:df:b5:
                    e5:9f:25:d1:da:bb:66:2c:bb:c7:3b:a0:8f:94:b0:
                    aa:04:cf:e0:93:cd:69:7a:b5:b7:1b:ef:b5:30:05:
                    ca:fe:03:4c:ef:c4:da:31:81:82:5b:cb:23:43:51:
                    16:7f:25:3c:86:7a:9d:8f:35:7d:84:bd:91:82:d7:
                    b7:62:68:39:40:d6:08:80:19:f6:e0:e1:2f:05:f4:
                    be:1c:9d:53:d3:c7:dd:48:c0:01:9e:95:95:d0:96:
                    7f:c0:ad:e2:04:04:3f:4b:fa:68:f3:ba:6b:fb:7b:
                    4e:0a:1c:32:cc:0d:c7:88:8c:0c:7c:c1:f0:ef:5a:
                    d5:d1:e2:e1:0e:0b:99:fc:50:e1:f2:0a:43:57:f6:
                    34:5b:ff:15:63:97:67:ae:6b:4e:11:d1:d4:ac:9c:
                    8c:eb:ca:4b:3e:64:72:43:40:25:86:69:c5:ce:a0:
                    f4:ab:97:81:35:ec:41:08:2d:b1:c3:37:e3:ba:86:
                    fb:05:21:15:7e:51:52:e8:28:4e:cf:9b:1b:76:b0:
                    e8:11:6d:a1:ee:17:0c:0a:a5:ea:89:30:a1:57:96:
                    a8:be:a1:fe:ee:c4:b0:8b:77:4c:f3:6c:e5:d6:15:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EA:9E:64:87:7F:A6:CC:B6:B9:73:0A:7E:A7:3F:72:8E:B7:89:55
            X509v3 Authority Key Identifier:
                keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:38:05:11:78:ab:3d:bb:4f:e5:86:97:43:f9:fc:6e:0b:
         85:e3:61:b6:6e:22:2f:68:f2:da:ee:86:05:7a:28:bb:ee:95:
         94:15:98:12:b2:1b:4c:3a:9f:9c:fc:60:1a:ab:46:58:c1:08:
         7f:00:de:e1:cd:78:90:79:97:1e:84:80:df:5e:ab:7e:8e:30:
         08:60:17:63:40:9b:55:0b:bb:9b:9a:b4:3b:0c:a6:10:74:7a:
         59:0c:2b:9e:b3:53:3f:d1:9c:86:7c:e2:40:a1:29:b8:bf:cf:
         65:81:94:4e:7e:7e:d3:3c:24:08:da:23:2b:df:c3:17:5e:eb:
         98:7e:14:f7:eb:21:54:7f:1d:90:36:b8:52:c7:dc:57:c0:3e:
         76:61:84:4c:b0:cb:a1:5f:e1:8a:f7:a7:7a:f3:2a:0e:1d:d2:
         e2:1d:fa:33:d5:b8:13:eb:c7:74:5d:28:16:8b:48:7b:b9:e0:
         06:ae:27:81:cf:c4:18:df:ce:ed:e9:8f:4d:3d:e5:6b:d1:0d:
         16:9b:10:1a:58:5f:2f:3c:b3:d1:7a:cf:ae:3a:ce:2c:e1:e9:
         18:46:b2:3a:4f:70:75:49:9b:16:b1:3b:16:a0:c3:70:13:bc:
         89:73:c6:09:51:3e:08:00:ca:45:84:60:5d:1c:cb:e3:6a:0d:
         d3:b3:97:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANo3rAyOOSMSrz9lU05gGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx
YjljZmQwHhcNMjYwNjEzMDkwMTAwWhcNMjYwNjE0MDkwMTAwWjAzMTEwLwYDVQQD
EygyY2VhOWU2NDg3N2ZhNmNjYjZiOTczMGE3ZWE3M2Y3MjhlYjc4OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/aU10lvHWeo3S+ueLH+vids0iki
ia1OsmCD37XlnyXR2rtmLLvHO6CPlLCqBM/gk81perW3G++1MAXK/gNM78TaMYGC
W8sjQ1EWfyU8hnqdjzV9hL2Rgte3Ymg5QNYIgBn24OEvBfS+HJ1T08fdSMABnpWV
0JZ/wK3iBAQ/S/po87pr+3tOChwyzA3HiIwMfMHw71rV0eLhDguZ/FDh8gpDV/Y0
W/8VY5dnrmtOEdHUrJyM68pLPmRyQ0AlhmnFzqD0q5eBNexBCC2xwzfjuob7BSEV
flFS6ChOz5sbdrDoEW2h7hcMCqXqiTChV5aovqH+7sSwi3dM82zl1hV6QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzqnmSHf6bMtrlzCn6nP3KOt4lVMB8GA1UdIwQY
MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt
OGZhNTUxZTZhZTc1LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1
LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHs4BRF4
qz27T+WGl0P5/G4LheNhtm4iL2jy2u6GBXoou+6VlBWYErIbTDqfnPxgGqtGWMEI
fwDe4c14kHmXHoSA316rfo4wCGAXY0CbVQu7m5q0OwymEHR6WQwrnrNTP9Gchnzi
QKEpuL/PZYGUTn5+0zwkCNojK9/DF17rmH4U9+shVH8dkDa4UsfcV8A+dmGETLDL
oV/hivenevMqDh3S4h36M9W4E+vHdF0oFotIe7ngBq4ngc/EGN/O7emPTT3la9EN
FpsQGlhfLzyz0XrPrjrOLOHpGEayOk9wdUmbFrE7FqDDcBO8iXPGCVE+CADKRYRg
XRzL42oN07OX1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:21 2026 by rpki-client