Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File:                     9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier:          nGxxkwHHnBW6wAkqPrzQZD+NFy98aiNLTBFeg+OGfKY=
Subject key identifier:   76:9D:98:74:3C:D5:61:D3:05:1D:2D:AF:C9:89:7A:39:1A:E9:1B:25
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer:       /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial:       019EC149345F3BC35486136A52158EE7E799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number:          17FE
Signing time:             Sat 13 Jun 2026 14:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:00 +0000
Files and hashes:         1: 1-3IPJhNn2z6uBNLHxMmCKfvzzKc.roa (hash: NdBkfOzbM5bOy0bYu/5qjiwop0xpNPBqxYjexeBjzV4=)
                          2: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=)
                          3: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=)
                          4: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: t4SiHCwIfZ175b5abCBFfIXEpYNYe9fppou6/mKQdZA=)
                          5: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=)
                          6: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=)
                          7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=)
                          8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=)
                          9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=)
                          10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=)
                          11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:34:5f:3b:c3:54:86:13:6a:52:15:8e:e7:e7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
        Validity
            Not Before: Jun 13 14:01:00 2026 GMT
            Not After : Jun 14 14:01:00 2026 GMT
        Subject: CN=769d98743cd561d3051d2dafc9897a391ae91b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b8:f1:f5:f3:9b:bf:54:d6:14:43:60:22:46:
                    8a:c0:a3:d3:59:f5:a2:3f:59:2e:2a:39:8c:eb:87:
                    36:34:51:2b:87:2e:82:73:92:9b:06:dc:22:7f:2f:
                    96:be:80:b6:62:b3:cc:de:70:f2:39:b8:ad:93:bd:
                    72:ef:3b:e9:66:9a:d1:4b:38:54:f2:f8:dc:e2:2e:
                    cd:d1:80:da:aa:db:7d:05:cd:b1:39:bb:44:83:ab:
                    84:11:7d:f8:43:2b:08:8e:46:f4:b5:b7:a2:48:f6:
                    43:90:04:93:a2:56:eb:7f:51:cf:4a:c8:61:b0:76:
                    d2:8c:63:f3:e1:0a:cb:ae:85:86:82:2c:33:fd:cd:
                    9d:ad:6b:cb:39:e1:21:32:98:6c:f2:d1:08:ea:68:
                    e2:db:61:89:aa:3e:d8:f5:51:4f:ef:f3:bf:32:3f:
                    35:27:e0:10:91:08:1a:3e:13:25:03:ce:a3:f0:f2:
                    4c:0f:3e:02:83:d6:08:05:a2:7c:26:90:25:46:34:
                    00:5a:19:4a:6b:9e:d2:86:41:71:98:4f:ee:51:08:
                    c4:8a:fd:4d:55:3b:c3:a6:d2:6f:26:1b:49:4a:38:
                    2f:5a:33:09:47:87:6a:ec:13:fb:40:8e:1d:a0:f9:
                    4b:55:34:03:f4:fd:a4:ce:30:e7:f1:e8:c9:60:48:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9D:98:74:3C:D5:61:D3:05:1D:2D:AF:C9:89:7A:39:1A:E9:1B:25
            X509v3 Authority Key Identifier:
                keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e6:73:32:d3:32:fc:73:fd:c8:ca:67:68:96:65:93:ba:d9:
         a0:6a:48:a4:2f:42:6e:ca:7e:b6:2d:8f:4f:3b:5c:c6:c8:64:
         a3:ca:8d:6b:ec:b7:30:23:a0:0d:41:d5:7f:42:c9:e5:27:82:
         b6:ee:8b:88:56:9c:ad:9d:51:ab:ea:cf:15:83:80:b3:21:d9:
         2c:f0:db:41:18:02:e5:ed:6f:a5:00:e9:11:85:06:2b:a5:35:
         47:a5:61:58:8a:49:c3:36:19:41:a8:70:0c:94:97:9e:c1:25:
         e6:e2:4f:22:bf:ac:df:32:b3:38:26:ff:7c:8d:07:60:12:09:
         64:2a:f0:0f:c7:d7:1d:72:d9:0f:fe:7b:c1:46:8c:10:d7:aa:
         21:29:a0:29:c5:9c:81:66:6e:d5:bb:55:b8:0d:c8:32:db:fd:
         91:ab:5c:19:6c:31:5c:f6:98:08:d3:bf:46:33:68:2b:9b:e5:
         b7:9f:c5:2d:9c:49:be:0c:c5:0c:ae:b0:e6:f3:52:5f:0c:22:
         c3:fe:89:49:b9:3f:ac:92:8d:42:db:b4:9b:10:20:69:1b:2b:
         11:31:56:87:8c:e7:8c:3c:e4:58:3b:1a:70:32:dd:c8:5f:1d:
         bd:ca:2f:7a:29:68:97:16:06:88:31:26:b7:9c:12:7f:e5:d2:
         22:21:14:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSTRfO8NUhhNqUhWO5+eZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj
YTc3MzkwHhcNMjYwNjEzMTQwMTAwWhcNMjYwNjE0MTQwMTAwWjAzMTEwLwYDVQQD
Eyg3NjlkOTg3NDNjZDU2MWQzMDUxZDJkYWZjOTg5N2EzOTFhZTkxYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLjx9fObv1TWFENgIkaKwKPTWfWi
P1kuKjmM64c2NFErhy6Cc5KbBtwify+WvoC2YrPM3nDyObitk71y7zvpZprRSzhU
8vjc4i7N0YDaqtt9Bc2xObtEg6uEEX34QysIjkb0tbeiSPZDkASTolbrf1HPSshh
sHbSjGPz4QrLroWGgiwz/c2drWvLOeEhMphs8tEI6mji22GJqj7Y9VFP7/O/Mj81
J+AQkQgaPhMlA86j8PJMDz4Cg9YIBaJ8JpAlRjQAWhlKa57ShkFxmE/uUQjEiv1N
VTvDptJvJhtJSjgvWjMJR4dq7BP7QI4doPlLVTQD9P2kzjDn8ejJYEiJ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHadmHQ81WHTBR0tr8mJejka6RslMB8GA1UdIwQY
MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt
MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi
LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+ZzMtMy
/HP9yMpnaJZlk7rZoGpIpC9Cbsp+ti2PTztcxshko8qNa+y3MCOgDUHVf0LJ5SeC
tu6LiFacrZ1Rq+rPFYOAsyHZLPDbQRgC5e1vpQDpEYUGK6U1R6VhWIpJwzYZQahw
DJSXnsEl5uJPIr+s3zKzOCb/fI0HYBIJZCrwD8fXHXLZD/57wUaMENeqISmgKcWc
gWZu1btVuA3IMtv9katcGWwxXPaYCNO/RjNoK5vlt5/FLZxJvgzFDK6w5vNSXwwi
w/6JSbk/rJKNQtu0mxAgaRsrETFWh4znjDzkWDsacDLdyF8dvcoveilolxYGiDEm
t5wSf+XSIiEUYw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:57:02 2026 by rpki-client