Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File:                     1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier:          J5lJw7dQ1/iz5upgZ7ORIjrobUT286vbyfWgX3EbtGY=
Subject key identifier:   D5:DA:2F:69:CA:F5:85:DC:F5:A7:2E:5A:EE:F5:C9:02:7F:3D:84:0D
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer:       /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial:       019EBE7F79B3A7901DA24A948FA13D4A3239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number:          182D
Signing time:             Sat 13 Jun 2026 01:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:25 +0000
Files and hashes:         1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: GkpLCcOvyFqJH7lC1InLjbu5DpHk14tpFW60GegQfzs=)
                          2: sDWM_DhpRyRWUD2ROyiBU9tXXyU.roa (hash: Jens7OiCrejocf06H1XaSPttnLpxxGplzlx3u03vPxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:79:b3:a7:90:1d:a2:4a:94:8f:a1:3d:4a:32:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
        Validity
            Not Before: Jun 13 01:01:25 2026 GMT
            Not After : Jun 14 01:01:25 2026 GMT
        Subject: CN=d5da2f69caf585dcf5a72e5aeef5c9027f3d840d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:5d:2d:93:aa:00:ba:1b:e8:70:8a:fe:af:
                    b2:31:85:ed:5e:d8:8e:8f:91:90:a0:85:48:f8:05:
                    bc:3e:79:21:dc:be:23:60:77:07:ec:70:41:b1:e0:
                    4e:80:4f:78:e1:40:83:17:08:4d:cb:a0:21:6e:e7:
                    5f:1a:da:e2:85:39:26:f1:47:f3:85:3a:75:72:b0:
                    8a:82:84:cb:3b:c2:13:c9:dd:3a:ed:9d:db:c4:6c:
                    2a:8e:e8:81:ab:8a:ac:c4:31:50:9f:2d:e4:fe:b3:
                    53:d3:8d:15:b0:56:7c:8a:8e:c0:27:25:08:70:32:
                    46:cd:a5:02:8a:5a:bc:ec:ab:56:5b:0f:0c:75:7d:
                    32:d1:97:91:80:af:e6:23:b4:cf:c0:bb:a6:d7:ce:
                    30:48:98:e4:f8:f1:e2:b7:fb:cb:c2:c4:ac:bc:7a:
                    9e:b8:6a:c1:19:1e:de:74:a5:dc:0b:99:e3:44:23:
                    a6:d6:a5:62:4d:37:c4:9d:2e:16:15:98:36:09:36:
                    e4:fa:11:4c:18:2c:52:9a:60:86:03:b6:32:3d:98:
                    01:db:61:81:06:35:b7:eb:dc:e3:27:e3:89:1e:50:
                    d5:71:c5:e0:2a:99:c4:8f:4d:a1:2f:e5:74:65:22:
                    29:59:56:bf:ab:6d:b5:6d:0a:b4:9c:48:57:50:08:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DA:2F:69:CA:F5:85:DC:F5:A7:2E:5A:EE:F5:C9:02:7F:3D:84:0D
            X509v3 Authority Key Identifier:
                keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b3:5b:17:d1:f7:cd:dd:e7:b6:5a:f0:af:67:61:d6:22:8a:
         ff:5e:cc:62:3c:23:41:7f:b2:99:84:5d:54:fb:b9:cb:df:32:
         4e:29:36:bc:0b:8c:6b:1c:10:d2:e0:9b:5f:17:15:ce:e6:b7:
         71:24:eb:b4:02:e3:30:0e:eb:b9:cd:a8:af:46:58:69:bd:70:
         1c:ea:f8:7a:33:e5:35:63:6c:f2:c3:d9:40:8c:95:e0:0c:ca:
         63:d6:4a:f9:de:9b:89:d6:88:da:d8:0d:61:d1:31:15:71:07:
         a2:df:f2:1f:07:e3:53:c4:50:52:b3:df:38:85:81:41:2a:71:
         00:b3:8e:d7:f5:f5:eb:7e:c4:98:3f:aa:20:0f:4d:f9:4a:94:
         68:ce:83:63:78:75:9b:91:86:75:53:1a:46:5a:c0:76:da:e3:
         a2:1b:e5:9b:c3:91:f2:89:85:be:e1:45:ef:8c:ca:a6:0d:18:
         c5:3d:02:6a:d7:39:51:9b:a0:3a:a7:c1:19:aa:e4:70:c1:b7:
         ec:08:bb:02:f7:d4:2d:5b:da:a4:63:3f:4f:e4:36:2b:ce:67:
         1e:06:7e:17:75:67:57:40:ea:51:3c:78:95:2b:8b:85:c6:e2:
         be:fe:89:51:dd:4b:72:b3:7f:18:8b:5b:ae:31:b6:d6:1d:72:
         fb:73:33:f5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+f3mzp5AdokqUj6E9SjI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy
YTdiZGUwHhcNMjYwNjEzMDEwMTI1WhcNMjYwNjE0MDEwMTI1WjAzMTEwLwYDVQQD
EyhkNWRhMmY2OWNhZjU4NWRjZjVhNzJlNWFlZWY1YzkwMjdmM2Q4NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ldLZOqALob6HCK/q+yMYXtXtiO
j5GQoIVI+AW8Pnkh3L4jYHcH7HBBseBOgE944UCDFwhNy6AhbudfGtrihTkm8Ufz
hTp1crCKgoTLO8ITyd067Z3bxGwqjuiBq4qsxDFQny3k/rNT040VsFZ8io7AJyUI
cDJGzaUCilq87KtWWw8MdX0y0ZeRgK/mI7TPwLum184wSJjk+PHit/vLwsSsvHqe
uGrBGR7edKXcC5njRCOm1qViTTfEnS4WFZg2CTbk+hFMGCxSmmCGA7YyPZgB22GB
BjW369zjJ+OJHlDVccXgKpnEj02hL+V0ZSIpWVa/q221bQq0nEhXUAiVoQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNXaL2nK9YXc9acuWu71yQJ/PYQNMB8GA1UdIwQY
MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw
LWNiYjdkMmJmNmZhMS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UyLzlmNDU5Zi0yNjRkLTQ2Y2UtODdiMC1jYmI3ZDJiZjZm
YTEvMS8xLVRWcWx1ZE9vdGNyWlVYSWZIblNFdGNxZTk0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbNb
F9H3zd3ntlrwr2dh1iKK/17MYjwjQX+ymYRdVPu5y98yTik2vAuMaxwQ0uCbXxcV
zua3cSTrtALjMA7ruc2or0ZYab1wHOr4ejPlNWNs8sPZQIyV4AzKY9ZK+d6bidaI
2tgNYdExFXEHot/yHwfjU8RQUrPfOIWBQSpxALOO1/X1637EmD+qIA9N+UqUaM6D
Y3h1m5GGdVMaRlrAdtrjohvlm8OR8omFvuFF74zKpg0YxT0Catc5UZugOqfBGark
cMG37Ai7AvfULVvapGM/T+Q2K85nHgZ+F3VnV0DqUTx4lSuLhcbivv6JUd1LcrN/
GItbrjG21h1y+3Mz9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:51 2026 by rpki-client