Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          HB39cA5zO9gUWdbihlNRKFk6bRToKX3PxAVEvcGK5QY=
Subject key identifier:   E2:DC:34:0E:59:98:1B:B6:BD:8E:C3:2A:24:41:37:76:EB:FB:2C:13
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       019EBF235E8E3D8088C23B2F4787AAB1577E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 04:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:26 +0000
Files and hashes:         1: 3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa (hash: +nC3QJ9RCWlqRE3Uosm7QmqFU0HBkZbw83GEtUPhBdQ=)
                          2: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: KdyhHGY4uglETRw4bhBEerawMP8+8/+KOOf9cy/VjSo=)
                          3: _7qWKS1csoWUqUsFNNOiL6451ys.roa (hash: /iDif7LQhjMSe8pOojFBssleDtOr1vNWkexVpZHh8kU=)
                          4: nAtY-RbzYBoDHaw9pKfqi-9Rj_c.roa (hash: ygakFRiKlCc1AsCZ9QHkHBLmK3WGXgznTKZOHRqQphU=)
                          5: uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa (hash: pfVCme09A/8wk/MnxkHB5VKNGtvo4YKdgY3uHx7H4D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:5e:8e:3d:80:88:c2:3b:2f:47:87:aa:b1:57:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: Jun 13 04:00:26 2026 GMT
            Not After : Jun 14 04:00:26 2026 GMT
        Subject: CN=e2dc340e59981bb6bd8ec32a24413776ebfb2c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:20:50:9d:94:dd:82:94:f7:ba:03:7d:8e:
                    ba:9d:2f:e4:7e:74:9b:28:cb:d5:64:2a:55:df:e4:
                    a0:cc:00:7e:8b:3c:d5:32:74:29:bf:95:39:e3:67:
                    14:e2:a5:a2:bd:d8:8e:21:f4:31:47:8f:f7:43:2e:
                    64:30:2f:c8:64:e9:89:5a:94:69:2d:0a:d2:0a:b4:
                    61:2c:d5:bf:86:91:9f:01:1f:2c:d1:9f:7b:f3:11:
                    e5:53:85:0e:19:04:5e:84:ad:4d:57:8c:ae:5a:7b:
                    8b:a6:f3:09:6e:e1:96:92:bd:9c:17:06:ce:70:b1:
                    3d:9e:25:f3:d6:6a:a9:26:57:a5:78:3e:c5:30:ad:
                    b5:a6:54:34:7f:c3:15:79:50:71:87:a6:48:b2:09:
                    ad:1f:48:2d:22:51:06:46:15:e0:17:44:84:9f:eb:
                    1d:72:c2:6e:91:cb:22:9a:50:e3:61:77:61:5d:e1:
                    db:26:3d:57:32:de:5e:ec:79:ec:7b:bf:52:2d:4d:
                    97:13:96:e7:13:58:1b:4e:42:97:08:2e:f8:77:84:
                    37:48:9a:e8:40:f7:83:3d:51:a0:73:a5:de:8f:08:
                    10:d3:b5:66:eb:40:dd:7d:ed:43:37:ba:5a:6c:72:
                    42:de:60:73:25:ff:b6:a2:13:a0:6b:43:fd:89:05:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DC:34:0E:59:98:1B:B6:BD:8E:C3:2A:24:41:37:76:EB:FB:2C:13
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:a5:a1:4a:2f:7d:02:71:f2:2b:3c:55:1f:a5:6e:b3:f1:
         fe:b1:5b:96:36:42:3b:47:4f:8b:30:5e:d6:4d:63:0d:04:47:
         2c:f1:94:2b:a5:28:26:fc:40:81:43:0c:12:6d:0a:f1:d7:f3:
         e3:fc:44:37:51:7e:6a:7e:32:4f:48:82:3b:3e:63:bf:c7:9e:
         9f:04:70:25:4a:fc:e0:fd:53:c1:43:e2:90:33:5f:84:f2:9b:
         72:6d:0f:a5:75:a3:09:1a:f1:57:8f:ce:6a:94:a4:a1:d3:0e:
         73:f0:ff:ed:14:b9:c3:56:90:6c:a3:85:3c:cb:7f:a6:f2:2a:
         2b:37:82:62:37:20:25:b4:54:bc:18:69:12:74:b1:1b:6f:a1:
         4b:31:67:a3:18:1b:16:88:09:56:98:ff:a8:88:a4:da:d7:aa:
         60:8f:8c:51:ef:de:58:62:2b:87:10:40:14:6c:b2:ff:2b:af:
         4d:01:9b:d2:db:b0:e7:71:f7:89:44:0a:e1:b4:5b:72:9e:dc:
         1a:fa:7a:20:2a:96:08:9f:ba:71:1e:89:03:41:db:79:0b:2c:
         59:b6:d7:62:20:32:64:cb:5b:fb:3f:73:85:60:40:ac:fa:f9:
         02:ce:84:80:c1:de:32:93:51:7a:13:95:cc:a4:c4:47:94:53:
         ee:7f:96:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I16OPYCIwjsvR4eqsVd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy
NzFkMTMwHhcNMjYwNjEzMDQwMDI2WhcNMjYwNjE0MDQwMDI2WjAzMTEwLwYDVQQD
EyhlMmRjMzQwZTU5OTgxYmI2YmQ4ZWMzMmEyNDQxMzc3NmViZmIyYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbYgUJ2U3YKU97oDfY66nS/kfnSb
KMvVZCpV3+SgzAB+izzVMnQpv5U542cU4qWivdiOIfQxR4/3Qy5kMC/IZOmJWpRp
LQrSCrRhLNW/hpGfAR8s0Z978xHlU4UOGQRehK1NV4yuWnuLpvMJbuGWkr2cFwbO
cLE9niXz1mqpJleleD7FMK21plQ0f8MVeVBxh6ZIsgmtH0gtIlEGRhXgF0SEn+sd
csJukcsimlDjYXdhXeHbJj1XMt5e7Hnse79SLU2XE5bnE1gbTkKXCC74d4Q3SJro
QPeDPVGgc6XejwgQ07Vm60Ddfe1DN7pabHJC3mBzJf+2ohOga0P9iQWHvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLcNA5ZmBu2vY7DKiRBN3br+ywTMB8GA1UdIwQY
MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt
ZGVjNDgwN2NkN2U2LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2
LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwaloUov
fQJx8is8VR+lbrPx/rFbljZCO0dPizBe1k1jDQRHLPGUK6UoJvxAgUMMEm0K8dfz
4/xEN1F+an4yT0iCOz5jv8eenwRwJUr84P1TwUPikDNfhPKbcm0PpXWjCRrxV4/O
apSkodMOc/D/7RS5w1aQbKOFPMt/pvIqKzeCYjcgJbRUvBhpEnSxG2+hSzFnoxgb
FogJVpj/qIik2teqYI+MUe/eWGIrhxBAFGyy/yuvTQGb0tuw53H3iUQK4bRbcp7c
Gvp6ICqWCJ+6cR6JA0HbeQssWbbXYiAyZMtb+z9zhWBArPr5As6EgMHeMpNRehOV
zKTER5RT7n+Weg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:58 2026 by rpki-client