Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          EiVnlZiafBn86wwnuxccdypyaMGvv34F5fB3DK356uU=
Subject key identifier:   96:01:27:38:03:5D:81:FD:7D:A6:CE:37:5A:F1:2B:3F:57:D2:92:72
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       019EC111F4B6E4B0CDED3EC6289B739DC993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          197A
Signing time:             Sat 13 Jun 2026 13:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:39 +0000
Files and hashes:         1: 1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa (hash: a7NHnkscG6OzvwBm8NXSANt6871rXlNEhgTw4CrzMQc=)
                          2: MH0ePkGiqUNJj92Th9uz7ESBLuY.roa (hash: zEMC++4x++17MQ2QaYX26EoR6rGR9XCEMskuWanLEDo=)
                          3: TL6-YQoL6bM9YzZkFooupL9SKZc.roa (hash: fDKbKxnCCglM7bDeEH0JDX6y2HKlL0aR2oegXj3HyjY=)
                          4: ZSy9I3udyb1w0usAvKavWUhYUuM.roa (hash: NjrlIizcsmC5vnXJgYJk87Yv2k+U89uwtXh718Ex2Oo=)
                          5: lilRXnQbhAs_T-urB33KZ2t0KZQ.roa (hash: U6hwfDfpC6+pNA9h6WSEbMtCWXO/blanxBm4f8SHiVE=)
                          6: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: wKbsRUHh+TnFKm95xc1Gpe/W2kBZf0hZSdcYZ7cLoV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:f4:b6:e4:b0:cd:ed:3e:c6:28:9b:73:9d:c9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Jun 13 13:00:39 2026 GMT
            Not After : Jun 14 13:00:39 2026 GMT
        Subject: CN=96012738035d81fd7da6ce375af12b3f57d29272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:d4:90:d0:9b:a9:94:43:f0:86:ea:ce:c8:
                    cf:8a:a4:d7:86:4c:a4:d5:41:32:10:8a:c4:8b:2b:
                    04:1b:50:d4:cb:d7:f8:4b:ab:26:05:bc:dc:3f:e3:
                    1f:6c:95:a1:89:e9:02:0e:d6:ad:51:cd:4e:cd:6b:
                    ae:c3:61:a8:97:3a:55:80:59:0e:74:02:16:04:f9:
                    7c:5c:37:a1:ce:28:fa:74:71:a3:85:d9:31:3f:81:
                    f7:c3:a1:05:18:d9:c2:bf:64:05:e1:7b:7b:ea:6a:
                    a2:e9:5f:c0:2b:25:01:b9:57:ee:a3:9b:8c:b2:b9:
                    56:75:a1:a7:9a:a0:65:9d:3c:07:05:b5:85:1b:9f:
                    57:b8:7d:a0:8d:74:46:6d:e3:06:5a:d8:2b:d5:8d:
                    24:d7:11:7f:af:e3:b7:28:a1:2b:be:1a:9a:23:b0:
                    13:6f:56:33:e2:c4:59:6a:8b:1d:03:25:7c:4b:f4:
                    6a:d4:88:a8:b9:46:c9:e7:dd:07:62:1d:5a:8a:70:
                    6b:80:c6:f6:6c:41:1d:ff:9d:75:76:f5:36:01:34:
                    2c:f6:58:41:21:af:70:3f:dd:83:ec:d3:8f:ba:da:
                    c1:f3:2b:7e:00:6c:d5:0b:90:11:d1:f7:12:d2:75:
                    11:b5:c6:b2:0a:00:a9:82:dd:2c:d7:dd:b6:db:11:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:01:27:38:03:5D:81:FD:7D:A6:CE:37:5A:F1:2B:3F:57:D2:92:72
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:1a:b4:31:ed:4f:6c:17:6d:cf:d7:c6:df:47:65:b8:06:
         16:01:a3:d5:75:c5:52:3e:a3:59:f2:35:51:85:3b:69:42:3e:
         91:59:d7:d2:4e:a8:3a:4c:1b:22:64:10:5d:cd:db:0b:19:3b:
         1f:24:cf:fc:db:dc:fe:b3:fd:f6:04:d2:b2:eb:e2:cb:f5:f3:
         c7:78:8b:3b:57:fb:72:d3:27:11:c5:f0:8d:65:08:3b:51:27:
         bc:69:12:3c:7e:9a:97:d3:11:17:ff:7e:30:da:a0:af:4a:ef:
         5b:63:c8:8e:25:a8:39:de:7b:7e:bc:69:5e:0c:94:81:8c:ce:
         6d:88:dc:54:0a:8b:b2:d5:a2:3f:d3:0a:f3:b6:bb:0c:fe:cc:
         60:49:12:cf:14:1a:39:52:bb:22:e9:e8:bd:37:ca:53:9c:e7:
         b1:94:38:98:10:68:06:5b:b3:fe:12:33:07:19:ab:5f:6e:74:
         42:fd:4f:5e:06:97:69:cd:6f:4a:9c:ed:e8:80:bf:90:59:41:
         b9:3b:74:a3:08:e6:52:48:f5:c5:73:3f:5b:8f:05:21:c7:98:
         fa:df:27:b0:13:1b:e9:d3:d9:2c:ad:e3:3f:6d:0f:6a:dd:37:
         a1:76:9e:7a:21:e5:e0:fb:e9:b2:3c:6c:2a:43:c9:e6:fa:3c:
         5c:7e:09:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEfS25LDN7T7GKJtzncmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz
MWJlZDIwHhcNMjYwNjEzMTMwMDM5WhcNMjYwNjE0MTMwMDM5WjAzMTEwLwYDVQQD
Eyg5NjAxMjczODAzNWQ4MWZkN2RhNmNlMzc1YWYxMmIzZjU3ZDI5MjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhDUkNCbqZRD8IbqzsjPiqTXhkyk
1UEyEIrEiysEG1DUy9f4S6smBbzcP+MfbJWhiekCDtatUc1OzWuuw2GolzpVgFkO
dAIWBPl8XDehzij6dHGjhdkxP4H3w6EFGNnCv2QF4Xt76mqi6V/AKyUBuVfuo5uM
srlWdaGnmqBlnTwHBbWFG59XuH2gjXRGbeMGWtgr1Y0k1xF/r+O3KKErvhqaI7AT
b1Yz4sRZaosdAyV8S/Rq1IiouUbJ590HYh1ainBrgMb2bEEd/511dvU2ATQs9lhB
Ia9wP92D7NOPutrB8yt+AGzVC5AR0fcS0nURtcayCgCpgt0s19222xExgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYBJzgDXYH9fabON1rxKz9X0pJyMB8GA1UdIwQY
MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt
MjdiZjgzY2RlZDZiLzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi
LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiUatDHt
T2wXbc/Xxt9HZbgGFgGj1XXFUj6jWfI1UYU7aUI+kVnX0k6oOkwbImQQXc3bCxk7
HyTP/Nvc/rP99gTSsuviy/Xzx3iLO1f7ctMnEcXwjWUIO1EnvGkSPH6al9MRF/9+
MNqgr0rvW2PIjiWoOd57frxpXgyUgYzObYjcVAqLstWiP9MK87a7DP7MYEkSzxQa
OVK7IunovTfKU5znsZQ4mBBoBluz/hIzBxmrX250Qv1PXgaXac1vSpzt6IC/kFlB
uTt0owjmUkj1xXM/W48FIceY+t8nsBMb6dPZLK3jP20Pat03oXaeeiHl4Pvpsjxs
KkPJ5vo8XH4JuA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:29 2026 by rpki-client