Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File:                     2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier:          QNK81AWwaFsfYglvZzze+yiArkvhKVfnxf6vyfvQrvQ=
Subject key identifier:   1C:0C:62:D6:15:4D:69:42:24:D0:4F:B5:EA:B8:A6:72:AF:62:89:5E
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer:       /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial:       019EBEB5F72C4A185C67679D074A8C5AF594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number:          0383
Signing time:             Sat 13 Jun 2026 02:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:56 +0000
Files and hashes:         1: 2Jyx-ez5D2RctC2rcjZfkrdR1iQ.roa (hash: +fEQnj+mpmhoAARxEWCzHTDJhjSwGZNKXcffsfSyiYo=)
                          2: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: KJkm5QpI1+oYeuks1A0+qFHotsN5VlA0sVk4LE7WP3o=)
                          3: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
                          4: 6DOrz3928TU7wZXRvfoe5TIHe2A.roa (hash: dkoX6rsv82LKW6X0aXjN4hG4E9xoboCySwytbCJljwU=)
                          5: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
                          6: Z46kECUlAFGYbWevIyiC_xd73v8.roa (hash: Ti8hE28WtXNgCBVsu+0ynI0C/xLykB8CZJwafJPSfqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:f7:2c:4a:18:5c:67:67:9d:07:4a:8c:5a:f5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
        Validity
            Not Before: Jun 13 02:00:56 2026 GMT
            Not After : Jun 14 02:00:56 2026 GMT
        Subject: CN=1c0c62d6154d694224d04fb5eab8a672af62895e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:cd:e6:d2:59:7c:95:ea:02:a6:7b:71:a1:
                    4c:b1:6c:46:4f:fd:b6:ab:ea:ee:97:65:e2:cc:73:
                    8b:46:b7:54:83:ba:dc:9c:09:c4:19:e2:96:6c:78:
                    02:9f:20:bc:12:24:9b:f9:2c:07:3d:5f:f5:01:52:
                    05:34:83:2a:44:07:cb:a0:0f:0f:26:2c:df:d6:0f:
                    d3:8f:83:0a:b7:89:04:34:ec:5b:df:37:4b:6c:12:
                    07:04:e7:2a:1f:75:78:42:d3:ee:0f:0f:d6:ef:7f:
                    fd:39:47:ea:b5:bb:69:6e:50:df:ee:ca:ba:cd:83:
                    a3:a6:51:bb:2e:03:4f:0f:5e:17:c1:d9:0f:2c:76:
                    b3:ac:20:49:74:1e:24:66:e6:20:ac:ed:47:d2:cc:
                    69:3e:f2:cd:e2:04:c8:ae:b2:38:e2:f2:e0:45:56:
                    e2:06:e5:f5:01:48:44:be:0e:a5:85:ee:32:0c:93:
                    e6:24:6f:83:40:f5:2b:64:39:5f:41:53:ea:6d:29:
                    c1:2e:0b:69:1c:3f:f3:dd:81:70:8e:51:31:0c:80:
                    ec:1d:5b:b8:f6:a5:8b:3b:e7:ea:84:16:07:82:af:
                    11:0e:76:07:c1:0d:ed:cc:b4:42:c1:2b:2f:db:11:
                    fc:12:fd:fc:cf:b5:90:38:40:38:55:ed:eb:af:66:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0C:62:D6:15:4D:69:42:24:D0:4F:B5:EA:B8:A6:72:AF:62:89:5E
            X509v3 Authority Key Identifier:
                keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:bf:dd:53:08:3e:0a:f3:ad:ed:cf:d0:69:4e:65:d6:22:
         6f:cf:4a:f7:5a:3c:b9:61:df:b7:94:5d:fc:36:87:92:5a:72:
         b9:01:8c:51:cd:ab:07:75:88:32:3e:06:b6:40:34:96:a7:17:
         f4:c1:39:bf:fb:e2:cc:17:d9:e7:e9:56:ef:64:dc:8a:71:0e:
         7e:2c:92:6f:b3:a7:42:bb:fa:6f:30:d3:2b:2c:d5:b9:45:d4:
         9d:8c:af:bb:51:94:d7:66:85:37:90:54:b8:d1:52:c7:98:83:
         a1:84:76:63:34:06:fa:05:f0:02:b5:07:f6:87:2a:4f:51:19:
         ae:7d:c0:f8:24:0a:e9:95:4e:cd:76:34:0a:f0:11:f6:9f:66:
         81:fc:e8:fc:50:eb:bd:48:b3:8d:8b:8a:ec:25:79:bd:6b:78:
         36:49:46:f9:a6:95:b0:6c:f5:5b:c2:7e:16:3d:47:53:bb:3e:
         85:36:71:63:58:1f:ef:63:62:c3:e5:67:77:17:6d:fe:92:b0:
         e3:94:90:6f:38:20:45:01:4f:69:82:75:5e:a1:f6:b2:07:77:
         76:6c:7d:2f:fb:e1:12:b6:ab:d0:03:40:a8:d9:0f:0b:5b:31:
         64:2d:11:d3:8a:72:0f:cf:60:fa:5f:2d:6a:f1:0b:5c:43:20:
         f8:09:be:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tfcsShhcZ2edB0qMWvWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy
MzZhMDYwHhcNMjYwNjEzMDIwMDU2WhcNMjYwNjE0MDIwMDU2WjAzMTEwLwYDVQQD
EygxYzBjNjJkNjE1NGQ2OTQyMjRkMDRmYjVlYWI4YTY3MmFmNjI4OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHnN5tJZfJXqAqZ7caFMsWxGT/22
q+rul2XizHOLRrdUg7rcnAnEGeKWbHgCnyC8EiSb+SwHPV/1AVIFNIMqRAfLoA8P
Jizf1g/Tj4MKt4kENOxb3zdLbBIHBOcqH3V4QtPuDw/W73/9OUfqtbtpblDf7sq6
zYOjplG7LgNPD14XwdkPLHazrCBJdB4kZuYgrO1H0sxpPvLN4gTIrrI44vLgRVbi
BuX1AUhEvg6lhe4yDJPmJG+DQPUrZDlfQVPqbSnBLgtpHD/z3YFwjlExDIDsHVu4
9qWLO+fqhBYHgq8RDnYHwQ3tzLRCwSsv2xH8Ev38z7WQOEA4Ve3rr2aXYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwMYtYVTWlCJNBPteq4pnKvYoleMB8GA1UdIwQY
MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt
NzZmYTUxNWI0YjZlLzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl
LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNG/3VMI
Pgrzre3P0GlOZdYib89K91o8uWHft5Rd/DaHklpyuQGMUc2rB3WIMj4GtkA0lqcX
9ME5v/vizBfZ5+lW72TcinEOfiySb7OnQrv6bzDTKyzVuUXUnYyvu1GU12aFN5BU
uNFSx5iDoYR2YzQG+gXwArUH9ocqT1EZrn3A+CQK6ZVOzXY0CvAR9p9mgfzo/FDr
vUizjYuK7CV5vWt4NklG+aaVsGz1W8J+Fj1HU7s+hTZxY1gf72Niw+Vndxdt/pKw
45SQbzggRQFPaYJ1XqH2sgd3dmx9L/vhErar0ANAqNkPC1sxZC0R04pyD89g+l8t
avELXEMg+Am+wg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:59 2026 by rpki-client