Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File:                     ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier:          iwmUbojmL3lS8/E1btEK5JsM6D+dvex8NPNwc2Aofys=
Subject key identifier:   3F:31:32:67:CC:61:8E:81:E1:5E:0C:D1:E5:5D:5D:13:B2:0D:1C:C0
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer:       /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial:       019EBF5A355CD4EFD8E7AAE24FD5E06AED9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 05:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:20 +0000
Files and hashes:         1: R9EYWDWbFyIowERkQv1v0JtSffs.roa (hash: UZd3m4a2szallkaOjNZ7VHm5NhVRaDO2lmc6VL9YvRg=)
                          2: X3fPlEcezz2LtewMmlGePOr2KHg.roa (hash: 5g36Sq2zpkP21Y5qWvGwR57g8qXOqKbe5sby4b2OVKE=)
                          3: ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa (hash: 43aIR8uvVvqvIYOmN9YnPWlwLHPz7ywPbdcbAEwBcvs=)
                          4: uYt3LwvbCynztKYkWZlfCwbeA9U.roa (hash: lkVlyA3OypIzfME9Kh6ROBp1XjLEdpw7ZJP7xjy2Vqw=)
                          5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: jeUEYCapcKoSmivcxdaViuh4MdKnK4nX3T6q4Wo8ZMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:35:5c:d4:ef:d8:e7:aa:e2:4f:d5:e0:6a:ed:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
        Validity
            Not Before: Jun 13 05:00:20 2026 GMT
            Not After : Jun 14 05:00:20 2026 GMT
        Subject: CN=3f313267cc618e81e15e0cd1e55d5d13b20d1cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:5f:2c:eb:3e:67:43:37:33:bf:65:1b:f4:
                    65:b7:2f:90:c4:74:c1:b7:66:09:ae:29:4d:9d:db:
                    a6:cb:29:6b:fa:a1:9c:50:7c:52:27:df:b4:61:dd:
                    0f:0c:d3:e4:66:09:be:51:84:9b:a2:51:9f:33:e8:
                    7e:7e:cc:3e:7f:9c:f8:3b:f5:54:f6:65:b8:56:31:
                    9e:35:9d:03:92:af:8c:47:82:46:f0:62:f3:38:a8:
                    fa:e7:e1:fb:51:58:01:29:3f:76:82:d2:bd:60:4c:
                    6e:1f:88:11:04:45:e3:60:a4:a8:50:52:92:53:51:
                    38:ef:dc:4e:79:ec:36:0e:ac:96:ca:51:db:ad:14:
                    6a:fc:c3:ed:ee:2c:c5:14:10:24:5a:13:97:7b:1f:
                    f9:1e:ba:15:04:03:7b:37:07:d9:99:2d:25:62:8f:
                    b5:c0:2c:2f:01:f4:ed:1b:d0:d9:8b:25:e9:db:d2:
                    f5:6d:2b:8f:42:5a:91:42:a1:45:7b:6c:57:0a:27:
                    e2:86:16:d7:87:fe:ce:72:3b:bc:1b:7a:33:5f:57:
                    8d:f0:d1:a6:eb:d8:31:e7:ea:49:86:c6:c5:fd:43:
                    b8:5d:ac:c4:e6:00:10:e9:0d:28:07:a8:f1:de:41:
                    5a:3e:53:f4:ca:15:85:50:1e:5d:fd:72:36:4a:3f:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:31:32:67:CC:61:8E:81:E1:5E:0C:D1:E5:5D:5D:13:B2:0D:1C:C0
            X509v3 Authority Key Identifier:
                keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:27:ac:c2:31:5e:c3:ed:3a:b1:cd:c9:8d:02:72:11:87:1c:
         fc:7e:82:13:96:69:b9:72:5e:a8:d9:83:bf:6c:46:10:42:06:
         91:86:4e:24:ff:0d:ce:57:cb:57:3e:05:9a:98:3b:23:ac:da:
         33:27:16:0a:f2:69:a3:49:f0:a3:d8:ae:40:f6:40:64:af:71:
         51:1b:17:9c:fd:43:47:aa:93:03:19:80:8f:44:67:17:72:b9:
         8d:11:1d:c6:e4:2c:bb:80:cb:4f:c8:ca:d1:84:c8:97:71:6d:
         ec:75:ba:8c:aa:02:e3:17:70:5c:df:40:12:f4:9b:5c:8c:95:
         97:d4:a9:33:ed:ce:05:9f:4d:7b:12:01:d3:0f:30:07:ef:fc:
         c9:36:1e:93:d0:90:75:01:50:db:78:a0:78:c1:ba:e2:92:b1:
         c4:51:e7:dc:98:4b:a1:b8:60:e6:67:bf:45:db:dd:5a:69:9c:
         57:fb:59:a3:33:d0:58:34:af:73:56:f7:54:5a:c9:ed:09:e9:
         f9:c1:99:b1:38:ba:f2:87:b2:fc:66:c8:6e:80:16:2a:59:36:
         d0:24:31:bc:0f:34:cb:cd:be:9e:0c:e5:f7:5d:17:10:88:23:
         69:b6:10:99:ed:5d:5c:26:b5:8d:0c:8e:b0:6f:97:de:4c:ab:
         51:f3:eb:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WjVc1O/Y56riT9Xgau2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh
MzYwMGYwHhcNMjYwNjEzMDUwMDIwWhcNMjYwNjE0MDUwMDIwWjAzMTEwLwYDVQQD
EygzZjMxMzI2N2NjNjE4ZTgxZTE1ZTBjZDFlNTVkNWQxM2IyMGQxY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l1fLOs+Z0M3M79lG/Rlty+QxHTB
t2YJrilNndumyylr+qGcUHxSJ9+0Yd0PDNPkZgm+UYSbolGfM+h+fsw+f5z4O/VU
9mW4VjGeNZ0Dkq+MR4JG8GLzOKj65+H7UVgBKT92gtK9YExuH4gRBEXjYKSoUFKS
U1E479xOeew2DqyWylHbrRRq/MPt7izFFBAkWhOXex/5HroVBAN7NwfZmS0lYo+1
wCwvAfTtG9DZiyXp29L1bSuPQlqRQqFFe2xXCifihhbXh/7Ocju8G3ozX1eN8NGm
69gx5+pJhsbF/UO4XazE5gAQ6Q0oB6jx3kFaPlP0yhWFUB5d/XI2Sj9lZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8xMmfMYY6B4V4M0eVdXROyDRzAMB8GA1UdIwQY
MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt
ZWQ0ZjA2NDNiZjI1LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1
LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSeswjFe
w+06sc3JjQJyEYcc/H6CE5ZpuXJeqNmDv2xGEEIGkYZOJP8NzlfLVz4Fmpg7I6za
MycWCvJpo0nwo9iuQPZAZK9xURsXnP1DR6qTAxmAj0RnF3K5jREdxuQsu4DLT8jK
0YTIl3Ft7HW6jKoC4xdwXN9AEvSbXIyVl9SpM+3OBZ9NexIB0w8wB+/8yTYek9CQ
dQFQ23igeMG64pKxxFHn3JhLobhg5me/RdvdWmmcV/tZozPQWDSvc1b3VFrJ7Qnp
+cGZsTi68oey/GbIboAWKlk20CQxvA80y82+ngzl910XEIgjabYQme1dXCa1jQyO
sG+X3kyrUfPrpw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:14 2026 by rpki-client