Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          aU4dw1SLtFhZWe72zg1EbDnRV/ywO0yRX7U5fRKqggA=
Subject key identifier:   CD:F0:7D:AE:10:21:C3:70:CF:D7:C6:F1:24:54:23:70:B0:58:13:7B
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       019EC4EE950F2596AAB405958F69BD35226D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          0620
Signing time:             Sun 14 Jun 2026 07:00:30 +0000
Manifest this update:     Sun 14 Jun 2026 07:00:30 +0000
Manifest next update:     Mon 15 Jun 2026 07:00:30 +0000
Files and hashes:         1: BcjvqCw20vlSUqkMcH2OIN19k7g.roa (hash: LwtF+uCxprVmgkkr+DnqU8Ri3wrgLRvmUXhKTVeiNnA=)
                          2: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          3: TRd3PwWjN2N6i0kSV548d4vlbt0.roa (hash: ZKnbwzmBAX2zhMCQGg8pdlTxO8b68gKUxXEWzkBH4eI=)
                          4: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: Fs/4JHZTp69jzYSWa57Rp4OgHe0eZabnZUbrVomMC7Q=)
                          5: xWwqlVqWd0iRwMTuQO8eVNoCWHU.roa (hash: yQKukILLOQx8xluWCSSZQ2VF3E7ijyBr1SeiIVBdBeU=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:ee:95:0f:25:96:aa:b4:05:95:8f:69:bd:35:22:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: Jun 14 07:00:30 2026 GMT
            Not After : Jun 15 07:00:30 2026 GMT
        Subject: CN=cdf07dae1021c370cfd7c6f124542370b058137b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:5f:3a:f8:97:c9:49:89:b0:f0:70:c1:95:
                    da:f3:9e:1b:e0:17:84:ea:e0:bc:a5:9a:20:f7:c6:
                    68:27:ec:24:ff:4b:2d:97:c3:83:d9:22:03:87:82:
                    e0:af:b8:64:e7:75:c5:2d:77:dd:3d:d3:f4:9c:47:
                    fb:9a:77:74:0c:21:6e:29:3e:8f:7a:71:d3:3b:bd:
                    d5:fb:7f:c0:62:1e:15:9b:7c:95:f4:c3:84:e7:7e:
                    b5:ce:06:aa:0d:67:47:2f:da:03:d8:08:4e:27:0c:
                    68:eb:30:8b:92:45:55:be:a4:de:2f:7c:a2:0a:20:
                    25:18:fd:a3:3f:9d:64:d5:8f:e3:87:cf:52:55:13:
                    84:f4:69:28:fe:8a:7f:58:3a:17:37:5a:fd:3e:75:
                    b4:5a:db:ce:d3:89:fc:a8:b1:10:8a:fe:4f:8d:88:
                    56:12:56:b6:48:8e:87:38:36:93:cf:de:70:57:cc:
                    e5:39:12:30:66:e7:75:0d:3e:2c:e7:11:46:49:af:
                    4e:02:2d:f4:28:31:b2:8d:9b:69:4e:39:d8:ed:20:
                    68:0e:48:02:bc:8d:89:2a:4f:f7:35:96:27:88:c8:
                    f7:2c:8e:0d:18:7f:76:17:56:65:ff:b2:bd:6c:26:
                    0f:eb:a4:a1:76:21:ef:98:73:f3:df:f8:5c:a2:66:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F0:7D:AE:10:21:C3:70:CF:D7:C6:F1:24:54:23:70:B0:58:13:7B
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:89:0d:07:10:cb:28:47:5b:ec:e2:de:0e:1b:6b:7d:8f:84:
         b8:0f:95:62:e2:00:2d:11:ef:37:78:77:71:52:0e:0b:65:09:
         f5:d7:58:8d:27:dc:a8:79:6e:f8:c0:d2:56:d8:74:0b:18:37:
         9f:48:ee:19:37:34:35:f5:bb:b0:cc:e2:17:34:79:dd:b5:68:
         59:dd:67:68:28:c6:72:fc:ca:02:20:b2:b2:b2:10:70:4e:ee:
         fe:30:b9:a2:bf:b0:cb:c1:f6:ab:e6:38:4c:47:0a:b0:60:fc:
         c7:74:09:6c:52:b0:c4:ef:f5:bc:b0:38:3c:2d:dc:3b:ea:7a:
         05:eb:21:f6:f3:1b:8f:a9:72:ee:34:81:c9:01:a8:0c:07:63:
         d1:1c:53:6f:f4:c2:c1:41:b8:93:20:db:fb:5e:6e:56:c6:4c:
         7b:88:e3:50:78:60:d4:9c:0f:28:ce:45:69:7a:b1:c5:8a:75:
         1f:3d:e5:a7:a5:28:d1:1d:83:f8:8d:f7:e1:7f:c2:ba:f6:9e:
         7a:8c:9b:e2:85:d8:0f:f2:a5:e0:34:f5:dc:01:0d:e7:f2:1b:
         86:65:9d:bf:57:92:1f:bd:ff:83:37:8a:43:d2:ff:03:4e:24:
         0d:84:9e:4f:a2:41:6d:46:0d:bf:19:b5:f6:04:a4:5f:8f:7d:
         77:92:48:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7E7pUPJZaqtAWVj2m9NSJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy
ZDdjZGYwHhcNMjYwNjE0MDcwMDMwWhcNMjYwNjE1MDcwMDMwWjAzMTEwLwYDVQQD
EyhjZGYwN2RhZTEwMjFjMzcwY2ZkN2M2ZjEyNDU0MjM3MGIwNTgxMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy25fOviXyUmJsPBwwZXa854b4BeE
6uC8pZog98ZoJ+wk/0stl8OD2SIDh4Lgr7hk53XFLXfdPdP0nEf7mnd0DCFuKT6P
enHTO73V+3/AYh4Vm3yV9MOE5361zgaqDWdHL9oD2AhOJwxo6zCLkkVVvqTeL3yi
CiAlGP2jP51k1Y/jh89SVROE9Gko/op/WDoXN1r9PnW0WtvO04n8qLEQiv5PjYhW
Ela2SI6HODaTz95wV8zlORIwZud1DT4s5xFGSa9OAi30KDGyjZtpTjnY7SBoDkgC
vI2JKk/3NZYniMj3LI4NGH92F1Zl/7K9bCYP66ShdiHvmHPz3/hcomZxUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3wfa4QIcNwz9fG8SRUI3CwWBN7MB8GA1UdIwQY
MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt
Mzk1MTM3OGFhNzY2LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2
LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYkNBxDL
KEdb7OLeDhtrfY+EuA+VYuIALRHvN3h3cVIOC2UJ9ddYjSfcqHlu+MDSVth0Cxg3
n0juGTc0NfW7sMziFzR53bVoWd1naCjGcvzKAiCysrIQcE7u/jC5or+wy8H2q+Y4
TEcKsGD8x3QJbFKwxO/1vLA4PC3cO+p6Besh9vMbj6ly7jSByQGoDAdj0RxTb/TC
wUG4kyDb+15uVsZMe4jjUHhg1JwPKM5FaXqxxYp1Hz3lp6Uo0R2D+I334X/Cuvae
eoyb4oXYD/Kl4DT13AEN5/IbhmWdv1eSH73/gzeKQ9L/A04kDYSeT6JBbUYNvxm1
9gSkX499d5JI5w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:41:30 2026 by rpki-client