Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File:                     9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier:          AfhivqLlg6pfWzJrwo+oq4xyokNGmYFD4OmsFA3UcX4=
Subject key identifier:   CA:32:DE:D3:B8:C5:A4:55:1D:16:55:85:27:32:39:50:02:FE:27:58
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer:       /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial:       019EBF23C7307D7A4D12D6C2A8C620A5FCE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number:          05B4
Signing time:             Sat 13 Jun 2026 04:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:53 +0000
Files and hashes:         1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: QIGM6i68JitQoNlP3fDEEMdmSMS5twZoY1gZ5fiwNiU=)
                          2: X6eUtYG6Iu_KBouxuW8oA117wgI.roa (hash: PKWNZ6kf/JMcC2o+SX3jrDdlq7cx8CizTYBt74X74JE=)
                          3: YOoAFvb-hpFF9iLyWp19Bt8q4hI.asa (hash: UisOBblx7P2PqVDUk/EETXB1Szxocz0uaBU0SXtiiuA=)
                          4: Zi-ZCMc7U8Y-da92tU5kvn9Xd-8.asa (hash: nXYqjC+Hi2nKeloly1ptUDmdW625318NTGYnF0/9v94=)
                          5: eN33JrW4uE9WYv1qiKiEHTbpfbQ.roa (hash: jV/nUDEGGfrnT9JmJTuWFyFTtbm4P5emFu/rnjcrOOg=)
                          6: xJZbzQfr9Oxhm2_FMaPpOD_JF6o.roa (hash: ipqQ2yYK11hQH4GRmmAyAseGYznlNeYFRLVlXv3h3aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:c7:30:7d:7a:4d:12:d6:c2:a8:c6:20:a5:fc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
        Validity
            Not Before: Jun 13 04:00:53 2026 GMT
            Not After : Jun 14 04:00:53 2026 GMT
        Subject: CN=ca32ded3b8c5a4551d1655852732395002fe2758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:15:e3:3f:0a:18:ea:4b:fd:a3:3a:b0:f1:
                    d9:8b:a1:8a:66:42:9a:70:c5:de:3d:f7:ec:76:98:
                    ef:1c:fa:60:0c:09:d0:04:4b:0c:8e:24:64:af:35:
                    eb:7f:09:00:bf:bd:ef:de:82:38:96:d3:58:e7:37:
                    fe:b0:16:89:1e:a8:3f:78:28:a0:fe:0f:10:f4:fb:
                    15:c6:9e:6c:cc:67:dc:b9:44:7a:8d:0f:4e:69:a5:
                    9c:d0:8b:ac:c4:f6:5f:94:9f:04:ed:83:1d:32:ba:
                    02:7c:e4:31:23:28:49:b6:66:00:8c:ed:6a:a4:05:
                    96:46:3a:9d:bd:b0:66:93:9a:05:28:b9:b3:88:52:
                    8e:a8:f1:47:ca:42:c7:dc:82:14:2e:d4:65:57:42:
                    2f:fa:af:2d:79:55:3c:a6:44:35:77:73:3f:69:a0:
                    dd:d1:3f:71:c7:7d:b1:80:e7:88:57:c1:3b:70:7b:
                    fb:49:04:e5:98:c2:6e:62:34:71:86:eb:0b:c6:b9:
                    ca:3a:7c:66:ae:15:96:82:8f:d6:80:7b:7f:a9:17:
                    b4:d9:3b:3c:fc:f2:19:29:df:ad:5b:ba:99:0f:4e:
                    68:b4:b2:6c:93:b1:bd:6a:79:98:78:97:a9:04:61:
                    79:24:21:c4:92:1d:1e:1c:b6:8b:ed:d4:1b:80:36:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:32:DE:D3:B8:C5:A4:55:1D:16:55:85:27:32:39:50:02:FE:27:58
            X509v3 Authority Key Identifier:
                keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:03:dc:b5:98:f1:6d:a3:29:77:5b:34:ba:ba:5d:09:ca:aa:
         27:18:ff:d0:fd:74:19:1e:ed:27:93:a3:4d:fb:3b:e8:a7:e4:
         1f:b0:a3:1f:9a:8b:80:07:35:1d:85:7f:75:19:3d:65:93:22:
         36:75:a3:a7:33:ac:bc:7b:10:b5:70:1e:0b:3c:e5:bc:8f:ef:
         03:2e:de:82:bb:91:d6:6f:ab:e5:a3:37:40:b8:50:1e:25:a8:
         38:40:f9:1e:ba:18:c6:ba:bf:0f:d8:52:b0:1b:c9:9d:a1:f8:
         c6:d3:1d:fb:6e:02:11:94:cb:d1:da:60:69:71:9e:ae:f9:56:
         e6:90:e9:10:16:92:90:a9:6d:c4:e6:05:a4:2f:f7:f6:09:bd:
         79:bb:96:a3:2e:b2:f9:39:a5:2c:7b:61:e0:a2:6b:47:3d:41:
         62:15:b5:ba:0d:15:00:90:18:71:7f:ed:2d:dd:1d:b2:02:57:
         3b:e9:d6:92:09:52:7c:19:a4:42:fe:86:25:05:09:68:a4:63:
         81:98:62:81:ec:ab:0c:a6:2b:2e:53:96:d8:c3:ac:e3:0d:33:
         44:52:32:f5:1c:67:6e:86:22:dd:2c:de:b0:ce:67:ec:0d:1c:
         62:5e:d4:72:27:df:cf:e7:53:15:fa:14:25:3d:40:14:0d:92:
         38:81:6f:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I8cwfXpNEtbCqMYgpfziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2
OTUzMmEwHhcNMjYwNjEzMDQwMDUzWhcNMjYwNjE0MDQwMDUzWjAzMTEwLwYDVQQD
EyhjYTMyZGVkM2I4YzVhNDU1MWQxNjU1ODUyNzMyMzk1MDAyZmUyNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkgV4z8KGOpL/aM6sPHZi6GKZkKa
cMXePffsdpjvHPpgDAnQBEsMjiRkrzXrfwkAv73v3oI4ltNY5zf+sBaJHqg/eCig
/g8Q9PsVxp5szGfcuUR6jQ9OaaWc0IusxPZflJ8E7YMdMroCfOQxIyhJtmYAjO1q
pAWWRjqdvbBmk5oFKLmziFKOqPFHykLH3IIULtRlV0Iv+q8teVU8pkQ1d3M/aaDd
0T9xx32xgOeIV8E7cHv7SQTlmMJuYjRxhusLxrnKOnxmrhWWgo/WgHt/qRe02Ts8
/PIZKd+tW7qZD05otLJsk7G9anmYeJepBGF5JCHEkh0eHLaL7dQbgDblpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoy3tO4xaRVHRZVhScyOVAC/idYMB8GA1UdIwQY
MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt
MmJjMWFlM2RiZGJlLzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl
LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0wPctZjx
baMpd1s0urpdCcqqJxj/0P10GR7tJ5OjTfs76KfkH7CjH5qLgAc1HYV/dRk9ZZMi
NnWjpzOsvHsQtXAeCzzlvI/vAy7egruR1m+r5aM3QLhQHiWoOED5HroYxrq/D9hS
sBvJnaH4xtMd+24CEZTL0dpgaXGervlW5pDpEBaSkKltxOYFpC/39gm9ebuWoy6y
+TmlLHth4KJrRz1BYhW1ug0VAJAYcX/tLd0dsgJXO+nWkglSfBmkQv6GJQUJaKRj
gZhigeyrDKYrLlOW2MOs4w0zRFIy9RxnboYi3SzesM5n7A0cYl7Uciffz+dTFfoU
JT1AFA2SOIFv8A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:24 2026 by rpki-client