Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          GRHhcEvHIzxNyvMxz0+l51H1IFywkiwZ1kDg/rsbHI8=
Subject key identifier:   51:A6:36:D4:61:A4:01:E1:8B:32:AE:5C:C1:5D:2F:20:89:18:B9:F7
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       019EBAA2F3A61DD2656C0AD91B2BE1A9CE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          189F
Signing time:             Fri 12 Jun 2026 07:01:41 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:41 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:41 +0000
Files and hashes:         1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: 6M6iIy8N6p4iercPq4ySsyG+a0mP893xDwtKebW49SE=)
                          2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:f3:a6:1d:d2:65:6c:0a:d9:1b:2b:e1:a9:ce:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Jun 12 07:01:41 2026 GMT
            Not After : Jun 13 07:01:41 2026 GMT
        Subject: CN=51a636d461a401e18b32ae5cc15d2f208918b9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:a0:db:59:d5:a0:2d:22:37:2c:e8:c2:1b:
                    65:f7:45:0c:37:f0:fe:bb:03:04:6c:37:57:eb:13:
                    58:cc:80:ac:58:c1:98:d4:c1:3e:72:b8:29:c8:ae:
                    3c:cd:b2:78:be:62:1e:59:82:8c:92:71:a2:d7:bf:
                    35:bf:cd:39:71:05:0f:85:1e:eb:19:dc:62:71:7e:
                    9d:78:b0:77:32:e3:1f:a2:9c:a4:d8:2e:d2:4f:49:
                    13:21:9e:f4:1c:e8:34:a4:96:be:69:1d:eb:d2:d9:
                    27:94:6a:d5:80:64:ea:58:c6:70:a1:bd:a5:58:7d:
                    d5:e9:46:b3:e0:1b:30:5f:ea:13:19:af:d0:e5:a7:
                    c4:59:71:d8:71:f2:ab:7f:3d:e8:a5:b9:f1:cd:63:
                    28:5e:46:0b:55:e8:df:1c:6a:92:31:93:52:e7:70:
                    9d:53:96:f4:5a:d7:c2:3b:16:90:29:61:0e:62:49:
                    91:7b:32:e6:8f:09:eb:e2:07:cd:17:02:cf:00:7a:
                    09:a6:e0:0c:26:9c:f2:6b:8e:55:e6:81:60:72:63:
                    f4:3a:e6:d8:e7:ae:bc:b9:3e:fc:0b:da:af:b0:92:
                    ba:4e:6d:18:cc:ba:75:08:bc:3c:04:51:cb:7c:74:
                    b5:4b:c1:83:47:33:52:82:fd:38:4b:ac:8b:c9:59:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:36:D4:61:A4:01:E1:8B:32:AE:5C:C1:5D:2F:20:89:18:B9:F7
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c2:b5:cb:f2:ca:95:c9:36:c2:70:c1:b8:28:0f:71:39:51:
         ea:4d:6b:fa:cd:8e:26:d3:cb:be:61:77:25:fe:7e:bb:82:95:
         51:02:f8:05:cc:fb:f9:fa:d2:33:38:91:69:6a:60:2f:71:b3:
         3d:6a:13:a9:15:12:f1:a1:34:52:1d:e7:23:ae:b5:80:d6:a2:
         38:ca:4a:cc:84:35:eb:0d:5b:c8:9e:99:40:a5:4c:a5:77:4e:
         d7:79:66:e3:d9:de:af:70:28:2d:99:27:f0:ed:97:b6:7e:07:
         c4:28:a2:4e:ee:7d:8b:22:9c:9e:a6:2b:55:c5:be:da:0d:73:
         d8:5c:7c:38:91:45:29:48:b0:55:8d:7d:e9:a3:b6:e4:13:4e:
         4b:f5:e1:ab:11:24:22:d7:3a:3a:51:45:56:eb:07:e0:04:cd:
         23:ca:7f:e2:ff:01:aa:fc:9c:aa:33:94:25:62:a4:5b:54:1b:
         82:ad:4c:92:a7:e4:08:36:34:50:2d:b8:64:8a:42:64:9a:d2:
         d9:48:a2:12:19:04:1d:2b:b9:74:50:07:28:df:be:21:c3:79:
         33:f0:b9:ac:cf:ef:59:70:1d:1b:ab:19:ca:1b:6e:f6:30:dc:
         58:db:ca:04:5a:38:24:6f:5f:14:f7:69:12:4b:f5:9d:b0:d5:
         7f:c7:cd:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66ovOmHdJlbArZGyvhqc4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTI1OGY1ZTNiNmI5NGUzOTE2ZGQyYjVkMTZlMzQyZmQ2
MDU5NjYwHhcNMjYwNjEyMDcwMTQxWhcNMjYwNjEzMDcwMTQxWjAzMTEwLwYDVQQD
Eyg1MWE2MzZkNDYxYTQwMWUxOGIzMmFlNWNjMTVkMmYyMDg5MThiOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiug21nVoC0iNyzowhtl90UMN/D+
uwMEbDdX6xNYzICsWMGY1ME+crgpyK48zbJ4vmIeWYKMknGi1781v805cQUPhR7r
GdxicX6deLB3MuMfopyk2C7ST0kTIZ70HOg0pJa+aR3r0tknlGrVgGTqWMZwob2l
WH3V6Uaz4BswX+oTGa/Q5afEWXHYcfKrfz3opbnxzWMoXkYLVejfHGqSMZNS53Cd
U5b0WtfCOxaQKWEOYkmRezLmjwnr4gfNFwLPAHoJpuAMJpzya45V5oFgcmP0OubY
5668uT78C9qvsJK6Tm0YzLp1CLw8BFHLfHS1S8GDRzNSgv04S6yLyVnykQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGmNtRhpAHhizKuXMFdLyCJGLn3MB8GA1UdIwQY
MBaAFEYSWPXjtrlOORbdK10W40L9YFlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUt
NTgzYmNlNmZiNTY3LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUtNTgzYmNlNmZiNTY3
LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsK1y/LK
lck2wnDBuCgPcTlR6k1r+s2OJtPLvmF3Jf5+u4KVUQL4Bcz7+frSMziRaWpgL3Gz
PWoTqRUS8aE0Uh3nI661gNaiOMpKzIQ16w1byJ6ZQKVMpXdO13lm49ner3AoLZkn
8O2Xtn4HxCiiTu59iyKcnqYrVcW+2g1z2Fx8OJFFKUiwVY196aO25BNOS/XhqxEk
Itc6OlFFVusH4ATNI8p/4v8BqvycqjOUJWKkW1Qbgq1MkqfkCDY0UC24ZIpCZJrS
2UiiEhkEHSu5dFAHKN++IcN5M/C5rM/vWXAdG6sZyhtu9jDcWNvKBFo4JG9fFPdp
Ekv1nbDVf8fNUg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:06:28 2026 by rpki-client