Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
File:                     _QucZp7t9WiEnkSyLUsPABFImts.mft (raw, json)
Hash identifier:          CqW3DBod87fwGyNikNMuWMd+wUT/6xtxyxA3RJjyh6I=
Subject key identifier:   BA:C3:35:80:5C:54:2A:66:0A:1C:D9:46:B3:5E:63:C8:1C:92:75:98
Authority key identifier: FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
Certificate issuer:       /CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Certificate serial:       019F3E6238BF94FC71FEABDA325BCFA9FB22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
Manifest number:          15
Signing time:             Tue 07 Jul 2026 21:00:52 +0000
Manifest this update:     Tue 07 Jul 2026 21:00:52 +0000
Manifest next update:     Wed 08 Jul 2026 21:00:52 +0000
Files and hashes:         1: LefwY8gpcZ-R-tJPrykmBr0pJFk.roa (hash: cf3hQ7ddtb5GAFex4VifyP4EhX3vFqnUNjT44D+CIHQ=)
                          2: QEAgodlhX0q31m_BwmFzK4J6e_I.roa (hash: ifPYPV007NLuqIpdttAdYACWibvcd1/6B9YqJ6XHc+w=)
                          3: _QucZp7t9WiEnkSyLUsPABFImts.crl (hash: pOBLAvb/WnF3jVcGGDufl/QHVDFugDoBrDA7Mtq+eLk=)
                          4: v8b045fqfv6vOCgmZrVMvK97ie4.roa (hash: 2NOScfLaz7B1SjBU8c3qFZzj0fv2grUazeuB2RYFYjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3e:62:38:bf:94:fc:71:fe:ab:da:32:5b:cf:a9:fb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
        Validity
            Not Before: Jul  7 21:00:52 2026 GMT
            Not After : Jul  8 21:00:52 2026 GMT
        Subject: CN=bac335805c542a660a1cd946b35e63c81c927598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:13:47:d4:05:a7:7f:bd:cc:ac:b8:07:43:
                    da:cb:71:ed:cf:e7:0e:b6:a3:5e:a9:c9:a9:92:e9:
                    7f:6f:69:99:11:d9:19:e6:d0:db:83:6b:1d:c5:01:
                    c5:8f:cd:a5:8d:44:75:bf:de:cd:16:9a:8e:a5:c9:
                    3f:2a:22:fc:19:d8:02:c5:f9:b1:8e:e0:f3:9f:a1:
                    d4:8c:af:ef:fa:8a:96:9d:7c:6d:5d:eb:91:35:6a:
                    fe:51:c3:4b:a2:81:5c:0b:36:87:96:05:16:d0:66:
                    35:aa:1d:13:3c:99:30:8e:8d:bd:4e:e9:2c:57:04:
                    7a:67:3f:8d:fe:b4:39:a0:26:7e:bd:51:31:fe:f3:
                    1c:84:82:95:2e:2e:35:a6:fe:17:a3:a6:9a:08:65:
                    91:c4:17:e8:3a:78:89:ab:52:23:fa:67:b6:ad:be:
                    f8:16:f4:a7:8e:ab:70:1f:19:c3:22:cd:55:1b:44:
                    69:0a:3c:cb:a6:e2:47:82:81:51:23:38:80:e8:98:
                    1c:38:1d:7c:d1:e0:02:ed:ea:9d:f4:54:11:41:e0:
                    2b:5f:c8:e4:27:7d:71:9d:73:21:6a:60:f9:33:68:
                    c5:5e:88:2a:f2:16:6a:b2:17:4a:f1:39:ca:ff:61:
                    cc:b3:e4:c1:1e:ae:6c:0d:4b:9b:e5:e6:8d:2a:c1:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C3:35:80:5C:54:2A:66:0A:1C:D9:46:B3:5E:63:C8:1C:92:75:98
            X509v3 Authority Key Identifier:
                keyid:FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:4c:1a:88:a5:d4:58:14:82:30:47:5c:af:5b:41:a6:04:
         14:35:bf:5d:e0:d1:85:43:69:5b:a8:54:f7:e9:94:dd:16:24:
         fb:84:8b:bb:78:e8:48:d6:aa:8a:84:8f:9f:9a:d2:56:9b:b2:
         61:c5:d2:cb:75:e9:78:80:63:76:e1:c5:71:82:01:aa:5e:fb:
         35:60:bc:a2:b9:92:93:4d:d8:a7:ec:4e:5f:c3:14:48:45:c7:
         aa:07:a3:35:c1:23:07:1b:53:bb:41:f4:71:b5:f5:4a:29:76:
         a0:60:01:ab:87:cf:bf:9c:cf:66:c7:53:be:2f:ba:e6:a4:2f:
         12:0e:56:66:46:30:02:4d:6c:e4:52:42:18:f2:7a:c5:94:1e:
         c7:35:f8:3a:b0:92:78:61:21:ac:c2:94:20:05:53:12:c5:47:
         3c:b5:bb:b9:9d:61:4f:5c:25:4b:25:16:7f:4c:8d:5a:1e:59:
         fd:c0:cb:1f:4d:53:86:a2:80:48:2d:2b:33:68:a8:1c:db:06:
         df:6c:d3:38:17:84:9c:49:99:22:2a:a5:a5:04:a3:23:8e:1c:
         15:40:cd:44:bd:ab:3b:37:ee:a4:41:4a:48:3c:9d:af:e2:48:
         44:86:c7:59:0a:3f:8b:6e:3e:4b:7a:31:7b:5a:a2:8f:4b:68:
         48:57:a5:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8+Yji/lPxx/qvaMlvPqfsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGI5YzY2OWVlZGY1Njg4NDllNDRiMjJkNGIwZjAwMTE0
ODlhZGIwHhcNMjYwNzA3MjEwMDUyWhcNMjYwNzA4MjEwMDUyWjAzMTEwLwYDVQQD
EyhiYWMzMzU4MDVjNTQyYTY2MGExY2Q5NDZiMzVlNjNjODFjOTI3NTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuegTR9QFp3+9zKy4B0Pay3Htz+cO
tqNeqcmpkul/b2mZEdkZ5tDbg2sdxQHFj82ljUR1v97NFpqOpck/KiL8GdgCxfmx
juDzn6HUjK/v+oqWnXxtXeuRNWr+UcNLooFcCzaHlgUW0GY1qh0TPJkwjo29Tuks
VwR6Zz+N/rQ5oCZ+vVEx/vMchIKVLi41pv4Xo6aaCGWRxBfoOniJq1Ij+me2rb74
FvSnjqtwHxnDIs1VG0RpCjzLpuJHgoFRIziA6JgcOB180eAC7eqd9FQRQeArX8jk
J31xnXMhamD5M2jFXogq8hZqshdK8TnK/2HMs+TBHq5sDUub5eaNKsFAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrDNYBcVCpmChzZRrNeY8gcknWYMB8GA1UdIwQY
MBaAFP0LnGae7fVohJ5Esi1LDwARSJrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt
ZjYwZDZmNzE4MmExLzEvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx
LzEvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR1MGoil
1FgUgjBHXK9bQaYEFDW/XeDRhUNpW6hU9+mU3RYk+4SLu3joSNaqioSPn5rSVpuy
YcXSy3XpeIBjduHFcYIBql77NWC8ormSk03Yp+xOX8MUSEXHqgejNcEjBxtTu0H0
cbX1Sil2oGABq4fPv5zPZsdTvi+65qQvEg5WZkYwAk1s5FJCGPJ6xZQexzX4OrCS
eGEhrMKUIAVTEsVHPLW7uZ1hT1wlSyUWf0yNWh5Z/cDLH01ThqKASC0rM2ioHNsG
32zTOBeEnEmZIiqlpQSjI44cFUDNRL2rOzfupEFKSDydr+JIRIbHWQo/i24+S3ox
e1qij0toSFelJw==
-----END CERTIFICATE-----
Generated at Tue Jul 7 23:08:08 2026 by rpki-client