Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File:                     r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier:          VpeQGm6cgUgoWzqMalA97XMQtciHIyY4M9IPQa3shRU=
Subject key identifier:   B5:FC:A0:66:E1:28:DA:DE:D6:39:E0:68:7E:90:D2:8D:BA:E3:A9:74
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer:       /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial:       019F189EC2955A8A72AAB88049AD3F473FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number:          0DF4
Signing time:             Tue 30 Jun 2026 13:01:25 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:25 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:25 +0000
Files and hashes:         1: niXIs67HnTRfFLGC1HZAY3uj8cU.roa (hash: wwuo2W8ON5QM/uq0sqdrnWPPJasVC2ONRBN1iw5lrCg=)
                          2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: +Rz7Qjpzc440ml7wlDVrwVDLzMfdY5gWQxhROpg0DSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:c2:95:5a:8a:72:aa:b8:80:49:ad:3f:47:3f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
        Validity
            Not Before: Jun 30 13:01:25 2026 GMT
            Not After : Jul  1 13:01:25 2026 GMT
        Subject: CN=b5fca066e128daded639e0687e90d28dbae3a974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:8c:9e:aa:87:00:e9:19:b6:cd:2a:fc:f0:
                    0c:00:7d:28:a6:99:a8:b0:aa:c3:6b:cc:8f:61:c5:
                    41:f4:26:76:90:41:34:46:2d:77:d0:09:bf:d0:de:
                    2d:f3:19:45:5a:3f:56:bb:9e:06:d4:e8:3d:98:e4:
                    db:77:11:64:10:51:9a:7f:8c:8f:eb:ec:64:a6:b6:
                    4a:24:65:2b:37:41:9b:58:be:fa:b9:ff:82:e3:c8:
                    46:da:9e:00:4d:95:fc:e4:0e:81:d6:a4:8e:b5:7f:
                    07:76:cf:4d:5d:37:ab:1d:80:3f:00:29:27:70:13:
                    b3:9f:6b:63:c5:41:58:bd:c7:3f:91:e6:12:1a:4f:
                    e1:93:43:74:6d:72:9e:be:38:29:77:c4:b3:01:7b:
                    d5:76:79:e8:a1:b5:b6:35:43:41:90:4c:ae:3f:e2:
                    a5:b2:7e:9e:a8:dc:5f:33:ce:11:bd:32:a2:4a:e2:
                    e8:87:61:0d:09:3f:af:ad:24:b5:d0:09:21:9f:5a:
                    da:6b:44:79:45:8a:c8:5b:96:de:9f:9e:75:81:f9:
                    ce:b0:1d:cf:fc:61:f4:17:3a:e8:50:49:5e:c7:12:
                    ce:7b:7f:96:7c:74:1b:d2:05:0a:3e:47:b5:c4:33:
                    3b:fa:ba:8e:02:11:89:d7:7d:66:f0:5c:bb:97:11:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FC:A0:66:E1:28:DA:DE:D6:39:E0:68:7E:90:D2:8D:BA:E3:A9:74
            X509v3 Authority Key Identifier:
                keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e1:3f:97:62:f9:de:9f:c0:78:0c:4b:b6:4e:56:ef:ae:47:
         83:fa:43:ff:0e:1d:7a:21:53:15:8f:3d:a2:c2:24:e3:d2:60:
         d5:e8:8c:ba:4c:65:08:31:99:9b:0d:4e:b2:0d:f0:98:68:47:
         7c:ec:ee:e3:1f:c1:8e:d0:17:24:e0:4d:a4:9e:52:35:3d:66:
         e0:05:1b:50:66:66:8f:43:fd:65:f2:06:2e:b2:f3:78:65:8d:
         7a:fc:93:17:06:95:f5:8d:55:3f:98:d2:a4:c4:b1:87:ca:02:
         ed:9c:9f:8f:fe:dc:be:26:0d:ea:29:fd:37:57:a4:e7:88:79:
         26:ff:d6:7a:bf:c2:b3:a2:15:2b:93:25:02:a2:44:fc:b9:69:
         a3:b2:3a:a8:43:28:b0:f9:95:be:26:7f:be:90:69:07:fd:2b:
         c3:53:a8:db:79:4b:ae:94:98:f2:82:20:0a:fc:2d:97:5b:ab:
         d7:ca:c4:f6:31:64:fe:65:09:1b:5f:c4:ca:e2:ca:a3:06:d4:
         84:7e:ef:8d:e3:af:9f:1c:09:b4:05:e9:2f:4f:c7:6d:7a:4f:
         7e:f4:4f:6e:2a:af:b6:f4:4f:f7:8a:0b:68:7a:9e:c1:bf:cd:
         7f:c9:5c:a3:71:2d:21:c2:a8:29:ab:3d:57:0e:0e:ac:56:07:
         5f:ef:54:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnsKVWopyqriASa0/Rz+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTMxMDI1MTFlNjYwMjYzZjhlZjZlNGMxZjlhYjMyMzkz
ODM5YjIwHhcNMjYwNjMwMTMwMTI1WhcNMjYwNzAxMTMwMTI1WjAzMTEwLwYDVQQD
EyhiNWZjYTA2NmUxMjhkYWRlZDYzOWUwNjg3ZTkwZDI4ZGJhZTNhOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwKMnqqHAOkZts0q/PAMAH0oppmo
sKrDa8yPYcVB9CZ2kEE0Ri130Am/0N4t8xlFWj9Wu54G1Og9mOTbdxFkEFGaf4yP
6+xkprZKJGUrN0GbWL76uf+C48hG2p4ATZX85A6B1qSOtX8Hds9NXTerHYA/ACkn
cBOzn2tjxUFYvcc/keYSGk/hk0N0bXKevjgpd8SzAXvVdnnoobW2NUNBkEyuP+Kl
sn6eqNxfM84RvTKiSuLoh2ENCT+vrSS10Akhn1raa0R5RYrIW5ben551gfnOsB3P
/GH0FzroUElexxLOe3+WfHQb0gUKPke1xDM7+rqOAhGJ131m8Fy7lxF66QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX8oGbhKNre1jngaH6Q0o2646l0MB8GA1UdIwQY
MBaAFK+TECUR5mAmP4725MH5qzI5ODmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDkt
YTk1ZmUzMTAyNjQ1LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDktYTk1ZmUzMTAyNjQ1
LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuE/l2L5
3p/AeAxLtk5W765Hg/pD/w4deiFTFY89osIk49Jg1eiMukxlCDGZmw1Osg3wmGhH
fOzu4x/BjtAXJOBNpJ5SNT1m4AUbUGZmj0P9ZfIGLrLzeGWNevyTFwaV9Y1VP5jS
pMSxh8oC7Zyfj/7cviYN6in9N1ek54h5Jv/Wer/Cs6IVK5MlAqJE/Llpo7I6qEMo
sPmVviZ/vpBpB/0rw1Oo23lLrpSY8oIgCvwtl1ur18rE9jFk/mUJG1/EyuLKowbU
hH7vjeOvnxwJtAXpL0/HbXpPfvRPbiqvtvRP94oLaHqewb/Nf8lco3EtIcKoKas9
Vw4OrFYHX+9UGg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:20:58 2026 by rpki-client