Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File:                     diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier:          /5hPH3vlJi1A3hNv9A9UMvVHC7ubSHi5tdC8A2qODJ0=
Subject key identifier:   CB:56:F3:86:09:13:09:FF:9C:E0:27:FC:47:96:68:EC:7E:C2:BE:CE
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer:       /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial:       019EC0DB0A1EDCA07CB6BD7C656CF1B2B404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 12:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:40 +0000
Files and hashes:         1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
                          2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: hvpyAIIqHSvwikRfvmRp7xT7z2DyoAnMuSFTxnq43eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:0a:1e:dc:a0:7c:b6:bd:7c:65:6c:f1:b2:b4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
        Validity
            Not Before: Jun 13 12:00:40 2026 GMT
            Not After : Jun 14 12:00:40 2026 GMT
        Subject: CN=cb56f386091309ff9ce027fc479668ec7ec2bece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:88:ec:cf:c0:96:78:ee:f5:d4:fb:44:2f:
                    7e:85:e0:46:d1:e0:f6:67:f6:2c:14:9b:8a:01:c3:
                    e5:27:46:49:14:f7:9b:0a:1d:8c:a5:e9:14:90:57:
                    22:46:25:6a:1d:a7:17:79:bf:d9:0f:f9:88:b5:b1:
                    0f:81:0f:3d:94:ff:50:76:f4:98:32:71:4d:53:a8:
                    7a:f6:85:89:08:8e:7d:11:a0:4b:0c:c4:0c:47:7f:
                    ee:6e:99:fb:f9:85:1a:d4:e8:0d:d2:6b:cd:37:a8:
                    30:45:c5:cf:1c:19:26:4b:6c:4b:1c:3d:48:0e:ed:
                    1a:bf:32:c7:61:84:4c:19:6e:aa:7c:0b:a0:46:38:
                    54:ff:9c:1a:66:16:06:bd:32:99:9e:00:10:ea:bc:
                    93:e8:bb:68:bc:d6:86:e6:b7:5a:bc:30:9b:66:64:
                    a9:99:07:75:ff:bf:da:82:24:17:c1:8c:a4:c2:c1:
                    d3:b0:02:be:e9:a2:da:d1:32:8f:ef:d1:0c:44:54:
                    c8:ad:65:70:a1:fa:61:cd:28:05:65:00:f8:19:03:
                    a7:e3:13:0e:2e:fc:7b:b7:a1:f9:59:8d:c8:b3:9b:
                    72:e6:67:13:b6:31:bb:5c:9c:6b:d2:3a:cd:ac:2d:
                    58:c9:e4:8c:19:ff:d8:c3:df:e6:15:0e:37:d1:21:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:56:F3:86:09:13:09:FF:9C:E0:27:FC:47:96:68:EC:7E:C2:BE:CE
            X509v3 Authority Key Identifier:
                keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0f:17:4d:a0:99:d1:38:df:8e:2d:db:1d:ba:bd:57:4e:16:
         87:e6:11:bb:f7:0a:1f:f7:a5:18:80:b0:68:02:ac:8d:52:8e:
         39:74:40:c9:e6:41:6e:a1:25:ca:db:13:6b:a3:80:e3:e9:f5:
         70:f6:70:f5:f3:ce:98:05:5f:91:0d:39:52:e3:d6:78:2a:86:
         80:b0:1e:6a:46:02:f2:35:38:5e:ae:b0:6b:e1:47:4d:5d:1e:
         b8:ce:73:f0:ec:91:52:1d:ef:71:a8:7f:ab:7d:32:c1:b0:16:
         58:90:73:e9:6e:32:d4:df:04:e4:df:c9:94:29:8c:ae:31:0a:
         82:df:8b:ea:84:4a:67:7b:71:35:74:6c:1b:30:a0:33:69:a2:
         79:f9:b7:23:f5:e1:2c:17:82:cc:66:7c:fc:a7:ef:8c:54:c3:
         b9:99:26:7d:82:be:6b:90:cd:02:d5:10:46:e9:49:e7:f1:92:
         01:82:32:cb:f0:72:7e:64:0f:d0:8f:7a:95:e9:b6:4a:31:20:
         42:97:51:f6:e7:84:db:13:e7:fb:37:bb:a9:b9:bc:4d:86:96:
         a5:aa:62:04:93:20:cc:a1:e6:45:10:ee:b5:9c:ee:09:ce:0a:
         1e:2b:2f:b8:af:bc:67:1f:8b:03:fc:f5:cc:c9:4e:80:ef:04:
         ea:a6:fe:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2woe3KB8tr18ZWzxsrQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjYzNTk5NDljZWNmMjQxOGM1YTJkYjIxYWNhYjg1ZGQ5
MTkzZDgwHhcNMjYwNjEzMTIwMDQwWhcNMjYwNjE0MTIwMDQwWjAzMTEwLwYDVQQD
EyhjYjU2ZjM4NjA5MTMwOWZmOWNlMDI3ZmM0Nzk2NjhlYzdlYzJiZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpqI7M/Alnju9dT7RC9+heBG0eD2
Z/YsFJuKAcPlJ0ZJFPebCh2MpekUkFciRiVqHacXeb/ZD/mItbEPgQ89lP9QdvSY
MnFNU6h69oWJCI59EaBLDMQMR3/ubpn7+YUa1OgN0mvNN6gwRcXPHBkmS2xLHD1I
Du0avzLHYYRMGW6qfAugRjhU/5waZhYGvTKZngAQ6ryT6LtovNaG5rdavDCbZmSp
mQd1/7/agiQXwYykwsHTsAK+6aLa0TKP79EMRFTIrWVwofphzSgFZQD4GQOn4xMO
Lvx7t6H5WY3Is5ty5mcTtjG7XJxr0jrNrC1YyeSMGf/Yw9/mFQ430SGmfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtW84YJEwn/nOAn/EeWaOx+wr7OMB8GA1UdIwQY
MBaAFHYmNZlJzs8kGMWi2yGsq4XdkZPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMt
YzgwNDA4M2U3ZDQ5LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMtYzgwNDA4M2U3ZDQ5
LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjg8XTaCZ
0Tjfji3bHbq9V04Wh+YRu/cKH/elGICwaAKsjVKOOXRAyeZBbqElytsTa6OA4+n1
cPZw9fPOmAVfkQ05UuPWeCqGgLAeakYC8jU4Xq6wa+FHTV0euM5z8OyRUh3vcah/
q30ywbAWWJBz6W4y1N8E5N/JlCmMrjEKgt+L6oRKZ3txNXRsGzCgM2miefm3I/Xh
LBeCzGZ8/KfvjFTDuZkmfYK+a5DNAtUQRulJ5/GSAYIyy/ByfmQP0I96lem2SjEg
QpdR9ueE2xPn+ze7qbm8TYaWpapiBJMgzKHmRRDutZzuCc4KHisvuK+8Zx+LA/z1
zMlOgO8E6qb+9w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:59 2026 by rpki-client