Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File:                     m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier:          pUkIeM5t6CJ/rrT/VFUxHFdjki4RQ9ngOsOl0h5JrhU=
Subject key identifier:   89:11:A3:EF:4B:E0:91:AF:B7:32:32:58:2E:AC:7E:83:EA:BA:45:A2
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer:       /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial:       019EB80FAC8DE1582205A4D67C24F26AFBF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number:          18EA
Signing time:             Thu 11 Jun 2026 19:01:35 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:35 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:35 +0000
Files and hashes:         1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
                          2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: thkF4og9nYKly/5uDzWoe7XOkK5viZYd3M/xmy4gi3U=)
                          3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:ac:8d:e1:58:22:05:a4:d6:7c:24:f2:6a:fb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
        Validity
            Not Before: Jun 11 19:01:35 2026 GMT
            Not After : Jun 12 19:01:35 2026 GMT
        Subject: CN=8911a3ef4be091afb73232582eac7e83eaba45a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:ab:74:7e:f7:23:b5:0a:59:40:2c:98:62:
                    55:8c:20:92:53:fc:10:79:bc:0e:03:18:65:d2:45:
                    17:ad:b1:25:a6:46:84:22:32:2e:43:bc:d8:44:6e:
                    40:37:af:1a:c6:ca:2d:b1:9a:0b:d1:0a:ae:50:c5:
                    26:16:63:53:ec:5d:03:9b:a2:c1:af:22:d9:7b:ff:
                    98:18:57:1e:26:4a:5d:70:97:4e:92:aa:8a:02:ce:
                    a3:07:8d:70:c5:80:09:39:15:4b:d1:74:f2:b0:ec:
                    59:2b:e1:e9:72:b9:e4:ad:a0:92:cb:19:b7:fc:70:
                    fb:f4:d0:4f:ba:31:8e:cc:ad:4e:83:3a:73:16:62:
                    fd:b3:37:1d:40:7f:39:55:b0:62:b2:d9:bc:64:1d:
                    e1:57:86:44:95:51:75:99:c7:00:50:58:2c:e4:15:
                    fa:80:94:6a:81:5d:ed:e2:8d:36:f7:7b:4e:e8:88:
                    ff:04:35:fb:99:f5:63:ea:ab:df:ec:d4:d5:b2:1d:
                    67:3c:5a:06:fa:a2:4f:a0:4d:a3:c9:2b:18:fc:79:
                    60:82:db:d7:4a:51:da:5b:ed:74:00:67:c8:a5:88:
                    77:96:ff:b2:24:72:9f:89:2c:b8:82:ac:4d:8e:eb:
                    84:30:87:62:5d:73:51:48:0b:5c:5b:3d:71:f7:07:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:11:A3:EF:4B:E0:91:AF:B7:32:32:58:2E:AC:7E:83:EA:BA:45:A2
            X509v3 Authority Key Identifier:
                keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:f3:c2:ec:4f:18:3d:03:6a:b6:30:01:b3:48:b0:05:68:5b:
         cc:c4:5e:ed:51:c6:b6:04:18:d9:5b:39:97:c3:e1:83:a1:54:
         38:cd:37:f1:5e:f8:17:63:aa:e3:4d:2b:a2:54:23:89:43:69:
         bf:76:56:48:e7:b0:f2:f6:8c:4d:8d:fa:38:be:10:83:ce:7f:
         fa:15:90:77:2e:e3:5a:15:b5:73:31:80:7c:1b:9f:9d:89:77:
         2c:f6:b5:a5:d1:78:48:ea:9b:ac:0c:2d:29:fc:27:6d:39:03:
         64:34:bd:c2:ac:7f:4c:88:32:3a:d5:d9:6a:8f:5d:83:37:b6:
         ac:86:92:a0:f7:8a:ac:ef:e1:7a:d7:ff:2a:6e:da:26:86:b3:
         41:44:08:42:3d:b3:a4:ee:0d:4d:70:b5:fb:cb:ea:6a:ac:89:
         b6:b2:b7:e5:f9:07:30:a3:cb:d1:c0:e0:9f:2f:f0:15:f2:54:
         79:13:28:43:ee:7d:fd:77:7a:85:20:ba:bd:c3:ac:e4:ff:f4:
         d1:32:93:c0:bb:ba:59:ae:73:c9:08:76:5c:fa:bc:9c:f3:77:
         6e:16:37:66:0e:e2:2d:78:74:0b:cb:02:8a:e0:53:99:07:be:
         5e:37:58:49:b3:a1:66:6c:70:12:1f:d8:fd:aa:6b:8f:b8:97:
         d8:10:c8:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64D6yN4VgiBaTWfCTyavv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTMzN2JkMWE3YzVlZTljNTdhNzNiMGEzM2M2MTIxOWNk
MmE5Y2IwHhcNMjYwNjExMTkwMTM1WhcNMjYwNjEyMTkwMTM1WjAzMTEwLwYDVQQD
Eyg4OTExYTNlZjRiZTA5MWFmYjczMjMyNTgyZWFjN2U4M2VhYmE0NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuCrdH73I7UKWUAsmGJVjCCSU/wQ
ebwOAxhl0kUXrbElpkaEIjIuQ7zYRG5AN68axsotsZoL0QquUMUmFmNT7F0Dm6LB
ryLZe/+YGFceJkpdcJdOkqqKAs6jB41wxYAJORVL0XTysOxZK+HpcrnkraCSyxm3
/HD79NBPujGOzK1OgzpzFmL9szcdQH85VbBistm8ZB3hV4ZElVF1mccAUFgs5BX6
gJRqgV3t4o0293tO6Ij/BDX7mfVj6qvf7NTVsh1nPFoG+qJPoE2jySsY/HlggtvX
SlHaW+10AGfIpYh3lv+yJHKfiSy4gqxNjuuEMIdiXXNRSAtcWz1x9wc0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkRo+9L4JGvtzIyWC6sfoPqukWiMB8GA1UdIwQY
MBaAFJtTN70afF7pxXpzsKM8YSGc0qnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQt
MmVmNzE2NWIyMWI1LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQtMmVmNzE2NWIyMWI1
LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy/PC7E8Y
PQNqtjABs0iwBWhbzMRe7VHGtgQY2Vs5l8Phg6FUOM038V74F2Oq400rolQjiUNp
v3ZWSOew8vaMTY36OL4Qg85/+hWQdy7jWhW1czGAfBufnYl3LPa1pdF4SOqbrAwt
KfwnbTkDZDS9wqx/TIgyOtXZao9dgze2rIaSoPeKrO/hetf/Km7aJoazQUQIQj2z
pO4NTXC1+8vqaqyJtrK35fkHMKPL0cDgny/wFfJUeRMoQ+59/Xd6hSC6vcOs5P/0
0TKTwLu6Wa5zyQh2XPq8nPN3bhY3Zg7iLXh0C8sCiuBTmQe+XjdYSbOhZmxwEh/Y
/aprj7iX2BDIdA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:34 2026 by rpki-client