Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File:                     Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier:          MdEKKOrksqSjPgv7MizfHZk42tEXSGzx33W0ogNpOEA=
Subject key identifier:   9C:4E:5E:51:8D:C8:22:E7:86:C2:CC:8B:AD:B5:FA:FC:24:96:BA:94
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer:       /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial:       019EB958A4F4A0FE7892A452EBAD6D50FD43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 01:00:54 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:54 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:54 +0000
Files and hashes:         1: AIp9_RM31K0wW6st5d3M-6Aj0t0.asa (hash: 1ayURs+KBoPQdd0mGltNGGJP12vnONErmbl882xqTKs=)
                          2: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: 28iJqPDtaP5Lez0fGxNcBsKwGcKd1t/hXGNhAfNn6Lk=)
                          3: ZWBJxYdw0yqefP_6w5hTElTjn_w.roa (hash: ka3/3w04e1WBZfQiP+cb8ld/BzE1PNW9ESTV22owMjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:a4:f4:a0:fe:78:92:a4:52:eb:ad:6d:50:fd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
        Validity
            Not Before: Jun 12 01:00:54 2026 GMT
            Not After : Jun 13 01:00:54 2026 GMT
        Subject: CN=9c4e5e518dc822e786c2cc8badb5fafc2496ba94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:5b:72:57:81:41:3b:1b:f6:40:67:9e:1d:
                    5c:ad:5f:e0:82:3a:d0:b2:d2:9c:79:c5:db:45:3b:
                    93:b1:a4:3b:7b:ef:f9:6b:66:b3:bd:a5:56:14:6e:
                    44:4a:3c:6b:17:7d:8f:0a:b9:be:c0:85:fb:44:b7:
                    db:a5:6b:55:0a:12:90:0c:4e:3a:23:52:5b:af:6a:
                    8e:84:40:02:cb:aa:9e:f8:58:84:9c:fb:a7:ca:82:
                    85:64:b4:4b:dc:11:11:98:75:a1:d7:b1:45:30:75:
                    d5:5e:de:dc:a6:fe:82:93:38:fa:b6:4c:04:9d:2d:
                    7f:b9:90:31:01:0a:3f:e1:e0:64:4b:db:50:8a:90:
                    81:a2:b1:43:17:70:c6:5c:87:06:10:4c:9f:dd:1f:
                    c2:1e:c8:69:c5:db:81:26:f4:49:03:77:d4:b3:3d:
                    3a:8e:be:15:e1:90:64:6f:77:7b:b0:80:4f:95:23:
                    62:48:4f:08:b8:a7:2c:98:20:32:33:94:d0:3c:4b:
                    a0:3b:cc:29:3c:ee:d1:04:f8:6b:03:2e:c2:90:72:
                    16:0f:0a:ca:d0:99:2d:23:81:a3:6e:7c:ba:de:e2:
                    42:6f:d8:1b:14:33:51:99:80:88:e9:0a:8b:57:a8:
                    43:99:6a:c3:0a:33:7a:d2:9a:eb:6f:77:b6:3b:a3:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:5E:51:8D:C8:22:E7:86:C2:CC:8B:AD:B5:FA:FC:24:96:BA:94
            X509v3 Authority Key Identifier:
                keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:d6:e0:aa:2a:09:d9:c2:94:77:df:06:a3:0e:86:0e:22:
         b4:77:77:b5:af:6c:53:1c:c5:b0:95:d7:ec:bc:8d:83:e3:74:
         56:98:53:1b:aa:36:6d:4b:30:52:b4:17:48:60:90:d3:b5:36:
         f7:c7:eb:fc:5c:03:a3:82:aa:09:6f:bb:15:48:bd:ba:42:49:
         1f:ee:6c:eb:2e:69:5b:95:33:fc:5b:22:8a:fb:f6:42:3f:58:
         eb:fe:83:4c:72:89:3e:c1:7c:02:87:c6:38:08:b7:dc:46:4e:
         e1:9a:5f:6b:56:e0:32:28:be:4a:38:20:72:e4:41:87:df:fc:
         34:ff:f2:9b:19:c2:d9:95:de:39:65:e3:53:ac:dd:4b:40:c6:
         b4:2c:56:c4:90:53:5f:b5:13:57:13:45:88:a0:f6:bb:a2:c5:
         c4:9e:df:97:e8:85:a1:87:d3:aa:ad:2a:9b:62:fa:3e:bf:e4:
         78:d9:39:5c:ea:a5:26:bf:97:8d:d7:40:fd:4c:58:88:66:ba:
         6e:c5:db:75:71:a2:65:31:2f:aa:ee:a3:4b:de:3c:00:25:87:
         b5:7a:d4:89:38:66:a1:9b:79:48:02:c0:65:c4:49:9b:a7:f7:
         c0:d0:0a:c9:e7:13:a5:4d:3f:80:4e:64:11:f8:5a:e4:b1:7f:
         6b:73:58:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WKT0oP54kqRS661tUP1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk
ODE1NmYwHhcNMjYwNjEyMDEwMDU0WhcNMjYwNjEzMDEwMDU0WjAzMTEwLwYDVQQD
Eyg5YzRlNWU1MThkYzgyMmU3ODZjMmNjOGJhZGI1ZmFmYzI0OTZiYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iNbcleBQTsb9kBnnh1crV/ggjrQ
stKcecXbRTuTsaQ7e+/5a2azvaVWFG5ESjxrF32PCrm+wIX7RLfbpWtVChKQDE46
I1Jbr2qOhEACy6qe+FiEnPunyoKFZLRL3BERmHWh17FFMHXVXt7cpv6Ckzj6tkwE
nS1/uZAxAQo/4eBkS9tQipCBorFDF3DGXIcGEEyf3R/CHshpxduBJvRJA3fUsz06
jr4V4ZBkb3d7sIBPlSNiSE8IuKcsmCAyM5TQPEugO8wpPO7RBPhrAy7CkHIWDwrK
0JktI4Gjbny63uJCb9gbFDNRmYCI6QqLV6hDmWrDCjN60prrb3e2O6NJmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxOXlGNyCLnhsLMi621+vwklrqUMB8GA1UdIwQY
MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt
ZDQ3MmU0OWY1OTFlLzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl
LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfrW4Koq
CdnClHffBqMOhg4itHd3ta9sUxzFsJXX7LyNg+N0VphTG6o2bUswUrQXSGCQ07U2
98fr/FwDo4KqCW+7FUi9ukJJH+5s6y5pW5Uz/Fsiivv2Qj9Y6/6DTHKJPsF8AofG
OAi33EZO4Zpfa1bgMii+SjggcuRBh9/8NP/ymxnC2ZXeOWXjU6zdS0DGtCxWxJBT
X7UTVxNFiKD2u6LFxJ7fl+iFoYfTqq0qm2L6Pr/keNk5XOqlJr+XjddA/UxYiGa6
bsXbdXGiZTEvqu6jS948ACWHtXrUiThmoZt5SALAZcRJm6f3wNAKyecTpU0/gE5k
Efha5LF/a3NYPw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:49:46 2026 by rpki-client