Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File:                     mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier:          8ccXgH3nesbBGIQ/Ix5hSKLEGI/bAJOOM3MsZ+bJwxk=
Subject key identifier:   C7:F2:DA:08:B4:BD:7F:97:19:F4:53:A3:59:29:D7:09:79:59:35:E2
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer:       /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial:       019E9BF27D9036697F2B129CD7FB952C5BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number:          17D0
Signing time:             Sat 06 Jun 2026 08:00:20 +0000
Manifest this update:     Sat 06 Jun 2026 08:00:20 +0000
Manifest next update:     Sun 07 Jun 2026 08:00:20 +0000
Files and hashes:         1: HMeFeWtw9N7rk3aYVC_VTWXgzMM.roa (hash: iTEJqDydJmTzPI0AxKyGiy/lzp+8Axti0R4ZxzfqlZo=)
                          2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: PC8hxGYz+SZt4OC6soK9OQmJDRQn2Q6wDRbwvEGY0Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:f2:7d:90:36:69:7f:2b:12:9c:d7:fb:95:2c:5b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
        Validity
            Not Before: Jun  6 08:00:20 2026 GMT
            Not After : Jun  7 08:00:20 2026 GMT
        Subject: CN=c7f2da08b4bd7f9719f453a35929d709795935e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:4a:91:25:83:6c:48:08:80:c0:53:b1:07:
                    af:00:ed:cb:e7:6d:ec:95:7e:1d:5e:80:b9:6a:26:
                    6e:ad:ac:b1:ef:46:a0:2b:8c:67:11:16:7a:bb:b0:
                    35:7d:32:5d:7e:c7:9d:39:6f:6c:1f:eb:bf:d6:e3:
                    b4:8d:4f:cc:10:f0:4d:91:7f:16:83:f1:98:e8:48:
                    55:58:05:a6:b3:9a:16:00:b9:bc:69:9f:ed:b9:4b:
                    9d:7d:60:40:09:22:6a:66:83:9b:55:97:35:5d:d2:
                    0d:f9:3a:83:76:0e:64:ef:aa:a4:4a:77:03:a0:84:
                    89:29:c6:eb:7c:c6:e6:4d:9e:e3:51:e9:ac:e0:df:
                    70:47:b7:92:f0:17:49:4b:bc:36:c3:d0:02:91:f1:
                    08:77:85:21:e2:20:61:14:03:a1:ad:b8:0b:d5:a4:
                    89:e0:14:ee:13:2e:eb:82:4d:ee:9c:f2:8b:0d:5f:
                    53:34:2c:ef:0b:2c:e7:ae:85:5e:01:24:3b:1c:92:
                    25:5c:c0:d4:a2:08:76:e9:31:d1:51:cf:e9:6d:c3:
                    5c:85:8c:e5:10:46:ec:09:cb:0f:df:e0:c8:8e:a2:
                    c9:6a:99:ba:a9:7d:73:af:94:14:10:2f:b3:b7:24:
                    99:43:01:0b:72:54:22:5b:f3:e6:36:24:49:64:5b:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F2:DA:08:B4:BD:7F:97:19:F4:53:A3:59:29:D7:09:79:59:35:E2
            X509v3 Authority Key Identifier:
                keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:86:46:87:c2:9d:5d:20:44:3c:f1:89:20:07:7f:dd:90:2c:
         86:c2:c0:98:42:f5:e6:bd:48:77:69:bc:cb:b1:fa:68:55:2e:
         89:39:a2:3c:58:c5:8c:14:37:6d:88:ee:70:0a:97:fa:41:d3:
         bf:ee:82:51:c7:b0:a8:d0:ea:fc:d1:20:ef:dc:dc:2e:28:26:
         66:6a:1d:03:a2:9c:0b:a8:5e:69:db:86:88:1a:a4:c3:6e:7a:
         ad:3c:99:81:24:18:33:fb:fb:ad:0d:23:a8:fb:0f:5b:0d:60:
         4e:a3:ce:c0:d9:8a:d1:dd:14:e9:89:11:6b:84:6c:02:68:f2:
         6a:ea:da:01:52:fd:6c:96:5f:c9:c4:9a:5b:18:d9:77:17:2d:
         a2:f7:54:7c:2e:bb:a0:7b:4d:e3:96:b1:ac:d1:5f:ac:7b:6d:
         39:47:4b:f0:9b:61:50:93:57:ec:74:7e:f9:7a:a7:82:92:17:
         68:bf:1c:7f:2c:c1:3b:97:c8:9d:ee:42:95:a3:54:99:b3:68:
         84:37:8d:67:68:7a:82:5c:97:39:16:42:4e:70:f6:76:3a:7a:
         e5:f5:e2:0c:5e:7a:1b:96:82:8a:0c:d3:2d:7a:15:41:50:90:
         42:dc:75:1d:28:9a:08:ec:1f:21:24:6c:b5:fd:3a:c3:13:24:
         7d:11:7b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6b8n2QNml/KxKc1/uVLFvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk
ZDU2NTgwHhcNMjYwNjA2MDgwMDIwWhcNMjYwNjA3MDgwMDIwWjAzMTEwLwYDVQQD
EyhjN2YyZGEwOGI0YmQ3Zjk3MTlmNDUzYTM1OTI5ZDcwOTc5NTkzNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+9KkSWDbEgIgMBTsQevAO3L523s
lX4dXoC5aiZurayx70agK4xnERZ6u7A1fTJdfsedOW9sH+u/1uO0jU/MEPBNkX8W
g/GY6EhVWAWms5oWALm8aZ/tuUudfWBACSJqZoObVZc1XdIN+TqDdg5k76qkSncD
oISJKcbrfMbmTZ7jUems4N9wR7eS8BdJS7w2w9ACkfEId4Uh4iBhFAOhrbgL1aSJ
4BTuEy7rgk3unPKLDV9TNCzvCyznroVeASQ7HJIlXMDUogh26THRUc/pbcNchYzl
EEbsCcsP3+DIjqLJapm6qX1zr5QUEC+ztySZQwELclQiW/PmNiRJZFvbvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfy2gi0vX+XGfRTo1kp1wl5WTXiMB8GA1UdIwQY
MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt
ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2
LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIZGh8Kd
XSBEPPGJIAd/3ZAshsLAmEL15r1Id2m8y7H6aFUuiTmiPFjFjBQ3bYjucAqX+kHT
v+6CUcewqNDq/NEg79zcLigmZmodA6KcC6headuGiBqkw256rTyZgSQYM/v7rQ0j
qPsPWw1gTqPOwNmK0d0U6YkRa4RsAmjyauraAVL9bJZfycSaWxjZdxctovdUfC67
oHtN45axrNFfrHttOUdL8JthUJNX7HR++XqngpIXaL8cfyzBO5fIne5ClaNUmbNo
hDeNZ2h6glyXORZCTnD2djp65fXiDF56G5aCigzTLXoVQVCQQtx1HSiaCOwfISRs
tf06wxMkfRF79A==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:46:21 2026 by rpki-client