Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          jB9aG7kZ8GiSFphzGrkIeqHTT1eC96oEyeer5bJwDAI=
Subject key identifier:   5A:03:22:EA:35:1F:27:9F:21:85:A4:15:97:03:A2:43:88:40:00:7D
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019E9B1810FC41CAFF5B5D04EC52F76D41A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1406
Signing time:             Sat 06 Jun 2026 04:01:45 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:45 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:45 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: VVgDu4b8XhdfOBuh9De2WWOTDMT1Ra6gygJY9WZ7Iu4=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:18:10:fc:41:ca:ff:5b:5d:04:ec:52:f7:6d:41:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Jun  6 04:01:45 2026 GMT
            Not After : Jun  7 04:01:45 2026 GMT
        Subject: CN=5a0322ea351f279f2185a4159703a2438840007d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:8e:2d:4c:76:7c:91:6a:9f:d1:6c:90:66:
                    37:80:5b:39:5f:ee:23:b8:d4:23:36:eb:9d:8d:5a:
                    ed:11:ab:7a:8b:1a:81:65:1d:e9:d5:20:9c:9a:4b:
                    35:d3:e5:39:d4:9e:ac:6d:fa:dc:a9:1f:7e:a2:23:
                    43:30:f9:97:ac:20:14:a8:ca:4b:09:44:ce:cf:49:
                    5d:29:fb:a9:e5:56:1b:96:eb:90:f3:fa:87:cc:2e:
                    01:61:d1:43:20:ea:de:2f:70:85:37:fb:41:bc:01:
                    14:c4:97:e0:85:39:1b:83:1c:08:a0:62:a5:f6:35:
                    c2:3f:14:7b:96:62:87:1f:89:9c:15:41:d3:e6:b8:
                    33:b3:9b:b9:fe:99:0e:4a:3c:db:e0:7f:39:e2:4e:
                    17:b1:65:b6:f1:f8:80:10:bd:f8:2e:23:95:27:67:
                    c7:0f:4d:e6:76:a7:e0:e7:b6:c5:67:78:97:fe:03:
                    c2:f9:7b:b8:08:3b:c6:fa:6c:35:c2:b8:e0:06:8c:
                    81:f7:46:05:78:74:cd:80:13:d9:96:98:c5:e5:3d:
                    2b:20:a3:c6:e9:d5:4c:4b:b3:c6:4f:07:e0:5b:19:
                    0e:57:6b:03:85:24:9c:1c:00:fa:83:73:e6:7c:a2:
                    fd:de:74:ef:87:67:cc:7a:66:6b:b3:f2:e4:d9:62:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:03:22:EA:35:1F:27:9F:21:85:A4:15:97:03:A2:43:88:40:00:7D
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bc:07:ab:9e:30:ce:39:03:11:d0:c6:ae:93:dc:7f:11:cc:
         7c:03:44:1e:4b:97:95:dc:2d:d8:85:25:19:f1:16:fb:a3:b4:
         88:56:c2:da:93:0d:93:24:4d:e6:56:2b:64:7a:1d:6f:29:28:
         84:56:05:a4:7e:45:ac:f6:33:da:9d:c4:14:6a:df:db:7e:c0:
         69:44:51:0d:a3:67:8c:13:a4:ae:4c:27:dc:7a:c8:16:30:01:
         68:d8:f7:e7:9f:5c:27:81:8d:83:cf:44:28:9a:a5:fa:a7:1f:
         3d:bd:ea:0c:77:96:19:72:d9:84:f3:c3:59:4e:c3:22:89:37:
         fc:2f:3b:3c:4b:87:be:65:d3:48:62:49:1d:7e:52:12:40:91:
         db:bd:4e:09:e6:f6:59:60:a7:d9:72:74:5d:a5:84:f7:0c:a7:
         a4:ec:4a:b3:3d:4d:9d:09:1f:ba:09:b2:cb:29:63:37:83:d4:
         89:d7:11:32:d3:3f:0d:8a:ed:9f:e5:7f:db:21:57:14:1c:97:
         8f:b9:04:af:71:6e:4e:2a:1b:4f:ec:2f:c8:77:a4:fe:c2:27:
         ab:ac:b3:d2:0c:d8:ea:f3:99:06:91:36:26:e2:e1:6f:cb:ee:
         b2:e4:e4:73:d1:dd:99:21:35:20:ca:fb:f8:98:40:ab:ae:c7:
         06:21:7f:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bGBD8Qcr/W10E7FL3bUGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGQzZmIwNDRlYjFjMGExMWJlMDYwMmFjZWVmODhlNWY1
ZDJkZGYwHhcNMjYwNjA2MDQwMTQ1WhcNMjYwNjA3MDQwMTQ1WjAzMTEwLwYDVQQD
Eyg1YTAzMjJlYTM1MWYyNzlmMjE4NWE0MTU5NzAzYTI0Mzg4NDAwMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1guOLUx2fJFqn9FskGY3gFs5X+4j
uNQjNuudjVrtEat6ixqBZR3p1SCcmks10+U51J6sbfrcqR9+oiNDMPmXrCAUqMpL
CUTOz0ldKfup5VYbluuQ8/qHzC4BYdFDIOreL3CFN/tBvAEUxJfghTkbgxwIoGKl
9jXCPxR7lmKHH4mcFUHT5rgzs5u5/pkOSjzb4H854k4XsWW28fiAEL34LiOVJ2fH
D03mdqfg57bFZ3iX/gPC+Xu4CDvG+mw1wrjgBoyB90YFeHTNgBPZlpjF5T0rIKPG
6dVMS7PGTwfgWxkOV2sDhSScHAD6g3PmfKL93nTvh2fMemZrs/Lk2WLIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoDIuo1HyefIYWkFZcDokOIQAB9MB8GA1UdIwQY
MBaAFDxNP7BE6xwKEb4GAqzu+I5fXS3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEt
YjE4NGUzZjRiNTBlLzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEtYjE4NGUzZjRiNTBl
LzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbwHq54w
zjkDEdDGrpPcfxHMfANEHkuXldwt2IUlGfEW+6O0iFbC2pMNkyRN5lYrZHodbyko
hFYFpH5FrPYz2p3EFGrf237AaURRDaNnjBOkrkwn3HrIFjABaNj3559cJ4GNg89E
KJql+qcfPb3qDHeWGXLZhPPDWU7DIok3/C87PEuHvmXTSGJJHX5SEkCR271OCeb2
WWCn2XJ0XaWE9wynpOxKsz1NnQkfugmyyyljN4PUidcRMtM/DYrtn+V/2yFXFByX
j7kEr3FuTiobT+wvyHek/sInq6yz0gzY6vOZBpE2JuLhb8vusuTkc9HdmSE1IMr7
+JhAq67HBiF/5g==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:25 2026 by rpki-client