Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          2PVN+00ZVWHQ63aP8wWbjcGAg+qUePnqRJF8Q6mGYaA=
Subject key identifier:   72:D5:D7:81:86:50:E4:CA:18:CB:76:CE:C3:0E:D8:56:19:E5:53:9B
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       019EB50DED21FDA4426E6417CA8BFDEA90EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          195A
Signing time:             Thu 11 Jun 2026 05:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 05:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 05:00:49 +0000
Files and hashes:         1: Ds_F00ohq3nXWLzRmi9aEPr67nU.roa (hash: 1EvXZP4sj8Rg0yDZm/YIiaxWg+BbA76mSJSuIRiuH9c=)
                          2: P12XKmajnQzt4TT10Louk6Kjyco.roa (hash: KqnQ+RYQfRbLN2Brq+Uz+gVyYb0l27obpG7KQSdsmEk=)
                          3: fePx0kRYwwPcb_zt9-rrwAjmN1w.roa (hash: 4KZtW3GQm6K/quUvrFVgvmKhOxzcCLWTN+/j8SN4EQI=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: dLty5+jO3uVoF5D1ZynMr1dFh1MSDitEg0hDtaQoYPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:0d:ed:21:fd:a4:42:6e:64:17:ca:8b:fd:ea:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Jun 11 05:00:49 2026 GMT
            Not After : Jun 12 05:00:49 2026 GMT
        Subject: CN=72d5d7818650e4ca18cb76cec30ed85619e5539b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:20:49:3a:8e:74:6d:ed:7b:52:47:18:d5:
                    6a:a6:55:8d:19:d5:65:ac:28:54:1c:d6:ab:f3:ea:
                    23:2c:94:1a:58:e1:d5:c7:de:3f:82:89:3d:40:03:
                    c7:3a:50:8c:3d:a9:d8:32:06:46:f1:0f:5f:7b:32:
                    c4:23:14:a0:e1:a0:55:6b:49:c7:ff:a9:71:61:19:
                    5c:61:fb:42:e5:30:92:6d:69:9b:6c:2f:7f:cb:a1:
                    94:8d:62:18:1b:21:3e:72:02:f6:25:d7:54:d6:72:
                    c8:4f:74:75:e0:89:40:d1:ec:3a:f6:7e:29:f5:7f:
                    88:07:db:55:9b:8b:aa:cc:b3:c5:5b:99:b6:17:08:
                    3b:2a:be:36:41:08:49:9e:9d:2c:72:e1:32:c6:e4:
                    58:05:68:91:7d:b6:c2:53:18:91:15:3f:5c:f8:41:
                    ea:94:5d:82:6b:95:f5:60:1f:54:84:fd:71:74:aa:
                    88:19:ea:b2:74:c9:33:1c:cf:74:bb:8b:09:5e:ca:
                    ca:ed:f2:fb:6d:14:f6:e5:f1:68:50:40:e3:f1:da:
                    c8:56:5f:96:35:12:99:91:df:9e:d0:bd:5c:f9:39:
                    b5:35:1c:5c:25:a6:f6:ad:fe:a3:ab:4a:39:dd:78:
                    e9:eb:d9:15:97:e6:e9:24:40:5f:1b:68:31:28:87:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D5:D7:81:86:50:E4:CA:18:CB:76:CE:C3:0E:D8:56:19:E5:53:9B
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:60:2e:3f:c0:b3:a9:e3:43:45:f8:78:d9:25:91:74:80:a1:
         0b:e8:37:3d:1c:2a:92:db:11:94:cb:19:a9:b8:d1:9f:04:eb:
         bf:2f:19:86:5a:bc:c7:c9:bd:0c:59:2e:38:3f:d5:da:1d:d9:
         07:9e:64:ce:7b:3c:2c:01:b1:e1:09:af:4d:84:cc:d4:ab:52:
         53:15:4f:0d:bb:bd:42:3e:4b:f1:e5:84:d7:b6:ea:c3:af:ff:
         2a:50:6f:32:58:3d:ea:3f:66:84:4e:5f:94:35:ee:d8:8c:7f:
         3a:b9:28:15:2b:58:f1:94:f5:34:62:8e:bf:fa:c2:c5:85:e7:
         0a:15:50:cc:e8:04:1c:fd:ee:95:62:c2:8b:25:75:c3:43:15:
         ad:e1:b0:e2:33:00:9c:8c:3c:17:ac:e4:0c:d2:30:30:74:f0:
         fa:90:32:09:ac:14:8f:d1:63:41:cd:bf:23:34:92:b8:a2:85:
         57:34:e7:b3:a5:b4:58:1c:d0:b1:50:39:0a:c1:a0:e7:0f:36:
         63:05:df:d9:eb:0f:b1:2e:82:eb:c7:de:d5:d7:27:0d:04:b4:
         f2:2e:82:cc:22:50:8c:8d:ab:e0:74:b7:e0:31:c4:69:54:8f:
         dc:96:07:e4:4f:88:8a:0d:66:e9:5d:36:d2:09:1c:d3:e1:a3:
         0e:9f:1e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ61De0h/aRCbmQXyov96pDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjBkNTM1ZWViY2YyOGU2MGFjOThhZTQ5NWIzNDk4MWI1
YTkzZWMwHhcNMjYwNjExMDUwMDQ5WhcNMjYwNjEyMDUwMDQ5WjAzMTEwLwYDVQQD
Eyg3MmQ1ZDc4MTg2NTBlNGNhMThjYjc2Y2VjMzBlZDg1NjE5ZTU1MzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrggSTqOdG3te1JHGNVqplWNGdVl
rChUHNar8+ojLJQaWOHVx94/gok9QAPHOlCMPanYMgZG8Q9fezLEIxSg4aBVa0nH
/6lxYRlcYftC5TCSbWmbbC9/y6GUjWIYGyE+cgL2JddU1nLIT3R14IlA0ew69n4p
9X+IB9tVm4uqzLPFW5m2Fwg7Kr42QQhJnp0scuEyxuRYBWiRfbbCUxiRFT9c+EHq
lF2Ca5X1YB9UhP1xdKqIGeqydMkzHM90u4sJXsrK7fL7bRT25fFoUEDj8drIVl+W
NRKZkd+e0L1c+Tm1NRxcJab2rf6jq0o53Xjp69kVl+bpJEBfG2gxKIfXrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLV14GGUOTKGMt2zsMO2FYZ5VObMB8GA1UdIwQY
MBaAFMOw1TXuvPKOYKyYrklbNJgbWpPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdEVk5lNjg4bzVnckppdVNWczBtQnRhay13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NTFlOTItOTkyZC00MWRhLTk4NmIt
OTUxOTY5M2VhYTdiLzEvdzdEVk5lNjg4bzVnckppdVNWczBtQnRhay13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81NTFlOTItOTkyZC00MWRhLTk4NmItOTUxOTY5M2VhYTdi
LzEvdzdEVk5lNjg4bzVnckppdVNWczBtQnRhay13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGAuP8Cz
qeNDRfh42SWRdIChC+g3PRwqktsRlMsZqbjRnwTrvy8Zhlq8x8m9DFkuOD/V2h3Z
B55kzns8LAGx4QmvTYTM1KtSUxVPDbu9Qj5L8eWE17bqw6//KlBvMlg96j9mhE5f
lDXu2Ix/OrkoFStY8ZT1NGKOv/rCxYXnChVQzOgEHP3ulWLCiyV1w0MVreGw4jMA
nIw8F6zkDNIwMHTw+pAyCawUj9FjQc2/IzSSuKKFVzTns6W0WBzQsVA5CsGg5w82
YwXf2esPsS6C68fe1dcnDQS08i6CzCJQjI2r4HS34DHEaVSP3JYH5E+Iig1m6V02
0gkc0+GjDp8emA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 13:07:46 2026 by rpki-client