Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          bOFkRWw4hPhOX/io4Ew+vYmsWE+vxJsvGfdu/wk07lY=
Subject key identifier:   E9:03:F2:E5:B3:9A:3E:FD:E9:BD:B3:5C:E7:54:8B:6C:70:92:E7:BC
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       019E924B22AFAABC37C4BFB730BB05DD84E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          1966
Signing time:             Thu 04 Jun 2026 11:00:57 +0000
Manifest this update:     Thu 04 Jun 2026 11:00:57 +0000
Manifest next update:     Fri 05 Jun 2026 11:00:57 +0000
Files and hashes:         1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
                          2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
                          3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
                          4: GcjqtR6eaVf9zI7HkXKSnJA3w6w.roa (hash: A4MXiuxUupC9OPHA/5SoE0YyMSrNretsQcoN/Jow0+w=)
                          5: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: AWkwy06oK6AYQTq+dPb5f4QnzzfUatZDuMV+WLA8wcA=)
                          6: fkKkQqSxJp_plv8zmlMuWpt7SKA.roa (hash: Sf+HsASX9t6YQf31Gs6tChY0U3y7nkWEG9+UmtOAYlc=)
                          7: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
                          8: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:4b:22:af:aa:bc:37:c4:bf:b7:30:bb:05:dd:84:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jun  4 11:00:57 2026 GMT
            Not After : Jun  5 11:00:57 2026 GMT
        Subject: CN=e903f2e5b39a3efde9bdb35ce7548b6c7092e7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:3c:e9:c1:42:de:12:f6:46:de:f0:d7:df:
                    e0:6f:ce:81:ff:00:94:e8:ac:eb:8b:81:79:76:20:
                    d3:88:b2:ce:00:af:9b:cb:2b:17:e3:e2:3d:b0:6b:
                    03:d6:8c:d9:42:4a:0d:93:71:6f:31:68:e2:d4:61:
                    1d:dc:f5:2b:b7:39:72:fc:64:b7:e8:e3:f0:dd:d4:
                    3d:9b:f2:d3:e5:8e:41:11:8e:e6:d0:b4:44:e7:e9:
                    71:91:94:65:6f:95:70:b8:ba:86:80:b6:f4:c2:79:
                    e1:5b:25:0a:93:87:d8:52:c3:b8:0b:0e:31:6a:07:
                    a5:98:42:20:d5:ec:a7:ad:24:a3:ba:ce:85:29:6b:
                    f4:47:f7:9c:8f:3d:13:07:fc:8f:39:46:0e:5d:ac:
                    3e:53:93:60:43:d6:69:9d:70:b3:a2:fc:8f:b1:d9:
                    30:cc:70:20:2f:8f:5d:78:80:05:8b:90:fd:56:7f:
                    01:c8:5b:ef:c0:e1:5d:90:5b:7e:31:32:10:7a:25:
                    29:51:be:c5:d3:a7:a1:f3:ac:43:98:80:3c:c0:74:
                    5c:5c:ef:a0:d5:b9:10:27:38:c4:0a:fe:b3:86:06:
                    6b:d6:af:60:80:56:f4:29:af:ed:05:47:c2:c6:0f:
                    2b:1a:ba:dd:89:c0:92:03:22:73:9c:f3:7a:0c:e8:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:03:F2:E5:B3:9A:3E:FD:E9:BD:B3:5C:E7:54:8B:6C:70:92:E7:BC
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:e4:4c:00:2b:ae:8d:12:8b:09:8a:1e:a4:6f:83:7d:a7:
         5f:8e:18:46:d0:28:e7:aa:dd:da:0e:dc:11:b7:07:72:6b:71:
         4a:21:7b:c1:84:0f:b8:e6:d0:67:55:9e:0f:c3:56:7d:01:8c:
         36:dc:f2:08:5c:a5:5f:19:a4:46:2b:2e:e7:e4:8e:dc:16:5e:
         00:34:21:c6:b2:94:86:dc:15:a4:8e:30:b2:e2:d2:d9:9f:df:
         96:d1:da:79:21:0a:63:e7:15:8a:06:c4:27:39:71:68:be:04:
         24:89:1e:a7:06:dc:46:cc:02:3d:07:db:66:19:b0:66:44:c1:
         6b:2b:2c:84:20:95:8a:a0:6b:cc:96:6b:df:4c:ed:20:01:d1:
         aa:17:1f:3e:44:ad:24:73:8e:b4:9c:e4:15:06:95:25:c5:15:
         87:1d:f3:88:49:31:24:18:b8:23:b7:96:2d:40:7f:0c:d1:3e:
         86:f8:af:31:56:b0:bd:91:fc:47:45:7d:02:0b:3f:55:1a:41:
         d3:0c:8d:13:92:2f:85:6a:61:02:4f:dc:90:b3:80:fe:23:d9:
         dd:68:00:ad:96:5c:90:6b:5f:e3:6e:80:33:7b:81:fc:81:1c:
         bf:ac:b7:66:23:1c:7e:f6:5a:df:f0:81:5c:2c:b5:0c:b9:a6:
         5a:7f:b9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6SSyKvqrw3xL+3MLsF3YTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm
ZjQzODAwHhcNMjYwNjA0MTEwMDU3WhcNMjYwNjA1MTEwMDU3WjAzMTEwLwYDVQQD
EyhlOTAzZjJlNWIzOWEzZWZkZTliZGIzNWNlNzU0OGI2YzcwOTJlN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscI86cFC3hL2Rt7w19/gb86B/wCU
6Kzri4F5diDTiLLOAK+byysX4+I9sGsD1ozZQkoNk3FvMWji1GEd3PUrtzly/GS3
6OPw3dQ9m/LT5Y5BEY7m0LRE5+lxkZRlb5VwuLqGgLb0wnnhWyUKk4fYUsO4Cw4x
agelmEIg1eynrSSjus6FKWv0R/ecjz0TB/yPOUYOXaw+U5NgQ9ZpnXCzovyPsdkw
zHAgL49deIAFi5D9Vn8ByFvvwOFdkFt+MTIQeiUpUb7F06eh86xDmIA8wHRcXO+g
1bkQJzjECv6zhgZr1q9ggFb0Ka/tBUfCxg8rGrrdicCSAyJznPN6DOhuuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkD8uWzmj796b2zXOdUi2xwkue8MB8GA1UdIwQY
MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt
MDYzZmNkZDNhMDU3LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3
LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsXkTAAr
ro0SiwmKHqRvg32nX44YRtAo56rd2g7cEbcHcmtxSiF7wYQPuObQZ1WeD8NWfQGM
NtzyCFylXxmkRisu5+SO3BZeADQhxrKUhtwVpI4wsuLS2Z/fltHaeSEKY+cVigbE
JzlxaL4EJIkepwbcRswCPQfbZhmwZkTBaysshCCViqBrzJZr30ztIAHRqhcfPkSt
JHOOtJzkFQaVJcUVhx3ziEkxJBi4I7eWLUB/DNE+hvivMVawvZH8R0V9Ags/VRpB
0wyNE5IvhWphAk/ckLOA/iPZ3WgArZZckGtf426AM3uB/IEcv6y3ZiMcfvZa3/CB
XCy1DLmmWn+5kQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:31:10 2026 by rpki-client