Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          rut2BiaURYJd2fZ7tmZrJvo8q66xSup/sJ5DrTh7Zuc=
Subject key identifier:   56:27:65:7D:A1:24:29:E9:07:DA:AB:01:1E:07:4B:3E:D1:88:03:74
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019EF37FFC6B093DC761CFEF9354289C3728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0F84
Signing time:             Tue 23 Jun 2026 08:01:51 +0000
Manifest this update:     Tue 23 Jun 2026 08:01:51 +0000
Manifest next update:     Wed 24 Jun 2026 08:01:51 +0000
Files and hashes:         1: 0QR437_yNuwd46JSd_IiWmhwYow.roa (hash: 6GDXre6adrsJyqw14UC9mtlOqvJoPEYUbHv7Lqn+43k=)
                          2: 2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa (hash: oY8xJamfMnGEV8NndDLYA4TQsbfWIC33a4tru6ptivk=)
                          3: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: iDXZ6ZzOuik3dccoFPvbYe9JpMgIZPhVMf5TNc7j45U=)
                          4: wwh70_fWojYStsjUuAC2NCdOguo.roa (hash: FHvLtN1EizK8sBcMqm1u4JO0yb8K5X+r6eZldZxIZo8=)
                          5: ydQtvb3bvjFb-2ukCgShBr4iJ7o.roa (hash: D1atPq/SoJlgXADbklDBQIhta1tm984jYa7MmKBjm1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Jun 2026 05:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f3:7f:fc:6b:09:3d:c7:61:cf:ef:93:54:28:9c:37:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Jun 23 08:01:51 2026 GMT
            Not After : Jun 24 08:01:51 2026 GMT
        Subject: CN=5627657da12429e907daab011e074b3ed1880374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:e2:61:94:b3:c7:a2:7b:65:35:1e:fb:44:
                    ee:3b:c0:46:1f:a9:63:a3:93:7c:34:cb:bb:9b:7b:
                    ed:13:85:45:74:b0:78:6b:d2:31:a8:13:b0:db:82:
                    9e:09:fe:a3:3c:4a:8c:b5:c0:2a:a6:5c:cc:6f:39:
                    1e:ce:2d:fa:d3:ec:b1:ec:8a:ea:96:c4:fc:51:0c:
                    6b:b8:17:b4:5c:dd:e1:11:12:da:2f:6e:bd:3a:b8:
                    c7:43:65:1e:d9:ce:88:8d:df:60:73:38:9c:49:a5:
                    06:d0:2f:28:35:6f:12:53:1a:a2:21:41:ed:5a:2c:
                    12:f0:dc:d2:d8:c3:ef:ae:4e:94:8b:46:79:d7:f8:
                    df:47:86:00:e6:92:e2:8c:72:5a:fd:c0:98:31:ec:
                    84:c9:5b:75:52:d3:63:05:7d:6d:2e:5b:c1:13:ed:
                    ee:23:c3:41:13:f2:cf:7a:97:a3:85:1a:01:5a:6b:
                    3c:15:e3:32:c6:4a:cf:de:de:39:18:13:dd:a9:df:
                    67:4d:c0:c7:4a:a5:2c:2b:de:3e:a4:e6:46:d7:cc:
                    76:05:54:0b:a5:f2:36:b7:b4:ef:9b:bc:bf:a8:0e:
                    1b:1f:b0:9f:74:66:de:e1:96:b9:a6:46:b8:76:b1:
                    af:d8:06:5e:a7:5c:7e:9c:6b:f3:ad:9f:f8:26:46:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:65:7D:A1:24:29:E9:07:DA:AB:01:1E:07:4B:3E:D1:88:03:74
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6d:ed:c5:bd:1a:f6:f6:2f:9f:d1:82:fb:7e:d0:1b:0a:51:
         25:ad:8c:89:50:8a:05:31:24:1d:6e:fb:65:62:f2:2d:0a:9f:
         44:17:3c:e4:86:ac:28:0b:fb:97:d7:f3:71:ae:fd:41:50:ed:
         29:b8:28:64:62:00:12:74:a5:64:61:dd:cf:0f:93:af:2b:b9:
         d1:cc:fc:a1:7f:11:b6:6f:a9:89:01:6d:55:aa:4e:b5:da:45:
         9a:39:4f:ed:3c:d9:9e:22:7f:5c:54:5b:c5:d3:dd:1e:a3:d4:
         1d:98:1b:54:a9:d7:75:6d:bc:bc:03:c1:d4:da:46:ba:6d:51:
         6d:71:b0:4f:39:8b:df:05:f5:16:fb:b9:0b:cb:c0:2a:e7:87:
         bb:e3:59:fc:7a:2a:32:b3:d8:f6:83:64:80:7c:eb:48:72:0d:
         ee:b8:66:81:e0:f7:d4:69:c9:2f:72:b0:59:d9:58:cf:bd:05:
         ba:03:5e:54:f3:fb:e0:4b:d8:57:08:97:29:cd:61:a6:52:86:
         9d:72:04:79:bb:62:a2:01:63:81:f3:d4:84:48:ff:f1:0b:be:
         48:7c:b9:54:dc:b9:43:e6:d3:8f:1c:97:df:6d:b7:5d:f3:fc:
         d7:23:a6:92:97:5c:b3:f1:7b:b2:e5:65:7e:76:38:7a:56:fd:
         97:55:75:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7zf/xrCT3HYc/vk1QonDcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2Q1MmE2YTdmOTU3MTcxYjE1ZjdiZTVlMjA5MTY0Mjgz
Njk0MDEwHhcNMjYwNjIzMDgwMTUxWhcNMjYwNjI0MDgwMTUxWjAzMTEwLwYDVQQD
Eyg1NjI3NjU3ZGExMjQyOWU5MDdkYWFiMDExZTA3NGIzZWQxODgwMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2HiYZSzx6J7ZTUe+0TuO8BGH6lj
o5N8NMu7m3vtE4VFdLB4a9IxqBOw24KeCf6jPEqMtcAqplzMbzkezi360+yx7Irq
lsT8UQxruBe0XN3hERLaL269OrjHQ2Ue2c6Ijd9gczicSaUG0C8oNW8SUxqiIUHt
WiwS8NzS2MPvrk6Ui0Z51/jfR4YA5pLijHJa/cCYMeyEyVt1UtNjBX1tLlvBE+3u
I8NBE/LPepejhRoBWms8FeMyxkrP3t45GBPdqd9nTcDHSqUsK94+pOZG18x2BVQL
pfI2t7Tvm7y/qA4bH7CfdGbe4Za5pka4drGv2AZep1x+nGvzrZ/4JkbLIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYnZX2hJCnpB9qrAR4HSz7RiAN0MB8GA1UdIwQY
MBaAFLzNUqan+VcXGxX3vl4gkWQoNpQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUt
ZTgyM2UxN2JiNWNjLzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUtZTgyM2UxN2JiNWNj
LzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHW3txb0a
9vYvn9GC+37QGwpRJa2MiVCKBTEkHW77ZWLyLQqfRBc85IasKAv7l9fzca79QVDt
KbgoZGIAEnSlZGHdzw+Tryu50cz8oX8Rtm+piQFtVapOtdpFmjlP7TzZniJ/XFRb
xdPdHqPUHZgbVKnXdW28vAPB1NpGum1RbXGwTzmL3wX1Fvu5C8vAKueHu+NZ/Hoq
MrPY9oNkgHzrSHIN7rhmgeD31GnJL3KwWdlYz70FugNeVPP74EvYVwiXKc1hplKG
nXIEebtiogFjgfPUhEj/8Qu+SHy5VNy5Q+bTjxyX3223XfP81yOmkpdcs/F7suVl
fnY4elb9l1V19w==
-----END CERTIFICATE-----
Generated at Tue Jun 23 11:52:21 2026 by rpki-client