Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          B4VFYcV5A/pmx6J94zh4gj4DZrI9G+EKgcn185/sCL0=
Subject key identifier:   65:68:F2:7F:B9:52:C1:33:D9:41:52:E8:D9:47:71:62:C6:E7:74:48
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019E9883E82E0F1D8AD3E057BED8D23EEAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          194A
Signing time:             Fri 05 Jun 2026 16:00:41 +0000
Manifest this update:     Fri 05 Jun 2026 16:00:41 +0000
Manifest next update:     Sat 06 Jun 2026 16:00:41 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: IB1tRqVq4qUMqahNV7MiNe3/hCBi/R13oqCdFL7171s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:98:83:e8:2e:0f:1d:8a:d3:e0:57:be:d8:d2:3e:ea:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Jun  5 16:00:41 2026 GMT
            Not After : Jun  6 16:00:41 2026 GMT
        Subject: CN=6568f27fb952c133d94152e8d9477162c6e77448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:b5:25:b5:fd:b9:e7:2e:a6:b4:f2:60:e0:
                    ca:8f:35:31:6b:f2:76:55:aa:e4:61:4e:87:91:60:
                    45:d9:d6:93:30:fb:e5:16:a5:5d:e3:5e:93:dd:64:
                    57:65:58:7f:1e:24:30:28:62:73:2a:70:f3:75:a5:
                    f1:b7:7c:7a:38:91:2f:a4:a0:f3:f2:f7:e4:3b:d8:
                    09:c4:87:39:74:ba:d3:f7:78:8a:eb:a2:b9:31:76:
                    f5:cf:56:29:f8:77:12:c1:6b:66:8c:e0:5d:70:37:
                    6c:86:5c:f1:99:9d:40:b6:28:19:03:57:ca:45:86:
                    b0:df:5a:85:06:2f:9f:e9:3f:4e:e8:80:bc:30:e2:
                    67:96:22:a7:29:18:3e:94:20:dd:c7:5c:0a:3e:9e:
                    37:3d:89:2a:a5:6d:56:29:d4:2e:02:56:6a:e3:90:
                    83:c5:b4:ae:25:85:86:ec:c6:93:85:dc:ce:c4:a8:
                    6d:07:69:36:b8:07:bf:6a:32:8c:ca:03:d7:2c:88:
                    e2:2e:2e:c1:61:f1:c8:da:30:13:38:d8:cb:b6:42:
                    08:fa:1c:c2:58:f4:46:ae:6f:ed:b4:46:ad:76:20:
                    97:7c:53:91:36:88:15:b6:6c:fa:8c:df:4c:35:00:
                    71:00:03:73:b3:37:c2:5e:ef:78:e4:be:f8:63:7c:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:F2:7F:B9:52:C1:33:D9:41:52:E8:D9:47:71:62:C6:E7:74:48
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:47:49:78:14:7f:54:29:61:2c:f3:41:89:34:80:19:c3:e0:
         1d:12:86:f3:96:d9:92:cd:cd:38:da:86:b4:42:e4:eb:13:28:
         06:2b:44:ca:b8:af:0b:f1:44:52:95:4d:9b:3c:37:e5:d3:e1:
         7d:eb:67:b7:24:65:1e:6c:87:e2:9b:7a:ea:5b:4c:8d:90:2e:
         88:31:00:dd:c8:b4:0e:55:31:15:87:de:a0:2c:95:a4:49:08:
         e2:8e:4b:36:7e:91:73:02:3f:8b:29:07:f4:cc:c1:03:70:ee:
         89:38:04:bc:43:f0:61:f0:f8:0a:3a:a0:1d:73:14:14:32:44:
         70:29:b0:78:f1:b7:78:4e:7d:ad:30:89:d8:22:d4:e2:33:6c:
         42:e8:59:26:96:58:d1:d4:0a:a6:ef:52:4b:e4:c7:0f:4d:59:
         b2:f3:34:c9:65:c1:5e:69:5f:9a:63:0b:40:29:31:16:5d:73:
         59:bb:1b:cd:21:6f:28:20:d3:c0:89:11:30:d5:50:8a:da:af:
         50:3b:cd:34:97:90:1b:4c:97:99:db:b5:97:5c:ef:82:62:db:
         40:6c:c2:c2:40:a0:78:95:b3:16:9a:c8:45:5f:bd:d2:d5:ac:
         78:4d:41:0e:63:5b:2c:91:bb:7a:bc:87:8d:24:ec:b5:55:1a:
         4f:63:16:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Yg+guDx2K0+BXvtjSPurCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwNjA1MTYwMDQxWhcNMjYwNjA2MTYwMDQxWjAzMTEwLwYDVQQD
Eyg2NTY4ZjI3ZmI5NTJjMTMzZDk0MTUyZThkOTQ3NzE2MmM2ZTc3NDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sC1JbX9uecuprTyYODKjzUxa/J2
VarkYU6HkWBF2daTMPvlFqVd416T3WRXZVh/HiQwKGJzKnDzdaXxt3x6OJEvpKDz
8vfkO9gJxIc5dLrT93iK66K5MXb1z1Yp+HcSwWtmjOBdcDdshlzxmZ1AtigZA1fK
RYaw31qFBi+f6T9O6IC8MOJnliKnKRg+lCDdx1wKPp43PYkqpW1WKdQuAlZq45CD
xbSuJYWG7MaThdzOxKhtB2k2uAe/ajKMygPXLIjiLi7BYfHI2jATONjLtkII+hzC
WPRGrm/ttEatdiCXfFORNogVtmz6jN9MNQBxAANzszfCXu945L74Y3zGuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVo8n+5UsEz2UFS6NlHcWLG53RIMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0dJeBR/
VClhLPNBiTSAGcPgHRKG85bZks3NONqGtELk6xMoBitEyrivC/FEUpVNmzw35dPh
fetntyRlHmyH4pt66ltMjZAuiDEA3ci0DlUxFYfeoCyVpEkI4o5LNn6RcwI/iykH
9MzBA3DuiTgEvEPwYfD4CjqgHXMUFDJEcCmwePG3eE59rTCJ2CLU4jNsQuhZJpZY
0dQKpu9SS+THD01ZsvM0yWXBXmlfmmMLQCkxFl1zWbsbzSFvKCDTwIkRMNVQitqv
UDvNNJeQG0yXmdu1l1zvgmLbQGzCwkCgeJWzFprIRV+90tWseE1BDmNbLJG7eryH
jSTstVUaT2MWCw==
-----END CERTIFICATE-----
Generated at Fri Jun 5 20:31:41 2026 by rpki-client