Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File:                     T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier:          flPCSyWHsj+phGMNR6wLvQLCL1fKM/lmuR6HXc/taHc=
Subject key identifier:   46:71:7B:91:2C:28:35:53:2B:14:7C:39:E6:B1:2B:81:98:A7:6B:C8
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer:       /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial:       019F1AFADE4E36B87E6972FDB4800F168A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number:          1989
Signing time:             Wed 01 Jul 2026 00:01:16 +0000
Manifest this update:     Wed 01 Jul 2026 00:01:16 +0000
Manifest next update:     Thu 02 Jul 2026 00:01:16 +0000
Files and hashes:         1: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: bjur8I/BZz8Rx+KyP/abmVDBMimt15RX+3oWjiflzDA=)
                          2: YrHkJUDzzHYV4NSM8kuc3mWA3No.roa (hash: XN+H9pEw3/RHdNbn4FFCp9WEa3ViQ6Ir6r897iLElR0=)
                          3: eczTTw63Z89Bvx_PDTMEgnxlsuM.roa (hash: EGjQDsuLjtgXMDaJKqFFVXP8wORi9rfRbOBnhjq8cf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fa:de:4e:36:b8:7e:69:72:fd:b4:80:0f:16:8a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
        Validity
            Not Before: Jul  1 00:01:16 2026 GMT
            Not After : Jul  2 00:01:16 2026 GMT
        Subject: CN=46717b912c2835532b147c39e6b12b8198a76bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:f5:53:f4:3c:05:9f:ce:08:ae:70:f4:c1:
                    bf:50:4d:8e:95:3a:64:3b:33:92:48:51:8b:85:4e:
                    5b:c9:e9:47:60:e8:02:84:10:ba:24:dd:c4:97:40:
                    e1:bb:4f:e5:3c:98:63:3d:f7:fc:00:6e:c3:31:e0:
                    dd:4b:92:bd:8f:3a:35:bf:2a:98:84:bd:35:47:6c:
                    89:c7:46:a7:7b:a2:8b:6e:24:54:72:3b:a8:f3:14:
                    a4:74:3e:39:c4:81:cd:ea:c5:d8:46:2f:1d:52:65:
                    29:cc:3f:3c:f4:09:23:44:9d:7e:c6:c5:5c:61:9e:
                    03:2f:cf:bb:89:97:5f:d3:32:71:a7:d2:ea:37:8a:
                    60:5b:78:e3:38:96:c6:89:c3:a0:ae:c4:27:55:1f:
                    1c:4b:4b:e3:f0:7d:08:76:18:96:a9:1b:4d:41:83:
                    a6:8e:44:4c:90:14:c0:ab:e2:d4:c8:bf:78:43:40:
                    87:68:a4:80:52:ff:25:2d:98:6d:6a:c7:a5:ca:7b:
                    a3:d0:aa:03:e7:74:11:ee:f9:6b:b3:f1:b0:dd:16:
                    41:f5:f0:a4:fa:0a:15:02:ee:0a:92:51:eb:95:5a:
                    f5:30:5b:ad:01:71:b4:f6:57:45:bf:27:dd:60:1c:
                    c2:f2:c8:7a:4c:a0:df:9a:a1:66:70:11:b4:06:44:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:7B:91:2C:28:35:53:2B:14:7C:39:E6:B1:2B:81:98:A7:6B:C8
            X509v3 Authority Key Identifier:
                keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b8:59:b6:cf:e7:4b:fc:d0:a9:0d:8d:45:0b:3d:a6:2b:35:
         56:c9:d1:12:7c:d1:02:bf:a1:d9:c5:59:f6:4a:4e:91:19:df:
         a9:8e:fe:2c:c1:87:03:09:16:c8:4a:50:e8:8c:82:e6:77:5c:
         f0:43:95:cd:4c:ff:84:a8:d3:74:79:dd:2f:7b:03:c4:d6:f2:
         fe:e9:f4:75:06:f3:10:f8:77:46:4f:89:84:86:db:b1:3e:3f:
         21:22:e4:2e:89:f9:6a:41:e8:55:0a:65:9f:62:f4:b0:3f:af:
         36:8e:0c:0a:bb:3c:8c:f1:d3:00:3d:86:94:0e:4a:7a:fa:ce:
         92:27:91:5c:8c:ab:e4:48:2d:98:33:cf:ba:68:f2:73:cb:01:
         a1:c0:46:63:75:10:ac:ce:24:63:ab:f4:40:9e:ac:3c:2a:42:
         c9:b4:35:d8:dc:fa:b0:b0:c9:df:aa:54:3c:cd:22:66:82:5a:
         1f:67:b1:d6:73:d4:04:d2:60:58:c0:b0:39:ee:01:0f:2b:ff:
         12:8b:92:f6:45:aa:15:30:cb:86:31:6a:b9:ee:07:14:51:6a:
         dd:03:5d:43:72:ce:98:93:a2:81:93:d0:d6:af:ce:cd:1a:de:
         ed:14:ed:43:36:1a:d4:5c:82:f8:83:80:80:2f:76:6b:c5:44:
         fa:d9:9a:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8a+t5ONrh+aXL9tIAPFooYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZWI5NDU3ZWM1MTllODIzNzg2NzcxMGJjYzgyZmEzMGVh
ZTY3YzAwHhcNMjYwNzAxMDAwMTE2WhcNMjYwNzAyMDAwMTE2WjAzMTEwLwYDVQQD
Eyg0NjcxN2I5MTJjMjgzNTUzMmIxNDdjMzllNmIxMmI4MTk4YTc2YmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TX1U/Q8BZ/OCK5w9MG/UE2OlTpk
OzOSSFGLhU5byelHYOgChBC6JN3El0Dhu0/lPJhjPff8AG7DMeDdS5K9jzo1vyqY
hL01R2yJx0ane6KLbiRUcjuo8xSkdD45xIHN6sXYRi8dUmUpzD889AkjRJ1+xsVc
YZ4DL8+7iZdf0zJxp9LqN4pgW3jjOJbGicOgrsQnVR8cS0vj8H0IdhiWqRtNQYOm
jkRMkBTAq+LUyL94Q0CHaKSAUv8lLZhtaselynuj0KoD53QR7vlrs/Gw3RZB9fCk
+goVAu4KklHrlVr1MFutAXG09ldFvyfdYBzC8sh6TKDfmqFmcBG0BkRekQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZxe5EsKDVTKxR8OeaxK4GYp2vIMB8GA1UdIwQY
MBaAFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAt
NWYxMjM1NTVjZmIxLzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAtNWYxMjM1NTVjZmIx
LzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7hZts/n
S/zQqQ2NRQs9pis1VsnREnzRAr+h2cVZ9kpOkRnfqY7+LMGHAwkWyEpQ6IyC5ndc
8EOVzUz/hKjTdHndL3sDxNby/un0dQbzEPh3Rk+JhIbbsT4/ISLkLon5akHoVQpl
n2L0sD+vNo4MCrs8jPHTAD2GlA5KevrOkieRXIyr5EgtmDPPumjyc8sBocBGY3UQ
rM4kY6v0QJ6sPCpCybQ12Nz6sLDJ36pUPM0iZoJaH2ex1nPUBNJgWMCwOe4BDyv/
EouS9kWqFTDLhjFque4HFFFq3QNdQ3LOmJOigZPQ1q/OzRre7RTtQzYa1FyC+IOA
gC92a8VE+tmarw==
-----END CERTIFICATE-----
Generated at Wed Jul 1 03:21:17 2026 by rpki-client