Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          j5viRXTKw51yDn4IAsn5AleIT3qaey/JsOH88uSSgbU=
Subject key identifier:   1E:31:72:0E:A2:87:47:A9:A1:A3:9B:A1:2D:6F:29:DF:A3:5F:3C:BE
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       019EB65791CD6F5F12F8F21971F8353B338B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          195E
Signing time:             Thu 11 Jun 2026 11:00:52 +0000
Manifest this update:     Thu 11 Jun 2026 11:00:52 +0000
Manifest next update:     Fri 12 Jun 2026 11:00:52 +0000
Files and hashes:         1: 1-1889f_-iRQYnH3-fqXrOkR2ikE.roa (hash: /z9uTfpjXRCmTc6GwPli+bHZeS9FVw3t6IXyn4g2iag=)
                          2: 4tb80eIeaemuew5fxP0iEI9imgA.roa (hash: e9ASBdL/cxgsl0ZRb+D15EqqF9ntvaIWRU4Syd78R4c=)
                          3: 5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa (hash: wdooR1EonyLTBTWw2tpg6m0I9TSD570lR7yhgwvAcsk=)
                          4: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: +JqFXj5pByuhFiFIrjczNqpnibfTYdu0SDpgFHm8V1U=)
                          5: V6C5S8FHu-VQP7fJy_qJO2TbRW8.roa (hash: ERX1UGNBCgL3/72WnrYeAgNLYeESJE2SSaY/KZ9ee1o=)
                          6: xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa (hash: mElWxlPb4ggRHli9cITYJ0YySn8gxZXbhGQNUFYIVAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:57:91:cd:6f:5f:12:f8:f2:19:71:f8:35:3b:33:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Jun 11 11:00:52 2026 GMT
            Not After : Jun 12 11:00:52 2026 GMT
        Subject: CN=1e31720ea28747a9a1a39ba12d6f29dfa35f3cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:5e:86:59:b9:09:db:1a:6c:ad:5a:d5:e1:
                    81:f2:9f:50:bc:29:66:ee:3f:96:38:8a:38:6f:b0:
                    97:79:28:fe:13:2a:22:fb:6a:f9:84:c5:0d:a1:42:
                    b6:97:40:a4:98:c4:76:9e:8a:3b:34:9e:09:59:e6:
                    1a:14:be:b6:16:a8:6d:04:51:71:f3:ee:b3:36:11:
                    98:b8:fc:07:ee:d8:ad:70:2f:18:a8:2c:3d:b5:1f:
                    33:63:d1:ff:aa:d6:6b:ca:d8:db:5e:75:77:eb:91:
                    67:72:18:fd:f2:55:72:5b:34:26:4d:1d:67:a5:ed:
                    59:ae:25:31:13:40:b3:5f:32:ec:10:92:ba:1f:74:
                    9f:86:71:cb:1f:a1:ec:b0:5c:e4:b4:c8:0a:70:d5:
                    af:2c:06:14:17:f3:b7:f2:fe:92:82:3b:76:e0:60:
                    31:5c:c8:df:7d:1a:10:50:39:9b:67:89:05:a5:60:
                    a2:d6:b6:a9:d7:03:08:8c:90:fc:45:bb:b8:ec:30:
                    e2:c6:50:7c:d0:44:3b:f5:49:5a:94:ec:fb:7e:ea:
                    7a:68:30:15:b3:1b:86:7c:1d:9f:06:54:7c:b6:26:
                    1e:13:a5:de:30:f1:30:1e:a9:de:2a:58:b7:d6:df:
                    ec:a2:f1:f0:e1:b7:64:d4:82:5a:c0:46:f1:06:e7:
                    4e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:31:72:0E:A2:87:47:A9:A1:A3:9B:A1:2D:6F:29:DF:A3:5F:3C:BE
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:16:8b:89:4d:33:cc:e3:ad:29:e5:20:6e:f2:6b:30:69:3e:
         cf:3f:e9:94:6d:c2:33:74:4d:22:97:ae:db:fd:61:a6:88:7e:
         34:6f:6b:ee:ae:10:0d:63:30:0f:d9:12:14:2d:48:7a:6b:19:
         c8:68:2b:67:9e:07:c4:55:9b:95:f2:51:13:52:db:19:9c:79:
         4f:37:64:72:c2:e4:50:1e:85:3b:0a:3c:fc:74:d6:f7:6a:24:
         c2:ec:07:bd:ff:bb:4a:5b:0c:7c:ba:cb:28:17:8d:21:32:e5:
         5d:3b:71:51:ff:e4:b0:a3:b4:ce:86:8c:76:15:9e:ad:26:86:
         ca:f6:a7:f5:00:b2:e5:c4:4c:b4:f1:ff:41:df:6a:a1:7b:5a:
         42:8d:8e:1b:cb:43:04:ae:61:ab:4a:d2:56:9d:74:fb:58:20:
         66:17:f3:0b:e7:87:80:20:8e:58:ce:c0:b3:31:c0:61:0f:55:
         f7:8d:6c:d9:c0:36:0f:49:6c:86:36:48:90:2e:0e:2e:50:f7:
         88:5b:8b:64:66:00:1f:c0:c0:7c:01:ea:80:9b:36:68:e5:c1:
         23:7f:bb:ee:06:cf:09:fd:95:05:34:79:c9:d2:46:20:82:91:
         4e:fe:56:ae:d4:5b:f8:6a:89:da:81:d0:27:8b:10:20:d6:70:
         ac:fa:cd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62V5HNb18S+PIZcfg1OzOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4
YjJkZTcwHhcNMjYwNjExMTEwMDUyWhcNMjYwNjEyMTEwMDUyWjAzMTEwLwYDVQQD
EygxZTMxNzIwZWEyODc0N2E5YTFhMzliYTEyZDZmMjlkZmEzNWYzY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsChehlm5CdsabK1a1eGB8p9QvClm
7j+WOIo4b7CXeSj+Eyoi+2r5hMUNoUK2l0CkmMR2noo7NJ4JWeYaFL62FqhtBFFx
8+6zNhGYuPwH7titcC8YqCw9tR8zY9H/qtZrytjbXnV365Fnchj98lVyWzQmTR1n
pe1ZriUxE0CzXzLsEJK6H3SfhnHLH6HssFzktMgKcNWvLAYUF/O38v6Sgjt24GAx
XMjffRoQUDmbZ4kFpWCi1rap1wMIjJD8Rbu47DDixlB80EQ79UlalOz7fup6aDAV
sxuGfB2fBlR8tiYeE6XeMPEwHqneKli31t/sovHw4bdk1IJawEbxBudOMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4xcg6ih0epoaOboS1vKd+jXzy+MB8GA1UdIwQY
MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt
NGQ3MzczMGY3ZDMyLzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy
LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBaLiU0z
zOOtKeUgbvJrMGk+zz/plG3CM3RNIpeu2/1hpoh+NG9r7q4QDWMwD9kSFC1IemsZ
yGgrZ54HxFWblfJRE1LbGZx5TzdkcsLkUB6FOwo8/HTW92okwuwHvf+7SlsMfLrL
KBeNITLlXTtxUf/ksKO0zoaMdhWerSaGyvan9QCy5cRMtPH/Qd9qoXtaQo2OG8tD
BK5hq0rSVp10+1ggZhfzC+eHgCCOWM7AszHAYQ9V941s2cA2D0lshjZIkC4OLlD3
iFuLZGYAH8DAfAHqgJs2aOXBI3+77gbPCf2VBTR5ydJGIIKRTv5WrtRb+GqJ2oHQ
J4sQINZwrPrNHA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:33:15 2026 by rpki-client