Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File:                     ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier:          iCvDAhfdH5LczWJqKo6O0DcxXfhrUkHwYYpAAA0XqWA=
Subject key identifier:   32:57:A3:32:BF:3D:B8:FA:10:1D:85:BF:94:07:16:F5:79:AF:4C:22
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer:       /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial:       019EBA6AEDA77806507D531BDC0972D4721C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number:          0DCF
Signing time:             Fri 12 Jun 2026 06:00:30 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:30 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:30 +0000
Files and hashes:         1: dvkk0AF8tQcZnUPQCg9wGxPygAk.roa (hash: rFoeKgkf83K3sPDF/5ELGk/RlwiuIW6RTOiVohUUKGA=)
                          2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: /l8nOMyy1+xNeyQqxYIiEay2hZ7Bru5M4cTwJkEyEbA=)
                          3: xoWvafIMJ6TLt2ZntxrZctfmhMc.roa (hash: Rhaku6Y4Ce9/CA5bX0DFke+wrnSAKtC/WyFWuc4Uj/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6a:ed:a7:78:06:50:7d:53:1b:dc:09:72:d4:72:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
        Validity
            Not Before: Jun 12 06:00:30 2026 GMT
            Not After : Jun 13 06:00:30 2026 GMT
        Subject: CN=3257a332bf3db8fa101d85bf940716f579af4c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:67:ee:f9:5a:3e:c3:b2:55:63:e4:c4:89:
                    3b:10:3f:9f:b7:a9:7a:43:ca:95:79:bf:0f:c7:f8:
                    08:a9:d0:76:29:f0:86:58:b4:56:ce:69:0e:81:6c:
                    d7:d7:c4:45:eb:f4:1b:ce:81:2c:f6:89:1e:53:43:
                    87:6a:f9:27:77:6f:c3:33:96:3d:f4:3b:6d:53:0d:
                    70:7d:f9:1d:cf:04:33:97:30:6d:fe:db:37:ef:19:
                    89:0b:de:fb:9c:20:7a:63:95:e1:3b:38:1d:fb:75:
                    cd:7d:3a:17:c6:c0:16:d2:0a:d1:2a:ac:28:d8:d0:
                    fc:61:db:c2:6f:c6:fc:c0:99:1e:be:b1:91:9f:2d:
                    11:1b:a8:40:95:98:8c:de:e8:b3:aa:d3:fb:2c:f1:
                    e4:b0:6c:ed:23:57:ea:68:c0:ad:6b:94:e4:b7:88:
                    5d:c6:ab:4d:9e:62:61:69:fd:5c:33:4e:89:ed:60:
                    bd:be:d3:93:59:7d:a8:0b:8f:bb:45:0b:b9:5f:13:
                    b2:f4:0d:99:a8:b9:50:4b:64:0a:09:ba:7a:bb:8b:
                    8a:8b:78:6d:dc:1d:49:b1:62:6c:c3:a0:fc:43:27:
                    39:8b:d1:9b:69:30:27:de:a1:65:dc:e6:38:32:d1:
                    1f:ee:ff:5e:a7:5c:b7:91:97:b3:14:e0:49:96:9a:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:57:A3:32:BF:3D:B8:FA:10:1D:85:BF:94:07:16:F5:79:AF:4C:22
            X509v3 Authority Key Identifier:
                keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:de:9f:91:78:4c:47:7d:02:f2:56:29:0e:75:48:89:f2:
         53:c0:de:87:0d:6d:fb:d0:3c:c9:80:33:57:43:e3:53:ad:54:
         bb:cf:63:fc:be:a3:df:4f:10:5d:c3:49:8b:c6:c5:75:85:af:
         c8:70:32:e9:dc:8b:49:51:f6:87:bb:ff:26:38:32:33:d2:f9:
         84:1c:65:9a:b7:7d:b3:6f:c9:0b:1a:25:d0:f6:ce:6c:30:a8:
         ce:fe:65:df:4e:7a:3e:91:ec:ef:e9:2e:cc:46:b7:bf:87:3a:
         ca:0b:9d:ff:14:bf:eb:cb:18:7b:0e:d0:ec:65:da:71:9e:94:
         6c:6a:ff:f2:80:5e:99:dc:d7:a2:ea:af:f2:cf:e4:89:4f:1b:
         d6:19:3a:37:0a:0f:35:79:0a:8a:c3:8a:0c:72:34:fa:05:5d:
         0f:f9:c7:a7:a9:eb:c7:90:bc:ee:65:14:ec:71:49:96:41:53:
         5d:ab:15:4f:af:8a:11:29:ff:ac:2e:61:e8:c3:45:6e:c9:10:
         de:63:23:42:58:9e:14:fe:e7:34:01:33:0b:15:ca:dd:fa:2a:
         54:ea:03:5f:0d:32:a1:0c:2f:d1:c0:20:5a:25:86:c0:50:e2:
         a5:0e:dd:5f:1a:ab:1a:2b:2f:0e:fc:f2:f1:fe:54:cc:d3:58:
         9e:59:bf:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66au2neAZQfVMb3Aly1HIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi
MjdlZmIwHhcNMjYwNjEyMDYwMDMwWhcNMjYwNjEzMDYwMDMwWjAzMTEwLwYDVQQD
EygzMjU3YTMzMmJmM2RiOGZhMTAxZDg1YmY5NDA3MTZmNTc5YWY0YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMxn7vlaPsOyVWPkxIk7ED+ft6l6
Q8qVeb8Px/gIqdB2KfCGWLRWzmkOgWzX18RF6/QbzoEs9okeU0OHavknd2/DM5Y9
9DttUw1wffkdzwQzlzBt/ts37xmJC977nCB6Y5XhOzgd+3XNfToXxsAW0grRKqwo
2ND8YdvCb8b8wJkevrGRny0RG6hAlZiM3uizqtP7LPHksGztI1fqaMCta5Tkt4hd
xqtNnmJhaf1cM06J7WC9vtOTWX2oC4+7RQu5XxOy9A2ZqLlQS2QKCbp6u4uKi3ht
3B1JsWJsw6D8Qyc5i9GbaTAn3qFl3OY4MtEf7v9ep1y3kZezFOBJlppFYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJXozK/Pbj6EB2Fv5QHFvV5r0wiMB8GA1UdIwQY
MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt
ZmViYzFlZDNjZWJhLzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh
LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqDen5F4
TEd9AvJWKQ51SInyU8Dehw1t+9A8yYAzV0PjU61Uu89j/L6j308QXcNJi8bFdYWv
yHAy6dyLSVH2h7v/JjgyM9L5hBxlmrd9s2/JCxol0PbObDCozv5l3056PpHs7+ku
zEa3v4c6ygud/xS/68sYew7Q7GXacZ6UbGr/8oBemdzXouqv8s/kiU8b1hk6NwoP
NXkKisOKDHI0+gVdD/nHp6nrx5C87mUU7HFJlkFTXasVT6+KESn/rC5h6MNFbskQ
3mMjQlieFP7nNAEzCxXK3foqVOoDXw0yoQwv0cAgWiWGwFDipQ7dXxqrGisvDvzy
8f5UzNNYnlm/AA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 11:28:29 2026 by rpki-client