Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          UttwyT6DrgIKyDP9ZRVDa3IjFYivjIhZuXH4ixTggW4=
Subject key identifier:   B9:50:26:F9:17:7F:E8:25:4F:4E:62:10:66:F4:CC:8F:F3:E1:91:52
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       019F129C78D4B308B1093F988B012774C7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0D23
Signing time:             Mon 29 Jun 2026 09:01:12 +0000
Manifest this update:     Mon 29 Jun 2026 09:01:12 +0000
Manifest next update:     Tue 30 Jun 2026 09:01:12 +0000
Files and hashes:         1: 40PEkc-tm16gXqeqAbwomk4v-Yk.roa (hash: kAK1M/TYnJhlmuxrKwwSccKl4wPc1ihYIyT7lVRZWKM=)
                          2: FeRSaI58Ev-Ln_omefqDS1wpOcE.roa (hash: VtwF2AwRtjXtkXBam50V21xolPQHIDHrw5e0KXt9pQE=)
                          3: _rHEyFhBMkve8XY-2u_0M5SvUEY.roa (hash: 3MBR6pVJ71rnlILr1LVMBWKjPMEZiQ66W90KvCwSbpo=)
                          4: uAaaAwkHh37Yh7QiaeM24N_2cQ8.roa (hash: YODqMDn+FW1RXiU9YTO7+/jhAjNogHVA29ZzT3M5hD8=)
                          5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: 5DoGSgFttJb1fG+/rlVtCY+iXrkycnTugVYeKyN+OPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:78:d4:b3:08:b1:09:3f:98:8b:01:27:74:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Jun 29 09:01:12 2026 GMT
            Not After : Jun 30 09:01:12 2026 GMT
        Subject: CN=b95026f9177fe8254f4e621066f4cc8ff3e19152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:87:e6:36:3b:da:9e:48:83:ec:1f:cf:e8:
                    5c:63:07:5e:da:06:fe:57:dd:3d:6a:14:fe:7e:a9:
                    69:00:48:f4:cc:75:23:b5:35:e2:55:9f:f6:2a:e7:
                    7f:e4:f2:70:91:b2:95:a7:df:67:79:0c:14:a3:6c:
                    e7:2d:67:ad:90:fc:b6:2b:ed:29:67:c5:ae:46:b8:
                    22:45:e6:42:72:36:03:40:d2:76:69:81:87:c8:64:
                    15:27:b7:e3:ca:bd:54:00:b5:6a:b5:ca:d3:eb:b3:
                    99:4d:c9:02:3f:4a:d9:3b:96:7c:6e:9f:57:96:38:
                    63:67:ef:86:cd:f2:68:33:0e:9c:51:5d:d1:9d:01:
                    2b:a5:cc:70:6d:b5:2c:20:e6:85:0d:a6:d8:67:1f:
                    f6:c4:b6:b3:45:9f:e4:0e:d2:d0:82:89:79:84:51:
                    6e:29:b0:5e:ea:ff:75:33:b8:e3:3e:6a:25:2c:2f:
                    05:0c:df:8e:bc:ba:78:2a:3d:f1:b7:b3:e5:1b:09:
                    66:23:ec:be:7a:a0:b6:79:63:f6:8e:c2:69:44:6a:
                    98:2c:a7:1e:9c:a6:95:f1:2d:47:0f:ba:13:74:2f:
                    5a:81:54:2c:78:31:13:9d:96:2d:c9:50:85:1c:32:
                    ed:e2:fe:61:0f:70:b3:8c:5c:03:22:e6:9c:d0:85:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:26:F9:17:7F:E8:25:4F:4E:62:10:66:F4:CC:8F:F3:E1:91:52
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:d3:e7:e0:67:9b:69:e3:b8:1c:8d:81:47:24:f0:a0:05:
         6f:ea:c8:98:e0:f4:0e:77:ff:30:78:e3:26:7e:56:bd:a2:85:
         08:40:e6:e3:bb:2a:ba:c3:de:79:7c:f7:c9:f8:b7:32:f5:d2:
         a0:d0:fd:b5:c3:54:aa:e3:08:56:cc:21:b4:eb:8b:95:e9:62:
         82:ec:2b:68:0d:46:04:df:8d:48:30:34:7a:1b:b4:a0:ea:74:
         f2:b0:6c:fb:f1:7d:5b:ac:20:8d:78:3f:b4:17:dc:fa:78:29:
         38:fc:ea:64:63:ca:f3:50:e0:d0:29:4b:fd:82:c6:30:4a:fb:
         0b:35:4d:68:08:3f:f8:92:ce:ea:38:c7:18:ee:ba:55:f9:6f:
         3b:0f:43:c2:1b:44:3f:38:99:02:63:f7:a5:ec:2b:67:8b:90:
         ac:4d:ea:0e:62:4f:b0:c7:99:9e:4c:a6:71:32:d8:7e:08:aa:
         84:91:41:d3:7a:8d:78:b2:0e:f2:68:2d:bc:56:c3:4b:1d:f0:
         98:7a:c9:51:6c:0b:9f:21:b3:ac:88:00:9c:b2:22:5f:58:ab:
         23:32:de:ce:19:c3:b6:13:01:dc:3d:ef:b5:3c:dc:82:71:ca:
         87:09:62:3e:1c:25:86:9e:a7:dc:e8:74:a6:78:bf:24:32:25:
         69:e3:61:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnHjUswixCT+YiwEndMfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4
ZDFlZTIwHhcNMjYwNjI5MDkwMTEyWhcNMjYwNjMwMDkwMTEyWjAzMTEwLwYDVQQD
EyhiOTUwMjZmOTE3N2ZlODI1NGY0ZTYyMTA2NmY0Y2M4ZmYzZTE5MTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg76H5jY72p5Ig+wfz+hcYwde2gb+
V909ahT+fqlpAEj0zHUjtTXiVZ/2Kud/5PJwkbKVp99neQwUo2znLWetkPy2K+0p
Z8WuRrgiReZCcjYDQNJ2aYGHyGQVJ7fjyr1UALVqtcrT67OZTckCP0rZO5Z8bp9X
ljhjZ++GzfJoMw6cUV3RnQErpcxwbbUsIOaFDabYZx/2xLazRZ/kDtLQgol5hFFu
KbBe6v91M7jjPmolLC8FDN+OvLp4Kj3xt7PlGwlmI+y+eqC2eWP2jsJpRGqYLKce
nKaV8S1HD7oTdC9agVQseDETnZYtyVCFHDLt4v5hD3CzjFwDIuac0IWaDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlQJvkXf+glT05iEGb0zI/z4ZFSMB8GA1UdIwQY
MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt
N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0
LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZPT5+Bn
m2njuByNgUck8KAFb+rImOD0Dnf/MHjjJn5WvaKFCEDm47squsPeeXz3yfi3MvXS
oND9tcNUquMIVswhtOuLleliguwraA1GBN+NSDA0ehu0oOp08rBs+/F9W6wgjXg/
tBfc+ngpOPzqZGPK81Dg0ClL/YLGMEr7CzVNaAg/+JLO6jjHGO66VflvOw9DwhtE
PziZAmP3pewrZ4uQrE3qDmJPsMeZnkymcTLYfgiqhJFB03qNeLIO8mgtvFbDSx3w
mHrJUWwLnyGzrIgAnLIiX1irIzLezhnDthMB3D3vtTzcgnHKhwliPhwlhp6n3Oh0
pni/JDIlaeNhsA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 18:48:08 2026 by rpki-client