Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          1ZGxc3XeyxXjMxlPyOAKReJd8ydNgIDEXAcI3JyUzVc=
Subject key identifier:   09:B1:0F:9A:0C:FA:AC:5C:65:C3:6B:C7:50:F3:70:32:23:98:5A:47
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       019EB6C5D709979029D8A453C4BE2FA1CDC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          1959
Signing time:             Thu 11 Jun 2026 13:01:19 +0000
Manifest this update:     Thu 11 Jun 2026 13:01:19 +0000
Manifest next update:     Fri 12 Jun 2026 13:01:19 +0000
Files and hashes:         1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
                          2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: v0M4cAfwwhfAmMtdfsLxvkNnrnkS61X60gWTmm0tqXQ=)
                          3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:d7:09:97:90:29:d8:a4:53:c4:be:2f:a1:cd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: Jun 11 13:01:19 2026 GMT
            Not After : Jun 12 13:01:19 2026 GMT
        Subject: CN=09b10f9a0cfaac5c65c36bc750f3703223985a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:6b:9b:f8:fb:63:51:95:5b:ae:ed:14:6a:
                    48:1c:ca:26:4a:cb:10:5a:7a:9c:ba:e5:8e:de:5e:
                    43:0e:6b:86:eb:ee:de:1a:51:62:e6:88:f9:1d:93:
                    35:ef:06:a6:8e:d2:86:c2:03:97:9e:8b:a6:fe:f0:
                    a0:d1:62:cd:42:15:35:cd:6c:f7:09:88:e6:4e:bc:
                    98:db:d9:32:da:d5:7c:46:9d:31:db:ba:6e:f6:46:
                    bd:b1:eb:90:f4:d7:ed:fb:30:b8:8c:59:37:ed:bb:
                    74:83:3a:3e:f8:94:8c:d0:99:d6:10:8f:49:47:66:
                    27:63:d6:55:4e:b1:6f:79:27:0d:fa:67:18:6d:a6:
                    29:9f:ae:f9:a5:9b:91:72:e6:16:32:32:82:b0:7f:
                    ec:dc:d3:b6:9d:08:3a:45:d3:b5:70:fc:fa:f1:3a:
                    66:3f:b0:47:99:bb:ad:08:11:40:db:d4:4b:37:ce:
                    0f:f8:42:c8:5b:8c:de:7c:1e:8d:2b:64:eb:5d:ac:
                    26:7b:64:52:51:85:e1:ab:42:28:9e:d0:3d:96:2e:
                    4b:ab:03:e9:8d:38:e1:97:4b:64:2f:99:07:21:8a:
                    61:b2:ac:73:90:2d:67:19:d2:0b:28:7d:68:09:21:
                    f0:f9:7a:bd:d1:d5:1f:b3:85:71:f1:23:6e:49:7a:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B1:0F:9A:0C:FA:AC:5C:65:C3:6B:C7:50:F3:70:32:23:98:5A:47
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6b:ad:e1:ff:c8:33:63:40:22:43:f5:a7:6f:04:4e:a2:1e:
         88:31:ac:54:18:f5:6d:ff:0c:4a:75:41:e1:74:fb:12:f6:2c:
         94:8e:6d:af:e0:33:e6:61:40:c4:43:b6:d2:cb:c7:7a:d8:75:
         6f:19:aa:87:89:d5:5b:45:13:4b:e8:ef:ee:d2:c3:05:fa:8f:
         6d:5e:fe:20:28:e6:5f:31:fb:33:10:ea:04:f7:7f:6a:eb:fe:
         57:c8:a6:9f:90:bd:a4:fd:24:f5:27:e5:a8:b6:d7:b8:33:6d:
         cb:c8:08:d8:35:98:31:9e:7e:2b:6f:b5:4f:2c:7e:46:1a:07:
         40:07:de:d6:22:26:86:0c:90:12:02:9a:1f:c2:9b:98:56:03:
         d6:ff:7d:21:6b:dd:45:97:55:9a:65:2e:5f:8b:33:e9:be:5a:
         8a:bd:62:53:29:25:1b:da:1a:ac:bb:5b:ac:cc:b2:cb:0e:1f:
         85:2f:6c:c5:78:73:39:86:3e:88:43:dd:6f:c2:6a:be:c4:2a:
         1d:25:ec:bf:a7:d7:59:5b:c1:ad:67:a8:79:cf:af:7a:dd:51:
         7f:4b:3d:61:0d:b0:1a:28:50:8c:39:59:89:aa:39:82:04:a8:
         a5:31:b2:a9:4e:d2:58:dd:99:d2:6a:06:5c:c1:67:8b:b4:0b:
         9a:08:01:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xdcJl5Ap2KRTxL4voc3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0
YjdkNDcwHhcNMjYwNjExMTMwMTE5WhcNMjYwNjEyMTMwMTE5WjAzMTEwLwYDVQQD
EygwOWIxMGY5YTBjZmFhYzVjNjVjMzZiYzc1MGYzNzAzMjIzOTg1YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY1rm/j7Y1GVW67tFGpIHMomSssQ
WnqcuuWO3l5DDmuG6+7eGlFi5oj5HZM17wamjtKGwgOXnoum/vCg0WLNQhU1zWz3
CYjmTryY29ky2tV8Rp0x27pu9ka9seuQ9Nft+zC4jFk37bt0gzo++JSM0JnWEI9J
R2YnY9ZVTrFveScN+mcYbaYpn675pZuRcuYWMjKCsH/s3NO2nQg6RdO1cPz68Tpm
P7BHmbutCBFA29RLN84P+ELIW4zefB6NK2TrXawme2RSUYXhq0IontA9li5LqwPp
jTjhl0tkL5kHIYphsqxzkC1nGdILKH1oCSHw+Xq90dUfs4Vx8SNuSXqILwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmxD5oM+qxcZcNrx1DzcDIjmFpHMB8GA1UdIwQY
MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt
ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi
LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmut4f/I
M2NAIkP1p28ETqIeiDGsVBj1bf8MSnVB4XT7EvYslI5tr+Az5mFAxEO20svHeth1
bxmqh4nVW0UTS+jv7tLDBfqPbV7+ICjmXzH7MxDqBPd/auv+V8imn5C9pP0k9Sfl
qLbXuDNty8gI2DWYMZ5+K2+1Tyx+RhoHQAfe1iImhgyQEgKaH8KbmFYD1v99IWvd
RZdVmmUuX4sz6b5air1iUyklG9oarLtbrMyyyw4fhS9sxXhzOYY+iEPdb8JqvsQq
HSXsv6fXWVvBrWeoec+vet1Rf0s9YQ2wGihQjDlZiao5ggSopTGyqU7SWN2Z0moG
XMFni7QLmggB9g==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:21 2026 by rpki-client