Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File:                     4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier:          Y4+pcpL5ok68QtZWU8UoBVpLboFHaEx26rk0BKY6DYU=
Subject key identifier:   0F:0E:B4:94:3B:60:D1:4A:E6:99:A1:D9:E5:05:8F:65:B1:DE:6F:55
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer:       /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial:       019EB80E657FEF5684947B8FA165AE263776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number:          1968
Signing time:             Thu 11 Jun 2026 19:00:11 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:11 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:11 +0000
Files and hashes:         1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
                          2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: 8ouTieIoTwIo2HgxOW2c/9yG5r1h9yBCz0swfFoL4nw=)
                          3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:65:7f:ef:56:84:94:7b:8f:a1:65:ae:26:37:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
        Validity
            Not Before: Jun 11 19:00:11 2026 GMT
            Not After : Jun 12 19:00:11 2026 GMT
        Subject: CN=0f0eb4943b60d14ae699a1d9e5058f65b1de6f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:d9:ac:d9:d0:f5:2c:02:d8:47:67:c4:5b:
                    bb:bd:91:60:d7:b0:1e:a5:8f:7f:b8:c2:f4:c3:2c:
                    5e:b9:4a:41:ec:ab:28:13:55:e3:3f:ed:5d:01:20:
                    d4:84:4c:cb:1d:ad:ef:21:f8:66:2f:79:fb:40:2b:
                    14:33:87:12:d1:8d:af:1d:97:a6:57:18:fb:e1:22:
                    6f:b7:60:b6:e3:51:f1:77:e5:58:23:1e:36:81:3c:
                    38:5a:63:22:26:bb:48:4c:1e:67:49:19:f0:bd:6a:
                    dd:b9:35:bc:77:4c:06:92:a0:57:a1:46:3e:02:73:
                    7e:46:88:92:07:bb:b9:e6:74:12:b8:8e:b0:da:21:
                    b6:1b:b0:4c:67:f4:5c:05:e5:7d:e7:d8:5d:b6:8f:
                    25:cd:bc:54:a3:d6:87:5a:47:de:11:ea:25:8b:85:
                    40:18:cb:d9:8b:e6:6d:be:07:ec:e2:79:dc:26:f2:
                    a8:19:16:df:3c:49:5f:62:46:47:af:fa:9e:20:f6:
                    84:25:f6:da:2b:dd:13:5f:3a:23:9d:03:2b:13:23:
                    0c:55:4a:1c:e0:12:1d:1e:57:3d:a8:32:ee:cc:d6:
                    2c:fc:b5:9d:9b:62:90:e9:70:17:17:f8:94:fa:65:
                    cd:7a:48:c2:ef:7d:24:03:1d:d4:e7:02:7b:2f:f0:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0E:B4:94:3B:60:D1:4A:E6:99:A1:D9:E5:05:8F:65:B1:DE:6F:55
            X509v3 Authority Key Identifier:
                keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:b2:a3:09:d8:94:3b:a1:bb:5f:41:09:d1:1f:16:f5:55:
         ee:a4:d0:fc:fa:9e:a9:85:0d:d8:94:0a:16:96:87:99:0a:87:
         45:a0:c9:43:8a:d0:35:aa:eb:56:e0:83:ba:f8:eb:a7:49:47:
         dd:b6:19:5d:10:f6:96:1f:60:03:3a:4e:b3:b9:da:b3:9d:66:
         6e:ad:48:56:a3:95:8a:9a:2f:5a:2e:76:b8:32:60:be:ec:72:
         5f:c1:52:b9:6b:9f:84:38:25:50:76:e5:cb:1e:79:31:6b:13:
         78:44:81:7c:ea:bf:e1:35:f0:d6:10:8b:1b:4d:d3:ec:f5:c3:
         f3:dd:97:cd:c0:00:91:64:de:11:05:24:75:10:e2:f4:0c:ee:
         12:01:71:86:8e:0f:ea:d3:13:5b:a4:5f:44:a2:09:07:a2:11:
         51:82:91:d7:ef:0e:92:a0:7f:dc:28:7e:b2:0c:92:db:79:e4:
         22:65:57:fb:e6:fe:f3:a8:fb:db:84:af:95:33:cb:2b:92:d0:
         3f:68:27:ba:a3:30:3f:07:99:99:b0:ef:65:58:fb:70:77:51:
         11:52:dc:a3:87:56:f0:2a:2e:cb:1f:65:0b:c7:40:5d:c2:26:
         9c:75:7f:ed:7f:52:be:f2:a8:c8:84:43:bf:fd:dd:f3:25:a9:
         cd:a7:1d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64DmV/71aElHuPoWWuJjd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTViZTQ1MzJlOTU4OGM0MDUzMWE3ZjMzMWVhYmZiZjQ3
NzBhNWUwHhcNMjYwNjExMTkwMDExWhcNMjYwNjEyMTkwMDExWjAzMTEwLwYDVQQD
EygwZjBlYjQ5NDNiNjBkMTRhZTY5OWExZDllNTA1OGY2NWIxZGU2ZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5APZrNnQ9SwC2EdnxFu7vZFg17Ae
pY9/uML0wyxeuUpB7KsoE1XjP+1dASDUhEzLHa3vIfhmL3n7QCsUM4cS0Y2vHZem
Vxj74SJvt2C241Hxd+VYIx42gTw4WmMiJrtITB5nSRnwvWrduTW8d0wGkqBXoUY+
AnN+RoiSB7u55nQSuI6w2iG2G7BMZ/RcBeV959hdto8lzbxUo9aHWkfeEeoli4VA
GMvZi+Ztvgfs4nncJvKoGRbfPElfYkZHr/qeIPaEJfbaK90TXzojnQMrEyMMVUoc
4BIdHlc9qDLuzNYs/LWdm2KQ6XAXF/iU+mXNekjC730kAx3U5wJ7L/AnCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8OtJQ7YNFK5pmh2eUFj2Wx3m9VMB8GA1UdIwQY
MBaAFOIVvkUy6ViMQFMafzMeq/v0dwpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZWU4NWUtMjJjYi00MmVkLTkwNzEt
NDY1MWZkODAyNzM3LzEvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80ZWU4NWUtMjJjYi00MmVkLTkwNzEtNDY1MWZkODAyNzM3
LzEvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxOyownY
lDuhu19BCdEfFvVV7qTQ/PqeqYUN2JQKFpaHmQqHRaDJQ4rQNarrVuCDuvjrp0lH
3bYZXRD2lh9gAzpOs7nas51mbq1IVqOVipovWi52uDJgvuxyX8FSuWufhDglUHbl
yx55MWsTeESBfOq/4TXw1hCLG03T7PXD892XzcAAkWTeEQUkdRDi9AzuEgFxho4P
6tMTW6RfRKIJB6IRUYKR1+8OkqB/3Ch+sgyS23nkImVX++b+86j724SvlTPLK5LQ
P2gnuqMwPweZmbDvZVj7cHdREVLco4dW8Couyx9lC8dAXcImnHV/7X9SvvKoyIRD
v/3d8yWpzacd1A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:32 2026 by rpki-client