Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File:                     RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier:          RmTsCjYBZLKlx6K43Tw9xUzKnZf+SxZAzt2wy6cCiDU=
Subject key identifier:   15:81:39:FA:E6:99:58:EC:54:93:CB:50:EB:60:FD:29:BB:FE:56:2F
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer:       /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial:       019EB80EFE9AB5FFF450F14D42E403491269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number:          072C
Signing time:             Thu 11 Jun 2026 19:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:50 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:50 +0000
Files and hashes:         1: 5TB32dEiFrDCOhmncS_By-MXI5g.roa (hash: nEn2khZ7HTIKhK7IdrNN/UAq+nwAT5kuCFekds2YcnY=)
                          2: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: VUAW7B+jWwtims7OiipNCreNy4RUfftI0z2cLElpolM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:fe:9a:b5:ff:f4:50:f1:4d:42:e4:03:49:12:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
        Validity
            Not Before: Jun 11 19:00:50 2026 GMT
            Not After : Jun 12 19:00:50 2026 GMT
        Subject: CN=158139fae69958ec5493cb50eb60fd29bbfe562f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:7e:00:27:c0:05:94:b8:44:d3:3c:56:15:
                    fe:37:b7:7b:f1:74:1d:f7:2d:a4:f8:d4:e9:67:3a:
                    14:32:c9:92:86:0e:12:2a:cd:07:91:a9:d5:ed:ea:
                    5b:2f:89:38:ee:85:52:cc:e4:9f:f7:3c:56:db:ad:
                    dd:a8:73:d4:48:5c:c1:84:bd:c4:29:3c:82:78:a2:
                    92:2d:6a:73:56:e7:26:05:46:ac:f4:47:d9:f9:71:
                    b7:7a:73:f6:ef:2a:3e:7c:2e:07:5b:fd:aa:7f:31:
                    bf:2e:67:81:5b:09:d8:d0:55:b5:f6:c5:e5:2f:e8:
                    9c:ab:ce:62:39:4d:13:5d:68:6c:8c:43:2a:62:34:
                    ec:43:02:07:a9:93:34:e7:a8:bb:5f:c2:70:4e:eb:
                    61:77:8b:3f:60:00:04:2c:cc:10:cd:70:22:48:ee:
                    fd:15:08:2b:bc:4e:fe:74:35:fb:ec:8e:e1:ef:f1:
                    33:b7:43:ad:20:f4:13:03:88:0f:1b:11:46:ab:14:
                    ec:9a:a7:2b:83:d6:a2:24:67:71:f3:42:2e:14:fd:
                    f2:69:c1:34:d9:64:d4:d0:00:a7:e6:fb:71:34:1c:
                    ac:f4:75:73:e1:4e:c7:db:15:a1:6a:7b:a1:a5:c9:
                    58:9b:5d:c6:ae:4b:25:b9:b4:2a:1b:cd:ea:6c:f2:
                    f3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:81:39:FA:E6:99:58:EC:54:93:CB:50:EB:60:FD:29:BB:FE:56:2F
            X509v3 Authority Key Identifier:
                keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:05:80:01:90:2c:96:91:f5:1f:29:2a:32:f6:7b:d6:cb:e6:
         6b:3a:43:10:ab:41:67:d9:f3:14:05:e0:40:c9:b7:2c:9f:de:
         c1:2a:c8:16:46:60:d9:92:a8:31:73:dd:83:ec:3a:1b:37:c6:
         20:86:b5:29:73:4f:cf:3b:7e:f7:d2:72:02:16:b5:7e:7c:dc:
         ef:03:3d:9e:ee:02:14:5c:1e:5d:6f:4d:4c:f1:b0:64:e1:11:
         cc:c5:f4:38:50:b6:9c:51:5c:75:05:06:90:5f:d2:94:f7:ab:
         15:2f:84:ee:93:cd:ed:b7:94:1f:70:53:29:a7:43:d3:0a:b7:
         b8:4a:4d:b7:4c:b6:0f:ea:5c:67:f1:e5:d7:cf:58:61:40:e3:
         9f:6a:79:c8:eb:a6:7e:0c:56:0d:42:99:6b:31:b5:87:fe:e8:
         02:03:cc:e9:fe:8d:cb:54:6a:a8:ff:bf:3f:54:f3:da:91:b7:
         e2:6d:20:c4:de:f1:8a:c2:75:4d:91:a6:3d:d6:0b:35:82:b2:
         64:5f:f5:ae:db:6e:88:d3:05:8d:4b:22:ef:45:56:a3:5b:39:
         d9:37:8b:a8:5f:12:00:02:3f:94:b7:f3:f5:65:2a:86:5d:e0:
         78:36:91:b4:a4:a0:a1:e9:a2:76:8c:33:74:f9:dd:04:83:73:
         c4:7e:39:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Dv6atf/0UPFNQuQDSRJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2Y5MTQzZWE1NTM1OGZiZDYyZmE1NjQ0NTQ3NDYwMTcy
ZTFhZmQwHhcNMjYwNjExMTkwMDUwWhcNMjYwNjEyMTkwMDUwWjAzMTEwLwYDVQQD
EygxNTgxMzlmYWU2OTk1OGVjNTQ5M2NiNTBlYjYwZmQyOWJiZmU1NjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgR+ACfABZS4RNM8VhX+N7d78XQd
9y2k+NTpZzoUMsmShg4SKs0HkanV7epbL4k47oVSzOSf9zxW263dqHPUSFzBhL3E
KTyCeKKSLWpzVucmBUas9EfZ+XG3enP27yo+fC4HW/2qfzG/LmeBWwnY0FW19sXl
L+icq85iOU0TXWhsjEMqYjTsQwIHqZM056i7X8JwTuthd4s/YAAELMwQzXAiSO79
FQgrvE7+dDX77I7h7/Ezt0OtIPQTA4gPGxFGqxTsmqcrg9aiJGdx80IuFP3yacE0
2WTU0ACn5vtxNBys9HVz4U7H2xWhanuhpclYm13GrkslubQqG83qbPLzpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWBOfrmmVjsVJPLUOtg/Sm7/lYvMB8GA1UdIwQY
MBaAFER/kUPqVTWPvWL6VkRUdGAXLhr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUt
YzQyOTJmYWM5YmU4LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85ZWEzNjktYTI4Yy00YzdlLTlhMTUtYzQyOTJmYWM5YmU4
LzEvUkgtUlEtcFZOWS05WXZwV1JGUjBZQmN1R3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAWAAZAs
lpH1HykqMvZ71svmazpDEKtBZ9nzFAXgQMm3LJ/ewSrIFkZg2ZKoMXPdg+w6GzfG
IIa1KXNPzzt+99JyAha1fnzc7wM9nu4CFFweXW9NTPGwZOERzMX0OFC2nFFcdQUG
kF/SlPerFS+E7pPN7beUH3BTKadD0wq3uEpNt0y2D+pcZ/Hl189YYUDjn2p5yOum
fgxWDUKZazG1h/7oAgPM6f6Ny1RqqP+/P1Tz2pG34m0gxN7xisJ1TZGmPdYLNYKy
ZF/1rttuiNMFjUsi70VWo1s52TeLqF8SAAI/lLfz9WUqhl3geDaRtKSgoemidowz
dPndBINzxH45sw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:03:57 2026 by rpki-client