Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
File:                     fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft (raw, json)
Hash identifier:          evoNerYvW5EvHXHTEWZsz1VUB2NVXznHJRXO+p4gPAo=
Subject key identifier:   BF:88:CD:53:B8:4E:4F:03:E9:77:99:DD:BB:D8:F2:C7:80:61:98:0E
Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
Certificate issuer:       /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Certificate serial:       019EBA341EDCD0FEE3AC9A26A617492FB43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
Manifest number:          195F
Signing time:             Fri 12 Jun 2026 05:00:38 +0000
Manifest this update:     Fri 12 Jun 2026 05:00:38 +0000
Manifest next update:     Sat 13 Jun 2026 05:00:38 +0000
Files and hashes:         1: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl (hash: QR9hvuejbGMaxg2ybXdH2qpnpxC6j5DQqdltY/kmwbo=)
                          2: luDoAnv_4CXwVbPTjgicT_NDBNY.roa (hash: ywVrOJWUkBy8UWblrL/w6CJGLJjV5uY9pOZQ4I0Nv2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:1e:dc:d0:fe:e3:ac:9a:26:a6:17:49:2f:b4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
        Validity
            Not Before: Jun 12 05:00:38 2026 GMT
            Not After : Jun 13 05:00:38 2026 GMT
        Subject: CN=bf88cd53b84e4f03e97799ddbbd8f2c78061980e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:2f:bb:a4:01:1d:08:e5:d5:94:f6:d9:30:
                    1f:8c:c9:e9:be:d4:6d:e4:98:f3:00:7e:45:db:82:
                    e0:22:0c:af:8a:72:ba:36:f9:d6:de:a3:ee:f6:06:
                    b7:e3:7b:a7:42:2c:2b:32:63:46:f9:aa:3e:71:f5:
                    8c:13:95:9a:bc:a5:79:e7:31:10:37:10:60:4a:e6:
                    8c:d3:9a:0e:3a:65:2e:f7:f4:72:ab:a2:e3:f4:ad:
                    35:cc:c5:a4:95:d6:f3:0b:94:fc:49:71:c6:ff:96:
                    92:3e:b0:17:3c:63:78:fd:5f:bd:d0:60:3e:ca:47:
                    b6:af:77:5a:4f:66:80:21:d3:3f:6d:c0:09:03:cc:
                    04:c5:8b:a1:d5:90:3a:ee:a5:30:fc:4c:fe:79:d1:
                    fa:cb:32:a6:55:9f:8c:43:79:11:20:3b:5a:a8:6c:
                    ee:63:e9:05:89:cd:67:76:f0:41:8d:39:bf:4f:8a:
                    f0:97:c9:f0:fe:1b:e5:31:62:ac:b7:b3:16:a7:38:
                    ed:cc:28:f9:92:73:30:d8:f5:da:f4:6c:ee:70:fb:
                    de:37:9a:c3:dd:61:62:ea:df:fd:6f:70:44:d6:bc:
                    f0:33:6d:5c:5b:84:cd:5e:89:05:6e:e1:db:da:20:
                    d9:5f:72:55:23:10:ef:29:9a:12:32:f8:64:b2:e2:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:88:CD:53:B8:4E:4F:03:E9:77:99:DD:BB:D8:F2:C7:80:61:98:0E
            X509v3 Authority Key Identifier:
                keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:b7:75:31:8e:81:cc:31:fd:df:c8:15:a6:f7:94:4b:86:
         a6:d3:8e:a3:59:73:2d:d5:5d:d6:b2:d9:53:d7:54:3d:ca:ee:
         5f:40:e8:31:08:e2:e3:d9:0f:f9:64:0b:c9:08:b4:1d:cb:bd:
         20:49:96:77:23:26:ed:6c:66:65:eb:fe:2b:f6:be:1d:1b:5a:
         28:0d:7d:c6:28:0c:93:f6:7f:43:93:8f:b9:5f:f5:78:44:0c:
         47:93:62:25:64:cd:a4:b9:9f:61:6c:bd:51:a4:4b:34:b0:80:
         a1:69:ba:81:03:b4:ad:77:4c:f5:21:87:d1:fb:a4:87:3c:d3:
         1c:8e:a7:f0:1f:47:33:17:dd:8c:53:15:fc:6f:59:c5:ec:1b:
         67:3a:cb:49:00:e3:90:bb:8e:8d:c2:8d:0d:2e:96:de:7c:11:
         aa:04:f2:28:c3:10:6a:99:58:31:58:15:9d:6c:4b:47:69:bf:
         e8:a1:3f:85:13:bc:ad:a4:68:2b:bd:fa:40:ce:ef:fe:16:e4:
         88:e8:c9:4e:3d:5f:d0:19:40:1d:62:69:24:95:9c:a6:c3:00:
         bf:b0:db:95:39:03:42:34:6b:c1:60:4c:f9:16:c9:7c:fe:77:
         5d:6a:d2:6b:90:b6:94:59:eb:d9:69:29:bb:41:bf:b6:43:bf:
         a0:fd:37:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NB7c0P7jrJomphdJL7Q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2QwY2FjZmFmYTJlMGQzMTQ5NWRkOTUwZjc2YWY1Zjk4
YmE1ZDcwHhcNMjYwNjEyMDUwMDM4WhcNMjYwNjEzMDUwMDM4WjAzMTEwLwYDVQQD
EyhiZjg4Y2Q1M2I4NGU0ZjAzZTk3Nzk5ZGRiYmQ4ZjJjNzgwNjE5ODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Yvu6QBHQjl1ZT22TAfjMnpvtRt
5JjzAH5F24LgIgyvinK6NvnW3qPu9ga343unQiwrMmNG+ao+cfWME5WavKV55zEQ
NxBgSuaM05oOOmUu9/Ryq6Lj9K01zMWkldbzC5T8SXHG/5aSPrAXPGN4/V+90GA+
yke2r3daT2aAIdM/bcAJA8wExYuh1ZA67qUw/Ez+edH6yzKmVZ+MQ3kRIDtaqGzu
Y+kFic1ndvBBjTm/T4rwl8nw/hvlMWKst7MWpzjtzCj5knMw2PXa9GzucPveN5rD
3WFi6t/9b3BE1rzwM21cW4TNXokFbuHb2iDZX3JVIxDvKZoSMvhksuI9QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+IzVO4Tk8D6XeZ3bvY8seAYZgOMB8GA1UdIwQY
MBaAFHzNDKz6+i4NMUld2VD3avX5i6XXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTVkY2YtY2IwNS00NjFhLTg2OGUt
NDM5ZmM4ZjliMzg2LzEvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iZTVkY2YtY2IwNS00NjFhLTg2OGUtNDM5ZmM4ZjliMzg2
LzEvZk0wTXJQcjZMZzB4U1YzWlVQZHE5Zm1McGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX923dTGO
gcwx/d/IFab3lEuGptOOo1lzLdVd1rLZU9dUPcruX0DoMQji49kP+WQLyQi0Hcu9
IEmWdyMm7WxmZev+K/a+HRtaKA19xigMk/Z/Q5OPuV/1eEQMR5NiJWTNpLmfYWy9
UaRLNLCAoWm6gQO0rXdM9SGH0fukhzzTHI6n8B9HMxfdjFMV/G9ZxewbZzrLSQDj
kLuOjcKNDS6W3nwRqgTyKMMQaplYMVgVnWxLR2m/6KE/hRO8raRoK736QM7v/hbk
iOjJTj1f0BlAHWJpJJWcpsMAv7DblTkDQjRrwWBM+RbJfP53XWrSa5C2lFnr2Wkp
u0G/tkO/oP03XQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:52:48 2026 by rpki-client