Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
File:                     fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json)
Hash identifier:          dqAglkDf0h+HSOMS3FoCn2fUZfVPAxPLGiC7A4XWsoI=
Subject key identifier:   C0:15:B0:C7:91:48:99:26:B1:1F:3D:18:47:44:8B:EE:2A:A3:A2:D9
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Certificate issuer:       /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial:       019F19B1397ACE0E9FA9C613CC6ED6C5F80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
Manifest number:          192D
Signing time:             Tue 30 Jun 2026 18:01:12 +0000
Manifest this update:     Tue 30 Jun 2026 18:01:12 +0000
Manifest next update:     Wed 01 Jul 2026 18:01:12 +0000
Files and hashes:         1: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (hash: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc=)
                          2: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (hash: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU=)
                          3: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (hash: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM=)
                          4: 6ItGULV6j8ktSiDJcisut4L2uv8.roa (hash: AVoyJJSbMIzWkWm7Zhb8Q8AM52J+C55gsBmt2DwDqHk=)
                          5: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (hash: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI=)
                          6: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (hash: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=)
                          7: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (hash: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw=)
                          8: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (hash: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU=)
                          9: NN_M5XXnWkCmh6vokLB7v_qCgCE.roa (hash: fSLTWX8QP7uRT9K9w9UbhnW/7NpDslXCtNNC73VVI+g=)
                          10: Sl7-Gj6EnnbA3uXupRaztTXD_io.roa (hash: fezcKvQQu+h2ziI78m9/Di/EMv2lyq3BEYWNcQA5EA8=)
                          11: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (hash: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k=)
                          12: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (hash: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM=)
                          13: dtGYKYc-L-yIv33hN65J3E-xajc.roa (hash: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8=)
                          14: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (hash: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk=)
                          15: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: BVrb+ml3nq2SCOXYMUc85slomHup3nZ1XSnm0qk/8EE=)
                          16: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (hash: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=)
                          17: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (hash: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw=)
                          18: r5WbEYryreML_gv4nbiLlHvTaeA.roa (hash: uF2RIp4vxohK6Rz9mwYK0ndrhtKPrP+zSBBfTaChG2o=)
                          19: xUsfdtgD1j1T7j6n66HdbJOfPDs.roa (hash: U4IhStPfUvQ+RWTW7WTK40Ox8axplO5trMxYdWn3hz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:39:7a:ce:0e:9f:a9:c6:13:cc:6e:d6:c5:f8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
        Validity
            Not Before: Jun 30 18:01:12 2026 GMT
            Not After : Jul  1 18:01:12 2026 GMT
        Subject: CN=c015b0c791489926b11f3d1847448bee2aa3a2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:0f:6e:63:65:82:b7:8d:75:37:8e:e0:d5:
                    7e:49:43:1d:74:3c:cd:4f:68:e4:85:a0:94:3b:d6:
                    99:d2:d3:e7:8c:83:ce:fc:16:88:b7:73:46:7e:52:
                    db:8e:aa:f1:81:1b:67:d2:9f:97:f8:7b:18:00:42:
                    56:8e:35:84:c3:c6:27:c4:9b:2d:d4:0c:fe:a0:3a:
                    81:5e:b0:39:b9:7e:b5:1c:18:5a:af:3e:c0:f1:d2:
                    39:fd:a8:63:3d:61:1c:d7:44:02:05:41:ad:42:bd:
                    ef:75:57:92:3d:c9:09:77:e6:3a:b0:91:1e:81:02:
                    9b:fc:51:ed:7e:e8:3a:ea:ac:1c:36:c7:3b:00:24:
                    7e:f3:4c:51:7e:2c:ef:a8:b0:a6:89:aa:47:f4:35:
                    00:95:e0:aa:6d:93:12:3b:80:fb:6f:d2:20:17:d1:
                    60:07:53:cc:2f:47:0d:ff:ee:5a:b1:b9:75:42:fa:
                    1a:7d:97:d1:57:7b:27:f5:90:7d:b4:0f:09:19:a8:
                    2f:c4:17:93:95:37:08:75:c1:cc:ec:4f:44:32:54:
                    3e:b0:a4:d0:17:ba:9c:96:a1:07:d9:33:6a:65:29:
                    8b:db:e8:78:c9:98:35:01:bd:db:f7:a5:ca:fb:a2:
                    38:4a:e7:c6:42:b5:1b:c3:7f:c8:2b:af:c1:3a:8a:
                    95:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:15:B0:C7:91:48:99:26:B1:1F:3D:18:47:44:8B:EE:2A:A3:A2:D9
            X509v3 Authority Key Identifier:
                keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7c:8f:c4:f0:84:6b:f8:35:c4:52:4e:c7:fb:d0:23:6b:e1:
         b7:a7:91:65:97:b7:aa:1c:6d:5f:e8:a6:7b:a0:28:7d:7c:fd:
         85:82:00:9f:d8:74:50:01:43:26:1d:05:9a:23:39:55:47:bc:
         59:7d:0c:e1:03:63:c3:c0:58:27:c1:a6:50:a4:ba:ee:4b:b9:
         9e:b3:4f:a5:71:4d:00:c7:33:58:37:d5:e0:13:d5:bd:04:ac:
         aa:3c:a5:8d:d3:38:04:91:1b:f6:8c:47:13:b6:56:59:15:a3:
         71:3f:81:b7:d1:85:76:ac:27:73:b7:c4:7b:75:23:cb:8d:81:
         ce:ad:58:07:07:21:fc:22:be:c2:2f:70:30:52:00:b0:0d:9f:
         f5:13:d3:d0:30:84:27:46:86:7f:b8:dc:c2:c9:dd:90:f9:f9:
         f9:b6:e5:09:fb:9f:e0:d7:14:52:cc:be:8c:00:32:76:59:de:
         46:35:3c:43:89:8f:12:8a:5c:30:76:b6:7d:0d:c2:0d:b0:93:
         9a:1f:e5:2e:a6:62:b6:f4:ff:ca:3b:c9:6b:19:9f:b0:e6:48:
         ee:76:79:2f:9f:4e:0b:16:a7:11:33:93:09:a8:21:05:5a:d9:
         9b:00:9c:f2:fb:cd:82:72:54:f1:16:22:10:ff:5d:7a:05:16:
         eb:3d:d9:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZsTl6zg6fqcYTzG7WxfgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj
ZmViYzEwHhcNMjYwNjMwMTgwMTEyWhcNMjYwNzAxMTgwMTEyWjAzMTEwLwYDVQQD
EyhjMDE1YjBjNzkxNDg5OTI2YjExZjNkMTg0NzQ0OGJlZTJhYTNhMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3QPbmNlgreNdTeO4NV+SUMddDzN
T2jkhaCUO9aZ0tPnjIPO/BaIt3NGflLbjqrxgRtn0p+X+HsYAEJWjjWEw8YnxJst
1Az+oDqBXrA5uX61HBharz7A8dI5/ahjPWEc10QCBUGtQr3vdVeSPckJd+Y6sJEe
gQKb/FHtfug66qwcNsc7ACR+80xRfizvqLCmiapH9DUAleCqbZMSO4D7b9IgF9Fg
B1PML0cN/+5asbl1QvoafZfRV3sn9ZB9tA8JGagvxBeTlTcIdcHM7E9EMlQ+sKTQ
F7qclqEH2TNqZSmL2+h4yZg1Ab3b96XK+6I4SufGQrUbw3/IK6/BOoqVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAVsMeRSJkmsR89GEdEi+4qo6LZMB8GA1UdIwQY
MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct
YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz
LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHyPxPCE
a/g1xFJOx/vQI2vht6eRZZe3qhxtX+ime6AofXz9hYIAn9h0UAFDJh0FmiM5VUe8
WX0M4QNjw8BYJ8GmUKS67ku5nrNPpXFNAMczWDfV4BPVvQSsqjyljdM4BJEb9oxH
E7ZWWRWjcT+Bt9GFdqwnc7fEe3Ujy42Bzq1YBwch/CK+wi9wMFIAsA2f9RPT0DCE
J0aGf7jcwsndkPn5+bblCfuf4NcUUsy+jAAydlneRjU8Q4mPEopcMHa2fQ3CDbCT
mh/lLqZitvT/yjvJaxmfsOZI7nZ5L59OCxanETOTCaghBVrZmwCc8vvNgnJU8RYi
EP9degUW6z3Z3Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:10 2026 by rpki-client