Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File:                     mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier:          oJomgU1+JE9712CmTs0Q4ES5XdaHD1/Eso1RiEPoyGQ=
Subject key identifier:   FE:22:E7:B7:0B:6B:98:DE:E4:1E:C5:D4:31:BC:37:C8:F7:05:5E:3E
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer:       /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial:       019EB7A0DEB9450CCB6B6222BDF98041C679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 17:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:33 +0000
Files and hashes:         1: PzE7Xo74WSE5IepeAcF3qHZnsjo.roa (hash: DmGaRaKHvP4r6YlqDGNyrpBgSveCtDMrds7C4QXYmAE=)
                          2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: +pnNhVhXWNIEafFceydLm2iTdrPuJie0TO6WPsQ1gLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:de:b9:45:0c:cb:6b:62:22:bd:f9:80:41:c6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
        Validity
            Not Before: Jun 11 17:00:33 2026 GMT
            Not After : Jun 12 17:00:33 2026 GMT
        Subject: CN=fe22e7b70b6b98dee41ec5d431bc37c8f7055e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:94:a4:8d:f7:7d:65:93:b2:80:77:ac:23:
                    7c:d1:b5:9f:7e:c8:6b:ad:ed:b0:e6:db:1c:a6:66:
                    b1:b5:77:0f:41:f9:01:cd:46:6e:38:2b:97:73:a3:
                    5f:87:65:83:a4:ab:b2:bc:4f:88:11:55:0c:bf:c5:
                    1c:06:68:24:61:1d:89:7d:82:92:85:f5:e4:53:3b:
                    73:fe:4f:0b:75:fa:21:66:98:82:15:70:1c:b5:29:
                    ef:cc:e4:6c:f6:78:ef:18:04:7c:0c:c6:86:78:d7:
                    e6:97:dc:2b:4a:dc:98:8f:e6:8d:59:5f:c3:75:5c:
                    73:46:2a:74:7c:c4:30:8e:c3:ec:62:41:69:f3:2e:
                    5a:02:6f:22:3f:9b:0e:f3:c8:ae:34:16:ae:c7:86:
                    96:07:1b:16:c0:53:ca:18:93:b6:34:a5:1b:bc:9c:
                    3f:b2:ad:d5:b0:e8:7e:e7:c1:da:9e:98:b0:e5:4c:
                    fe:85:f6:a9:72:f3:55:9c:71:c9:56:da:17:af:3a:
                    12:80:ac:d7:12:db:da:70:12:13:9a:d3:f4:e9:0b:
                    8c:7d:1f:29:f1:b5:7e:08:dc:c3:c6:2e:87:71:2d:
                    19:2b:c2:e3:a4:24:a0:15:c3:a5:b7:07:dc:2b:34:
                    5c:f7:99:90:a7:62:6f:31:1f:69:f0:24:f2:d5:2a:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:E7:B7:0B:6B:98:DE:E4:1E:C5:D4:31:BC:37:C8:F7:05:5E:3E
            X509v3 Authority Key Identifier:
                keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:a1:2a:15:fa:15:d4:2c:b6:f1:35:e3:d3:07:7e:20:76:
         c6:6a:43:8e:5d:74:57:8a:0c:bb:5b:81:18:61:ac:ae:b2:ba:
         6d:46:0a:b0:b6:17:f5:cf:7a:d2:10:f6:82:4c:39:ce:e8:a5:
         17:06:37:87:d9:f0:62:f0:7d:b1:96:b2:d2:02:68:b0:4d:4b:
         39:66:e0:e6:39:22:a8:d0:70:c8:74:b0:34:43:95:3e:9b:db:
         11:12:5e:66:16:62:1e:0c:6b:98:53:c5:2b:17:d5:cf:36:75:
         91:97:8e:e4:3e:48:29:15:c6:fc:b8:b2:6b:df:83:50:35:cb:
         09:42:ab:5c:6f:03:3a:0f:fd:3c:22:b5:a7:af:de:ec:53:53:
         bc:fd:26:53:7a:02:55:fb:be:dc:9d:59:45:98:a0:18:3e:6b:
         8f:4c:4e:89:b6:02:a6:32:c0:83:16:e9:08:76:2d:27:36:f2:
         a1:28:eb:3c:fb:6b:b9:2e:2d:9b:a4:a2:df:1d:c2:8d:7c:a0:
         ab:ab:4b:42:38:f5:24:60:0b:9c:95:0a:df:73:60:c7:48:32:
         cb:b1:b3:28:06:c6:36:61:58:47:50:1e:f6:92:32:54:38:ba:
         40:5d:1a:42:3a:0c:71:af:8a:99:c6:f9:0b:a0:06:9c:83:f6:
         73:77:b3:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oN65RQzLa2IivfmAQcZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjJlMjZhMWNhZmZmNTUzMGE3MDE5MGM4ZDAwMGMxMGYy
NGI5NjYwHhcNMjYwNjExMTcwMDMzWhcNMjYwNjEyMTcwMDMzWjAzMTEwLwYDVQQD
EyhmZTIyZTdiNzBiNmI5OGRlZTQxZWM1ZDQzMWJjMzdjOGY3MDU1ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbeUpI33fWWTsoB3rCN80bWffshr
re2w5tscpmaxtXcPQfkBzUZuOCuXc6Nfh2WDpKuyvE+IEVUMv8UcBmgkYR2JfYKS
hfXkUztz/k8LdfohZpiCFXActSnvzORs9njvGAR8DMaGeNfml9wrStyYj+aNWV/D
dVxzRip0fMQwjsPsYkFp8y5aAm8iP5sO88iuNBaux4aWBxsWwFPKGJO2NKUbvJw/
sq3VsOh+58Hanpiw5Uz+hfapcvNVnHHJVtoXrzoSgKzXEtvacBITmtP06QuMfR8p
8bV+CNzDxi6HcS0ZK8LjpCSgFcOltwfcKzRc95mQp2JvMR9p8CTy1SoBJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4i57cLa5je5B7F1DG8N8j3BV4+MB8GA1UdIwQY
MBaAFJpi4mocr/9VMKcBkMjQAMEPJLlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgt
OTQ3ODU5YzBlY2M0LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgtOTQ3ODU5YzBlY2M0
LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsmhKhX6
FdQstvE149MHfiB2xmpDjl10V4oMu1uBGGGsrrK6bUYKsLYX9c960hD2gkw5zuil
FwY3h9nwYvB9sZay0gJosE1LOWbg5jkiqNBwyHSwNEOVPpvbERJeZhZiHgxrmFPF
KxfVzzZ1kZeO5D5IKRXG/Liya9+DUDXLCUKrXG8DOg/9PCK1p6/e7FNTvP0mU3oC
Vfu+3J1ZRZigGD5rj0xOibYCpjLAgxbpCHYtJzbyoSjrPPtruS4tm6Si3x3CjXyg
q6tLQjj1JGALnJUK33Ngx0gyy7GzKAbGNmFYR1Ae9pIyVDi6QF0aQjoMca+Kmcb5
C6AGnIP2c3ezPQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:49 2026 by rpki-client