Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File:                     Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier:          GVIpdSBg4R1oq/mbhIrsloJXcaVPrzAr0bkWB6lkJE4=
Subject key identifier:   58:27:5D:29:C9:E5:CE:68:99:76:C8:B0:4D:86:B5:FE:C5:17:6C:B1
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer:       /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial:       019ED2E16AE726DF69870D60E93375B00111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number:          197F
Signing time:             Wed 17 Jun 2026 00:00:48 +0000
Manifest this update:     Wed 17 Jun 2026 00:00:48 +0000
Manifest next update:     Thu 18 Jun 2026 00:00:48 +0000
Files and hashes:         1: 3M28JHI7FacsIOAJQWmxce2Slr8.roa (hash: YkTIvgr/OPBfSq7cSMGcukiH55SIyz1JhUaAuApclZY=)
                          2: 7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa (hash: Odl4gnozu+3MVceJoIMFZfxLwPzuPyHk73z9Oo2EcD0=)
                          3: Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa (hash: /bwOAvbGES0zjJv2PTCP3py4NDDoCXEMIJubC3y4gDQ=)
                          4: IK5t8ZtR9FmBC9B2Oc1q_FzsZ60.roa (hash: 99eWXzzKhZzYTyaPK2nn6KPekh7aMTWJKB401rZwNvg=)
                          5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: nbIpOBX6M6BEovVg1r6cLhMJ7p9/8tLByz3Zb0Wf0CY=)
                          6: aqoU9zJ3XearIjlOINJlmfcvvuw.roa (hash: Sz6yVgzziCuFuMg8Vphcvorcn0t0kQDujyZ/W1bGUWw=)
                          7: khD-5GIOCtdSW94SprlTc6aKDCw.roa (hash: 9g8S387WfYIRLJ6x0iTubqGcDstg4uHac2ZeVMN70tA=)
                          8: kyQ4JI7k9YbINgfhHLT6m28Lt5g.roa (hash: k6gw+9YpfRZ8fBPrWOAfF6dmY/qo7leQ3UVRA8om9+s=)
                          9: qH5fLLWJkV1VZnXKxFAToZGD4BA.roa (hash: gujwjiPUnMht5bxbQJ8geZbpehgQ8vnJKIXcFg1nhbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 21:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:e1:6a:e7:26:df:69:87:0d:60:e9:33:75:b0:01:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
        Validity
            Not Before: Jun 17 00:00:48 2026 GMT
            Not After : Jun 18 00:00:48 2026 GMT
        Subject: CN=58275d29c9e5ce689976c8b04d86b5fec5176cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:d7:f0:dc:01:e5:79:83:d5:e1:24:a5:e3:
                    0a:98:8a:01:1d:52:5b:1b:ea:40:0c:06:b9:4c:98:
                    72:06:62:b6:cc:f5:fc:2f:5b:5f:85:34:e9:e5:d1:
                    b9:2f:7b:3f:e2:1c:0d:7b:d4:a2:05:1f:37:e3:c4:
                    37:5f:cf:bf:bb:19:23:4e:c8:12:66:ba:65:7c:03:
                    46:a0:10:04:af:b4:b2:bf:91:e8:f9:11:08:fd:2e:
                    83:80:26:72:89:7a:90:f0:b3:ab:12:74:a6:e7:f5:
                    b6:7d:75:85:46:e8:2c:2c:84:cf:a9:f3:fa:2e:fe:
                    33:03:d3:1a:54:fb:cb:9a:8c:2f:f8:85:03:9a:4e:
                    2b:e0:a1:5d:3b:da:92:2e:ca:8d:6c:50:61:ef:e1:
                    36:46:61:f4:4e:78:0a:4e:a9:af:04:93:71:8c:d5:
                    03:48:34:c6:e6:f2:69:53:27:6e:61:d7:94:52:84:
                    32:ea:8f:ff:ab:36:3f:36:e2:36:01:c8:50:0f:65:
                    c6:18:2d:94:51:7b:4f:ba:72:b6:00:ce:fe:f4:bb:
                    a3:77:49:1a:2a:7f:c0:27:7e:3d:47:24:bb:12:60:
                    7e:33:32:40:20:e7:25:ee:ca:65:80:01:67:2e:24:
                    d6:01:1c:a4:5f:84:5b:c9:35:b3:05:fe:16:fb:0e:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:5D:29:C9:E5:CE:68:99:76:C8:B0:4D:86:B5:FE:C5:17:6C:B1
            X509v3 Authority Key Identifier:
                keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:b1:ad:de:23:e4:17:cf:77:0a:60:4c:fc:e1:97:1d:5d:
         9f:df:aa:83:22:83:3a:8d:bb:0f:18:c3:f0:66:02:96:a4:3f:
         3d:e7:be:f0:a9:cb:93:c3:aa:db:9d:85:68:a4:59:5b:14:7a:
         a6:af:d3:a9:bb:85:03:6d:76:8d:fa:b7:d2:ba:a5:67:e5:e9:
         8c:8f:fb:48:7a:53:4c:77:ad:8b:f8:57:d9:a5:1e:3d:00:02:
         dc:78:e9:66:d0:ae:68:b2:50:bb:5f:b7:09:38:58:d5:a1:08:
         45:cc:c0:96:49:b5:6c:48:54:7f:8e:32:e5:66:61:54:c0:13:
         69:1a:e8:78:d9:91:fa:02:ed:9e:12:41:51:82:20:8e:69:0f:
         33:f9:58:e6:77:27:c1:09:cc:7c:74:fb:2a:49:f4:2e:12:33:
         91:43:cf:92:bf:6d:0f:14:94:89:20:98:eb:2d:b3:87:c8:94:
         0c:fa:22:df:c8:66:f0:9c:20:2d:a0:6a:2a:67:5b:95:68:bf:
         77:25:b7:61:e1:82:94:d9:85:ed:3a:87:fa:60:67:0e:ee:14:
         9c:f6:eb:89:5d:63:53:83:20:99:2c:4f:db:69:39:3e:20:36:
         85:46:ba:3e:72:d2:d5:2a:ea:70:9b:94:c6:71:1e:2c:77:32:
         a8:a4:1a:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7S4WrnJt9phw1g6TN1sAERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm
MTZhOWYwHhcNMjYwNjE3MDAwMDQ4WhcNMjYwNjE4MDAwMDQ4WjAzMTEwLwYDVQQD
Eyg1ODI3NWQyOWM5ZTVjZTY4OTk3NmM4YjA0ZDg2YjVmZWM1MTc2Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowLX8NwB5XmD1eEkpeMKmIoBHVJb
G+pADAa5TJhyBmK2zPX8L1tfhTTp5dG5L3s/4hwNe9SiBR8348Q3X8+/uxkjTsgS
ZrplfANGoBAEr7Syv5Ho+REI/S6DgCZyiXqQ8LOrEnSm5/W2fXWFRugsLITPqfP6
Lv4zA9MaVPvLmowv+IUDmk4r4KFdO9qSLsqNbFBh7+E2RmH0TngKTqmvBJNxjNUD
SDTG5vJpUyduYdeUUoQy6o//qzY/NuI2AchQD2XGGC2UUXtPunK2AM7+9Lujd0ka
Kn/AJ349RyS7EmB+MzJAIOcl7splgAFnLiTWARykX4RbyTWzBf4W+w7UWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgnXSnJ5c5omXbIsE2Gtf7FF2yxMB8GA1UdIwQY
MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt
ODZhNTUxOGUyZDUyLzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy
LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHaxrd4j
5BfPdwpgTPzhlx1dn9+qgyKDOo27DxjD8GYClqQ/Pee+8KnLk8Oq252FaKRZWxR6
pq/TqbuFA212jfq30rqlZ+XpjI/7SHpTTHeti/hX2aUePQAC3HjpZtCuaLJQu1+3
CThY1aEIRczAlkm1bEhUf44y5WZhVMATaRroeNmR+gLtnhJBUYIgjmkPM/lY5ncn
wQnMfHT7Kkn0LhIzkUPPkr9tDxSUiSCY6y2zh8iUDPoi38hm8JwgLaBqKmdblWi/
dyW3YeGClNmF7TqH+mBnDu4UnPbriV1jU4MgmSxP22k5PiA2hUa6PnLS1SrqcJuU
xnEeLHcyqKQa4g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 04:19:41 2026 by rpki-client