Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          YOKNXdpzqNFJWgzY3/H5IQz7czlriioCE/9nqV950FM=
Subject key identifier:   A2:71:72:9A:37:59:50:8C:A2:3B:AD:5D:39:9B:E7:41:E7:A5:21:7D
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       019EB958463BF456A1479D73892E6E3F0B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          19F1
Signing time:             Fri 12 Jun 2026 01:00:30 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:30 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:30 +0000
Files and hashes:         1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
                          2: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
                          3: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
                          4: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: kY5igIO/GLdgpnzkTkCnyGUpEXOw3R8TM7DzL0wtjNg=)
                          5: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
                          6: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
                          7: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=)
                          8: teU9v00y3huMTlTBsjGbCe6m3oA.roa (hash: iFPT8116ArHbxLz6TCPLa+BxfjBa6xdFI8/BkdokrQM=)
                          9: yPdCNMxm54VLc8jKzVbuOxUrCAA.roa (hash: UJjDFFkG5idFe0rTyEPIIN4ZJqAJBjz+JR6hJQSsUzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:46:3b:f4:56:a1:47:9d:73:89:2e:6e:3f:0b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Jun 12 01:00:30 2026 GMT
            Not After : Jun 13 01:00:30 2026 GMT
        Subject: CN=a271729a3759508ca23bad5d399be741e7a5217d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:86:4b:8c:fb:09:c1:b2:a5:eb:25:f4:ea:
                    07:8e:dc:eb:8c:21:fc:8e:89:3e:b4:11:28:6c:aa:
                    8a:b1:cc:33:f8:ab:72:08:8e:62:2f:25:95:5f:53:
                    1f:34:ca:9c:36:ea:98:3c:a3:c1:fe:46:a2:14:26:
                    ae:19:22:86:cd:6c:13:fe:83:9e:46:24:dc:71:13:
                    bf:ba:f1:ed:6c:ca:3d:76:8d:9b:57:56:4c:da:97:
                    d4:78:2a:ad:c5:95:75:1b:a3:9d:90:76:81:b3:d6:
                    b4:cf:d5:0a:22:80:5b:4c:53:d2:a5:f2:f2:90:ab:
                    3e:2e:c3:6c:2b:2e:40:2d:e7:80:36:74:87:ab:90:
                    38:26:9b:7a:63:e0:f4:cb:0b:6c:c2:31:08:a9:a4:
                    fa:7f:9a:43:fc:42:69:22:fe:da:56:c5:14:fd:f8:
                    aa:60:bd:db:3a:67:67:29:9b:5d:4b:2d:59:d8:19:
                    83:db:b9:ed:18:62:55:fc:83:01:ab:4b:ca:c4:e0:
                    1f:71:be:62:3e:be:d9:32:da:a8:eb:22:f9:1c:ae:
                    e9:0a:31:c2:20:65:1f:f9:4c:82:86:bf:6b:1b:7f:
                    23:26:7c:f6:a8:d1:08:3f:93:ec:6d:2d:6f:24:88:
                    a8:fb:9a:63:44:26:21:ac:9e:19:2b:f4:2c:27:44:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:71:72:9A:37:59:50:8C:A2:3B:AD:5D:39:9B:E7:41:E7:A5:21:7D
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d1:e0:b7:d7:b6:c1:ba:4a:b9:59:7e:5a:e9:98:c1:65:09:
         a0:1c:c0:76:43:4d:46:70:ff:de:60:d9:6c:ba:0f:72:d7:67:
         1c:60:30:74:1f:87:f7:7f:0e:5d:da:b3:7c:b7:62:66:d7:db:
         f5:27:f1:27:c1:5a:a0:68:70:5f:10:ee:c6:d6:88:c0:59:c7:
         22:08:76:dd:65:87:bc:fe:42:18:79:8f:97:ae:b7:68:5b:23:
         39:73:d6:fa:2d:82:da:da:fd:85:aa:90:72:87:a8:29:21:22:
         94:42:78:19:24:e2:c9:03:2e:af:01:35:54:6b:31:ef:7d:89:
         d4:f7:7e:df:e5:e2:48:e9:b3:1a:50:04:9e:d0:3d:da:b0:0a:
         51:2d:ff:01:19:8c:4b:f0:66:e9:c1:68:5e:b9:d0:9a:bf:3a:
         0a:92:3e:db:51:ff:fe:7c:1e:1f:43:be:5c:4e:b2:e5:25:5c:
         e4:5b:9c:41:6a:2b:54:fc:b0:14:7d:af:16:12:00:75:64:e0:
         60:44:85:be:21:70:b0:77:17:f8:e1:c3:b0:d6:04:ad:6f:70:
         eb:90:d7:25:68:d9:a9:08:db:5a:1d:07:50:c9:4b:61:75:2c:
         19:d0:88:b5:83:92:56:3b:67:bf:d3:58:97:2c:8f:03:7c:6f:
         2f:25:7a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WEY79FahR51ziS5uPwsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjYwNjEyMDEwMDMwWhcNMjYwNjEzMDEwMDMwWjAzMTEwLwYDVQQD
EyhhMjcxNzI5YTM3NTk1MDhjYTIzYmFkNWQzOTliZTc0MWU3YTUyMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAommGS4z7CcGypesl9OoHjtzrjCH8
jok+tBEobKqKscwz+KtyCI5iLyWVX1MfNMqcNuqYPKPB/kaiFCauGSKGzWwT/oOe
RiTccRO/uvHtbMo9do2bV1ZM2pfUeCqtxZV1G6OdkHaBs9a0z9UKIoBbTFPSpfLy
kKs+LsNsKy5ALeeANnSHq5A4Jpt6Y+D0ywtswjEIqaT6f5pD/EJpIv7aVsUU/fiq
YL3bOmdnKZtdSy1Z2BmD27ntGGJV/IMBq0vKxOAfcb5iPr7ZMtqo6yL5HK7pCjHC
IGUf+UyChr9rG38jJnz2qNEIP5PsbS1vJIio+5pjRCYhrJ4ZK/QsJ0SkswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJxcpo3WVCMojutXTmb50HnpSF9MB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdHgt9e2
wbpKuVl+WumYwWUJoBzAdkNNRnD/3mDZbLoPctdnHGAwdB+H938OXdqzfLdiZtfb
9SfxJ8FaoGhwXxDuxtaIwFnHIgh23WWHvP5CGHmPl663aFsjOXPW+i2C2tr9haqQ
coeoKSEilEJ4GSTiyQMurwE1VGsx732J1Pd+3+XiSOmzGlAEntA92rAKUS3/ARmM
S/Bm6cFoXrnQmr86CpI+21H//nweH0O+XE6y5SVc5FucQWorVPywFH2vFhIAdWTg
YESFviFwsHcX+OHDsNYErW9w65DXJWjZqQjbWh0HUMlLYXUsGdCItYOSVjtnv9NY
lyyPA3xvLyV62w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:52 2026 by rpki-client