Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          lySciaalB/ZvDYh3AOG8TodtwdVKMN1UmkeXP3PGVQs=
Subject key identifier:   1F:69:24:B1:E9:AA:EB:77:93:B6:9B:12:8A:80:03:7E:DA:E7:00:6A
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019EB87CB57C3A4FA1F36486612F2B7739AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          197F
Signing time:             Thu 11 Jun 2026 21:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:40 +0000
Files and hashes:         1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=)
                          2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=)
                          3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=)
                          4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=)
                          5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=)
                          6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=)
                          7: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (hash: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=)
                          8: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=)
                          9: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=)
                          10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: QSDCfpDfxb8wTYF5pgCZaxCVQNV42ryyfl0My1rQAjc=)
                          11: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=)
                          12: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=)
                          13: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=)
                          14: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=)
                          15: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=)
                          16: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=)
                          17: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=)
                          18: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=)
                          19: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=)
                          20: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=)
                          21: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=)
                          22: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:b5:7c:3a:4f:a1:f3:64:86:61:2f:2b:77:39:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Jun 11 21:00:40 2026 GMT
            Not After : Jun 12 21:00:40 2026 GMT
        Subject: CN=1f6924b1e9aaeb7793b69b128a80037edae7006a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:63:f3:c0:35:47:23:2c:eb:6e:3b:96:a0:3c:
                    da:08:65:a9:dc:3b:e2:a2:78:f1:1b:36:97:a8:df:
                    4b:14:8b:68:1b:84:b7:6b:45:73:c3:c8:af:39:47:
                    e6:39:ce:26:4f:0f:cf:ef:11:a1:99:e2:a7:fc:61:
                    31:af:c5:80:fa:83:39:7f:58:5a:ea:3d:4d:a7:22:
                    31:0f:62:c8:85:e4:ea:23:43:a3:b2:0b:1c:5e:05:
                    ca:63:17:8a:ba:e5:f4:68:76:8d:f5:71:46:67:58:
                    32:3d:bb:79:8a:8f:9f:2f:62:67:9f:04:3a:68:46:
                    33:d3:8b:10:54:a9:c9:f8:f0:b0:a5:91:db:4d:ad:
                    04:1b:5c:a4:3a:fe:41:1b:5e:03:ca:84:0e:a6:8a:
                    4c:fc:c2:3d:7e:d3:16:d2:f5:dc:e3:f2:cd:b0:64:
                    e0:7f:0f:86:df:50:9f:48:18:fc:ba:e7:0a:53:8b:
                    c1:5e:d9:8d:2a:6f:44:d4:ab:7f:88:ed:d1:6d:a1:
                    80:6c:fa:49:26:8a:c1:df:72:b1:fd:3d:8b:1a:8a:
                    2b:b7:ad:fb:1f:d7:05:b9:84:e3:7a:ee:a1:3a:f7:
                    9d:09:0f:1f:2a:d1:6e:03:28:6b:ab:91:44:ce:e0:
                    26:06:9e:4f:95:29:b1:d4:7c:09:df:43:1b:18:c4:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:24:B1:E9:AA:EB:77:93:B6:9B:12:8A:80:03:7E:DA:E7:00:6A
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:96:e9:a5:b5:e8:68:f5:ab:20:05:06:14:9f:db:5c:f6:
         b6:44:39:50:49:06:05:48:a9:60:49:d9:4b:2f:ac:71:ec:bc:
         c3:7b:dc:5f:04:cf:8d:7c:bf:6a:c2:35:44:1b:21:80:a2:b9:
         9f:dd:bd:29:89:0b:a5:fc:d5:d5:55:f2:0a:80:93:99:a4:e8:
         4a:b8:4f:34:1b:a0:de:9e:a9:d5:60:18:9e:ca:f3:c5:13:7a:
         74:c5:3d:7c:dc:01:7b:47:61:fa:27:ce:25:b5:9a:1c:2b:11:
         95:ce:2f:b4:27:16:c5:a5:9a:1a:5e:60:38:6e:15:6f:1d:7e:
         8b:b7:ac:85:34:0d:29:53:aa:79:bf:29:9d:aa:83:d6:6b:48:
         f0:8c:4d:08:e9:12:a3:29:6f:27:66:54:37:d3:c0:ef:31:ec:
         67:54:0a:03:a9:d4:70:4f:1b:11:30:aa:f3:3a:b7:4f:6b:20:
         57:0e:57:06:4e:40:7c:92:22:d3:2b:68:54:00:8a:7b:70:cc:
         dc:54:56:e4:36:31:59:61:8f:de:dc:4b:23:21:7f:37:e2:fe:
         49:c3:c5:92:9b:bf:cc:35:60:9c:29:3b:cd:b9:03:4c:c8:7d:
         45:ee:cf:da:3f:52:54:f4:bb:9e:e5:0e:09:6d:19:04:ed:8b:
         7c:04:3b:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fLV8Ok+h82SGYS8rdzmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjYwNjExMjEwMDQwWhcNMjYwNjEyMjEwMDQwWjAzMTEwLwYDVQQD
EygxZjY5MjRiMWU5YWFlYjc3OTNiNjliMTI4YTgwMDM3ZWRhZTcwMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mPzwDVHIyzrbjuWoDzaCGWp3Dvi
onjxGzaXqN9LFItoG4S3a0Vzw8ivOUfmOc4mTw/P7xGhmeKn/GExr8WA+oM5f1ha
6j1NpyIxD2LIheTqI0OjsgscXgXKYxeKuuX0aHaN9XFGZ1gyPbt5io+fL2JnnwQ6
aEYz04sQVKnJ+PCwpZHbTa0EG1ykOv5BG14DyoQOpopM/MI9ftMW0vXc4/LNsGTg
fw+G31CfSBj8uucKU4vBXtmNKm9E1Kt/iO3RbaGAbPpJJorB33Kx/T2LGoort637
H9cFuYTjeu6hOvedCQ8fKtFuAyhrq5FEzuAmBp5PlSmx1HwJ30MbGMSh4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9pJLHpqut3k7abEoqAA37a5wBqMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBWW6aW1
6Gj1qyAFBhSf21z2tkQ5UEkGBUipYEnZSy+scey8w3vcXwTPjXy/asI1RBshgKK5
n929KYkLpfzV1VXyCoCTmaToSrhPNBug3p6p1WAYnsrzxRN6dMU9fNwBe0dh+ifO
JbWaHCsRlc4vtCcWxaWaGl5gOG4Vbx1+i7eshTQNKVOqeb8pnaqD1mtI8IxNCOkS
oylvJ2ZUN9PA7zHsZ1QKA6nUcE8bETCq8zq3T2sgVw5XBk5AfJIi0ytoVACKe3DM
3FRW5DYxWWGP3txLIyF/N+L+ScPFkpu/zDVgnCk7zbkDTMh9Re7P2j9SVPS7nuUO
CW0ZBO2LfAQ7OA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:16:40 2026 by rpki-client