Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File:                     tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier:          Hk1n/6qprZJ5HfcRlz8zs5tQE0Ddx5lpsgvmHXueSTw=
Subject key identifier:   C9:2F:A6:02:EF:3A:CB:09:0D:76:FC:F1:E9:14:A5:8E:F5:5B:E8:87
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer:       /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial:       019EE21E788D5C31C4F7E50EF371711AF4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number:          0C5F
Signing time:             Fri 19 Jun 2026 23:01:48 +0000
Manifest this update:     Fri 19 Jun 2026 23:01:48 +0000
Manifest next update:     Sat 20 Jun 2026 23:01:48 +0000
Files and hashes:         1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
                          2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: d9larea3mXcuOugJ2PnMbpjjCvMJdjWGUptACTNOyGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:1e:78:8d:5c:31:c4:f7:e5:0e:f3:71:71:1a:f4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
        Validity
            Not Before: Jun 19 23:01:48 2026 GMT
            Not After : Jun 20 23:01:48 2026 GMT
        Subject: CN=c92fa602ef3acb090d76fcf1e914a58ef55be887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:f8:98:e3:99:c0:3b:a8:47:7e:91:68:71:
                    11:40:79:f3:95:bc:a3:a2:c6:3c:d3:26:ec:ab:cb:
                    fe:ba:c8:d1:1a:d6:a6:c0:6b:e4:33:83:1d:51:41:
                    94:33:c8:19:12:b7:81:4d:30:ac:a2:94:f5:1d:f0:
                    9c:e8:78:c5:43:3b:0e:5f:0c:53:d7:df:f4:c3:53:
                    b6:0d:bd:a4:62:eb:73:90:7d:d0:af:41:42:f3:2a:
                    69:af:b1:29:65:99:53:c1:81:64:a8:f6:e6:e3:a4:
                    ce:ca:ea:cf:4e:1b:f7:7c:24:ed:6f:5d:06:b2:cc:
                    5d:43:a5:7b:84:41:94:ec:b3:b9:44:0e:f1:da:0b:
                    2f:2b:50:ac:90:16:f3:87:dc:54:62:4c:20:82:78:
                    71:de:9d:a8:75:68:a2:d5:25:ef:69:ce:f2:cf:f8:
                    2b:ec:53:e1:61:d7:3c:ea:5f:db:76:59:bb:2f:85:
                    16:b3:0f:df:64:75:bc:7f:2e:d9:6e:5c:23:35:55:
                    15:83:00:1a:86:69:c8:2c:d2:74:31:91:f0:81:da:
                    a8:d2:c3:6c:cb:9c:26:37:36:5e:4a:59:7f:fa:79:
                    26:dd:52:a9:ba:d2:d1:e5:44:93:aa:0e:9c:ad:fb:
                    02:f2:9c:2b:d6:4c:36:b4:36:85:4c:1b:04:e2:42:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2F:A6:02:EF:3A:CB:09:0D:76:FC:F1:E9:14:A5:8E:F5:5B:E8:87
            X509v3 Authority Key Identifier:
                keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:fb:35:46:56:9a:fe:b3:8b:92:1b:cf:6a:59:55:81:9b:
         02:53:a4:1b:3c:d8:98:c0:f0:d1:20:f7:70:49:02:21:15:b7:
         43:0d:13:53:d4:0e:69:1b:eb:8d:62:72:f9:f8:09:08:d2:00:
         80:9d:76:41:24:3b:0f:40:7f:7e:97:21:18:aa:7c:51:f9:3c:
         b1:11:1c:0f:d7:64:40:ac:a6:f7:cf:a0:c4:bd:86:e0:d0:a0:
         18:5f:37:a8:c5:02:7c:32:3a:41:bd:80:bd:f9:c6:23:0d:cc:
         2f:61:26:44:62:93:d7:67:22:ea:b8:3d:67:6a:28:38:90:e8:
         9d:b5:a3:8f:fb:01:95:d3:71:bf:08:be:2f:7a:b2:85:d2:fe:
         6f:71:23:ce:8c:db:06:65:05:d5:bc:34:84:c2:b4:a4:ba:32:
         12:6c:20:71:f0:f7:21:ad:e6:53:81:3e:12:67:0e:04:a0:9b:
         ad:0e:a6:be:06:f1:4c:bd:c6:b0:b5:7e:bf:21:b1:5f:c7:52:
         8a:34:e9:6d:72:3c:89:c7:9e:c5:2e:4a:60:e7:d4:d1:26:8f:
         b8:d6:3b:91:a6:5c:1f:6c:ef:f8:ce:64:34:e5:80:18:c5:92:
         51:8e:03:c9:0e:a1:4d:24:63:7d:8e:d4:70:80:90:df:5d:52:
         c0:6b:c2:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7iHniNXDHE9+UO83FxGvShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl
YzMzNDMwHhcNMjYwNjE5MjMwMTQ4WhcNMjYwNjIwMjMwMTQ4WjAzMTEwLwYDVQQD
EyhjOTJmYTYwMmVmM2FjYjA5MGQ3NmZjZjFlOTE0YTU4ZWY1NWJlODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Br4mOOZwDuoR36RaHERQHnzlbyj
osY80ybsq8v+usjRGtamwGvkM4MdUUGUM8gZEreBTTCsopT1HfCc6HjFQzsOXwxT
19/0w1O2Db2kYutzkH3Qr0FC8yppr7EpZZlTwYFkqPbm46TOyurPThv3fCTtb10G
ssxdQ6V7hEGU7LO5RA7x2gsvK1CskBbzh9xUYkwggnhx3p2odWii1SXvac7yz/gr
7FPhYdc86l/bdlm7L4UWsw/fZHW8fy7ZblwjNVUVgwAahmnILNJ0MZHwgdqo0sNs
y5wmNzZeSll/+nkm3VKputLR5USTqg6crfsC8pwr1kw2tDaFTBsE4kKwjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkvpgLvOssJDXb88ekUpY71W+iHMB8GA1UdIwQY
MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt
MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi
LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeX7NUZW
mv6zi5Ibz2pZVYGbAlOkGzzYmMDw0SD3cEkCIRW3Qw0TU9QOaRvrjWJy+fgJCNIA
gJ12QSQ7D0B/fpchGKp8Ufk8sREcD9dkQKym98+gxL2G4NCgGF83qMUCfDI6Qb2A
vfnGIw3ML2EmRGKT12ci6rg9Z2ooOJDonbWjj/sBldNxvwi+L3qyhdL+b3Ejzozb
BmUF1bw0hMK0pLoyEmwgcfD3Ia3mU4E+EmcOBKCbrQ6mvgbxTL3GsLV+vyGxX8dS
ijTpbXI8iceexS5KYOfU0SaPuNY7kaZcH2zv+M5kNOWAGMWSUY4DyQ6hTSRjfY7U
cICQ311SwGvC/w==
-----END CERTIFICATE-----
Generated at Sat Jun 20 07:25:37 2026 by rpki-client