Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File:                     mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier:          02IWQAJBitiGLTbzfdZlyfeYJy0fET6IWGDcigVXOZc=
Subject key identifier:   F4:27:D7:98:2B:3F:9F:F4:C5:87:71:16:75:35:70:90:E8:BE:46:FA
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer:       /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial:       019EB6C58C66327171CA0887ECAF2202B9E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number:          0579
Signing time:             Thu 11 Jun 2026 13:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 13:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 13:01:00 +0000
Files and hashes:         1: 3V5hdONsM9mnD45S8jPJ1WtCJLE.roa (hash: ycXvRVGBtkt6ad8wPNg1L/oY1B8Crh02govZSgpTHFQ=)
                          2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: QvXOfJYvbqwl838OAFLlt0Y+6M1xQLtksCQGnsQEUPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:8c:66:32:71:71:ca:08:87:ec:af:22:02:b9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
        Validity
            Not Before: Jun 11 13:01:00 2026 GMT
            Not After : Jun 12 13:01:00 2026 GMT
        Subject: CN=f427d7982b3f9ff4c587711675357090e8be46fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:72:55:13:4b:ec:4f:45:85:4e:25:2d:6b:
                    4f:d4:37:9b:20:90:c1:7b:09:f8:13:84:f2:ee:61:
                    1c:dc:fd:ad:4c:bd:b8:aa:57:32:7f:9c:91:e1:4e:
                    64:1d:29:52:ee:cb:1a:6d:21:e7:c6:d4:24:5f:3c:
                    73:f8:8b:b0:b0:24:29:6e:8a:02:ce:2f:dc:9e:3b:
                    23:14:71:39:07:db:0f:d2:40:43:64:1b:79:d8:aa:
                    45:ef:cc:97:3c:03:9a:81:83:64:b8:31:15:16:cd:
                    63:5b:4b:a5:0f:30:38:94:9a:6e:20:10:d7:0c:4e:
                    b9:a3:bf:91:84:26:50:c7:77:3f:3f:73:a0:56:ea:
                    89:14:d6:fe:ce:e5:96:70:31:63:dc:a0:4e:d3:44:
                    f2:fa:06:48:11:18:f5:63:ee:b7:cd:cf:b5:8f:53:
                    d8:34:bb:32:19:90:d0:6a:7b:55:36:7c:f0:44:ac:
                    3e:e2:ec:e2:c5:bb:05:38:4d:df:f9:52:c7:87:ec:
                    46:94:c9:9f:62:e1:ba:ac:e7:c4:25:f5:8a:e0:01:
                    eb:73:7d:0d:ab:b2:50:f1:2d:08:f6:1a:7a:cb:fa:
                    64:0c:5c:3a:ab:85:25:f6:72:44:b0:c0:e7:25:c1:
                    bb:34:df:49:64:a8:94:89:12:da:dd:fd:74:0e:43:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:D7:98:2B:3F:9F:F4:C5:87:71:16:75:35:70:90:E8:BE:46:FA
            X509v3 Authority Key Identifier:
                keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:02:1d:84:e1:7a:c5:c5:6d:a7:68:85:1b:e0:57:93:91:6a:
         35:38:9e:e2:74:03:17:60:7d:1d:19:2b:e5:c5:5e:ff:33:e5:
         44:0c:be:f6:a8:a6:82:45:6e:e0:be:f5:a1:25:36:7a:bd:31:
         bd:4c:0b:1b:9c:5c:b4:18:a7:59:7f:65:24:66:2d:20:de:41:
         52:e4:42:ab:9a:c9:5c:4e:76:74:32:73:e1:cd:7b:c3:ed:8d:
         5f:5d:6a:2d:9d:7f:2e:70:3e:1c:22:54:0a:69:d3:56:f1:14:
         fa:02:1f:ec:c5:87:0f:27:3e:27:31:c8:4e:25:8d:6b:06:eb:
         59:9a:d8:c5:71:a6:e3:f0:c4:08:f5:65:02:b7:59:7c:7a:cf:
         1f:f6:09:5d:74:95:32:3d:7c:6f:61:ac:56:ab:c0:0c:9d:23:
         f4:66:c0:37:4e:9e:c1:5e:fe:3d:26:18:be:b5:59:47:90:9b:
         6e:8c:59:11:6a:58:07:54:73:dd:28:2e:73:46:db:f1:eb:a4:
         89:81:cd:39:c1:1b:d0:5a:43:eb:6f:0f:a8:99:18:73:10:64:
         05:cf:55:33:fa:e5:69:df:ed:f0:f8:3f:52:10:8e:2c:02:a7:
         66:45:41:b3:a3:6c:ca:8d:e7:d6:0f:98:4e:6f:31:1d:8b:00:
         12:ba:ea:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xYxmMnFxygiH7K8iArnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTNmZTc3ZjYzYmVlOTA4ODhmY2RlMWExMjVhZGZlNjUz
NWQ4MTYwHhcNMjYwNjExMTMwMTAwWhcNMjYwNjEyMTMwMTAwWjAzMTEwLwYDVQQD
EyhmNDI3ZDc5ODJiM2Y5ZmY0YzU4NzcxMTY3NTM1NzA5MGU4YmU0NmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0hyVRNL7E9FhU4lLWtP1DebIJDB
ewn4E4Ty7mEc3P2tTL24qlcyf5yR4U5kHSlS7ssabSHnxtQkXzxz+IuwsCQpbooC
zi/cnjsjFHE5B9sP0kBDZBt52KpF78yXPAOagYNkuDEVFs1jW0ulDzA4lJpuIBDX
DE65o7+RhCZQx3c/P3OgVuqJFNb+zuWWcDFj3KBO00Ty+gZIERj1Y+63zc+1j1PY
NLsyGZDQantVNnzwRKw+4uzixbsFOE3f+VLHh+xGlMmfYuG6rOfEJfWK4AHrc30N
q7JQ8S0I9hp6y/pkDFw6q4Ul9nJEsMDnJcG7NN9JZKiUiRLa3f10DkPS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQn15grP5/0xYdxFnU1cJDovkb6MB8GA1UdIwQY
MBaAFJmT/nf2O+6QiI/N4aElrf5lNdgWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYt
NjY5NTllMWJiN2ZlLzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYtNjY5NTllMWJiN2Zl
LzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQIdhOF6
xcVtp2iFG+BXk5FqNTie4nQDF2B9HRkr5cVe/zPlRAy+9qimgkVu4L71oSU2er0x
vUwLG5xctBinWX9lJGYtIN5BUuRCq5rJXE52dDJz4c17w+2NX11qLZ1/LnA+HCJU
CmnTVvEU+gIf7MWHDyc+JzHITiWNawbrWZrYxXGm4/DECPVlArdZfHrPH/YJXXSV
Mj18b2GsVqvADJ0j9GbAN06ewV7+PSYYvrVZR5CbboxZEWpYB1Rz3Sguc0bb8euk
iYHNOcEb0FpD628PqJkYcxBkBc9VM/rlad/t8Pg/UhCOLAKnZkVBs6Nsyo3n1g+Y
Tm8xHYsAErrqyg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:39:58 2026 by rpki-client