Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File:                     5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier:          HqvdwSjeF5hymdP3lkCon1WsEPolCs01/gpxu42RbXQ=
Subject key identifier:   C8:0F:9B:52:67:E6:EE:19:D0:CB:DE:64:09:F1:2A:1D:D7:C3:7B:9A
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer:       /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial:       019F189ED2A4D6EC330DA442502D30C66A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number:          128C
Signing time:             Tue 30 Jun 2026 13:01:29 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:29 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:29 +0000
Files and hashes:         1: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (hash: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0=)
                          2: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (hash: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g=)
                          3: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: wsfPRYgW0ies0h9b6APg1x+uvf8AJFUzoSSXf1Hg8DU=)
                          4: 6ecKe0A8FdH_pCFTNXNYem6VwN0.roa (hash: KZ+1oly4tcR/bcNP0ACIfGBzE0lasROyGqTBaCkUeaU=)
                          5: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (hash: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc=)
                          6: CZHwjRKRoezncj5wC2tcP7BId0k.roa (hash: NtnGWR67eyLICzLT2JOCuoqA4A2EyKFmQWPiA8KDgfI=)
                          7: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (hash: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:d2:a4:d6:ec:33:0d:a4:42:50:2d:30:c6:6a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
        Validity
            Not Before: Jun 30 13:01:29 2026 GMT
            Not After : Jul  1 13:01:29 2026 GMT
        Subject: CN=c80f9b5267e6ee19d0cbde6409f12a1dd7c37b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:1c:26:57:25:72:d6:72:9f:69:6a:39:70:
                    a1:8f:06:98:95:a8:0a:97:d7:d4:c4:aa:ee:1f:3d:
                    2d:33:df:77:5d:29:82:ce:80:a6:1a:a0:52:6f:79:
                    69:b3:a5:56:49:50:2f:17:e1:58:fe:17:71:cd:bc:
                    96:59:87:57:3b:0d:a4:76:b1:a1:20:c4:c8:3f:4f:
                    b5:81:6e:bf:11:e2:cd:fa:c6:42:df:7c:87:3d:9a:
                    46:cb:e9:96:d4:fc:59:a9:44:88:8b:2b:81:6d:88:
                    ea:d9:3c:c1:c5:c3:64:64:d8:65:6f:87:c1:2a:e6:
                    83:fc:af:68:56:21:90:f9:cd:06:48:27:1a:dd:e3:
                    44:a6:48:82:eb:57:af:4a:1d:5f:57:5d:60:b9:05:
                    a7:a7:7b:ce:fb:6e:99:dc:bb:3d:f6:86:c6:86:ce:
                    2d:54:af:ca:31:0d:aa:a2:e5:39:d7:56:c2:c6:be:
                    6a:05:d2:ed:ea:91:0d:c9:e8:d2:b3:9b:72:96:76:
                    15:fe:3c:29:b1:8a:16:9c:74:f7:38:90:a5:3d:b9:
                    07:6e:1a:aa:f8:f6:e0:ef:60:fd:35:74:bb:a3:bb:
                    88:0b:9c:9b:4a:fd:f5:b1:97:76:9c:70:ed:fb:c5:
                    95:f4:9b:12:ba:d7:b7:99:8a:c8:d0:65:fa:72:08:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0F:9B:52:67:E6:EE:19:D0:CB:DE:64:09:F1:2A:1D:D7:C3:7B:9A
            X509v3 Authority Key Identifier:
                keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:91:6d:48:40:8b:ef:58:5a:0d:82:fb:5e:62:4a:4a:80:49:
         26:4e:46:89:03:f2:1d:5e:43:17:e1:db:53:ef:5e:89:20:7a:
         ec:ba:ca:ea:5e:0c:4e:38:38:9f:88:b8:a6:21:38:9a:f7:95:
         93:bd:a1:3c:c7:4d:ba:53:6d:4f:8f:61:75:47:2e:6e:99:3e:
         99:b8:8f:14:08:50:74:29:d5:c9:e2:dc:3a:0d:5a:d8:3d:24:
         71:31:7c:22:71:d4:2d:2e:f9:84:95:6b:41:05:41:2e:4c:25:
         6a:88:21:cf:3a:6f:fa:22:af:70:8d:b7:c5:2d:3b:45:4b:9b:
         fa:91:f9:41:e9:09:33:8a:ea:4c:0f:27:4b:48:82:68:24:4a:
         02:d2:82:37:2e:89:e2:72:1f:e3:4b:7a:cf:5e:f8:84:fc:52:
         eb:13:48:93:01:bb:c2:04:1a:7a:90:c2:98:c8:09:31:b1:30:
         9b:5e:57:16:25:60:9e:f1:2e:c7:8e:c2:dc:bf:76:ce:d5:51:
         cc:80:e0:a0:3c:f4:1e:96:9c:81:a9:26:81:40:58:f0:3d:21:
         a9:62:4b:7c:76:ad:f0:71:79:a4:ae:c2:a0:df:6e:eb:be:7c:
         82:bc:d1:86:f8:85:d6:61:4f:d3:f1:ad:8d:e1:46:a7:85:31:
         b2:03:dc:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YntKk1uwzDaRCUC0wxmprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjYwNjMwMTMwMTI5WhcNMjYwNzAxMTMwMTI5WjAzMTEwLwYDVQQD
EyhjODBmOWI1MjY3ZTZlZTE5ZDBjYmRlNjQwOWYxMmExZGQ3YzM3YjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTYcJlclctZyn2lqOXChjwaYlagK
l9fUxKruHz0tM993XSmCzoCmGqBSb3lps6VWSVAvF+FY/hdxzbyWWYdXOw2kdrGh
IMTIP0+1gW6/EeLN+sZC33yHPZpGy+mW1PxZqUSIiyuBbYjq2TzBxcNkZNhlb4fB
KuaD/K9oViGQ+c0GSCca3eNEpkiC61evSh1fV11guQWnp3vO+26Z3Ls99obGhs4t
VK/KMQ2qouU511bCxr5qBdLt6pENyejSs5tylnYV/jwpsYoWnHT3OJClPbkHbhqq
+Pbg72D9NXS7o7uIC5ybSv31sZd2nHDt+8WV9JsSute3mYrI0GX6cgitmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgPm1Jn5u4Z0MveZAnxKh3Xw3uaMB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5FtSECL
71haDYL7XmJKSoBJJk5GiQPyHV5DF+HbU+9eiSB67LrK6l4MTjg4n4i4piE4mveV
k72hPMdNulNtT49hdUcubpk+mbiPFAhQdCnVyeLcOg1a2D0kcTF8InHULS75hJVr
QQVBLkwlaoghzzpv+iKvcI23xS07RUub+pH5QekJM4rqTA8nS0iCaCRKAtKCNy6J
4nIf40t6z174hPxS6xNIkwG7wgQaepDCmMgJMbEwm15XFiVgnvEux47C3L92ztVR
zIDgoDz0HpacgakmgUBY8D0hqWJLfHat8HF5pK7CoN9u6758grzRhviF1mFP0/Gt
jeFGp4UxsgPcqQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:22 2026 by rpki-client