Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
File:                     e2nv5gFvctRZLxsLq5GGR2_zop0.mft (raw, json)
Hash identifier:          L7lNaB45c8oiY7ISch3XFSO/Ls/iE9JgJ0bc+qMQixQ=
Subject key identifier:   03:1B:A6:D1:94:B1:0D:09:64:14:1F:E1:7D:0E:35:31:9F:AF:03:96
Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
Certificate issuer:       /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
Certificate serial:       019F129C21C7A7B637AE8346BAF46CC7F91F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
Manifest number:          0194
Signing time:             Mon 29 Jun 2026 09:00:49 +0000
Manifest this update:     Mon 29 Jun 2026 09:00:49 +0000
Manifest next update:     Tue 30 Jun 2026 09:00:49 +0000
Files and hashes:         1: DhhEzrCSvtlaHslOfzFqY95aZ90.roa (hash: VOvJoF9EWNuxMkJTKQzWpsIdU1FWWr51hxl56iJSfuY=)
                          2: ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa (hash: KJYnqYyOofOZzadxEkB/wfQ8LlG+IKUvm99MnwqJGO4=)
                          3: X1S1z6CrzJkdF4dCeCm-se-s4J8.roa (hash: Y5udF7iCsk7tkEh52H+ceEwvOnXrZWaMJVMZZgF25Vw=)
                          4: e2nv5gFvctRZLxsLq5GGR2_zop0.crl (hash: ATwAvSul0t8P2fEshRqxHUICtvZI/eBDkaRNPYLFk6k=)
                          5: oNyVV9F-UayJsBNMERK1JiJ0D7o.roa (hash: k7jOjhLjlTb4tvt1HZS9xHgB6yHXR3vwiFuwHTGcB/0=)
                          6: pwN-2lFR66jS8tzjgg4a5hQ9SZc.roa (hash: vx5holsz8fk1dc3w+YKiWzzSNZ1ZzCCUAaCQLnUJmIY=)
                          7: r23QCb42Tz1gHCNmFF9MYh0kkS0.roa (hash: ULoM0qs6keKyvA3e5JZk0wAwuCLfnphbYK3aR4+GSfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:21:c7:a7:b6:37:ae:83:46:ba:f4:6c:c7:f9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
        Validity
            Not Before: Jun 29 09:00:49 2026 GMT
            Not After : Jun 30 09:00:49 2026 GMT
        Subject: CN=031ba6d194b10d0964141fe17d0e35319faf0396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:0f:8f:7b:33:dd:b3:1f:bf:fb:77:6f:3b:
                    9f:c1:be:93:9c:df:da:fe:85:fb:aa:a2:74:2a:f8:
                    ad:b5:47:39:8f:76:ec:c1:af:03:33:86:1a:92:44:
                    51:35:ce:8a:d1:ea:7b:2e:5b:2d:3c:d5:65:a7:85:
                    f0:dc:1a:77:ea:5e:6c:ac:bd:78:e4:22:04:ac:96:
                    69:b6:26:7c:19:16:62:cf:2c:a7:ef:fa:0e:48:8b:
                    8c:70:67:23:e3:76:f7:2a:33:59:26:5c:37:c5:89:
                    de:97:7a:5c:c0:71:f9:3f:57:ba:33:19:13:fd:fe:
                    db:d3:1d:45:00:9f:18:e0:4e:24:ac:f4:d4:82:57:
                    c7:6e:df:6d:b2:19:9c:b2:b8:89:1e:4c:3c:a4:78:
                    03:15:15:c3:03:79:57:be:54:37:3a:55:db:3a:2d:
                    a7:df:83:99:cb:6e:83:e0:27:b4:c9:ee:38:20:12:
                    45:10:bf:ac:52:e9:2b:c2:91:0b:b7:f6:9a:1f:23:
                    5e:5e:58:0b:71:53:d3:cb:4b:e7:97:af:f4:5c:eb:
                    1f:ed:50:8d:b4:c3:ad:73:56:84:61:38:dc:60:43:
                    37:ba:1a:2a:ff:4d:e3:9a:65:a7:ef:fb:e7:b0:48:
                    31:ec:f3:12:cd:4a:7b:d0:17:4a:90:26:36:f7:f5:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1B:A6:D1:94:B1:0D:09:64:14:1F:E1:7D:0E:35:31:9F:AF:03:96
            X509v3 Authority Key Identifier:
                keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:39:86:9b:67:5f:06:a2:7f:99:ba:0d:c9:01:1a:8e:07:
         14:1b:0a:17:21:f9:a3:6f:44:61:af:f5:91:c0:58:7a:9c:29:
         73:ed:11:80:f4:15:f1:70:51:cd:75:ec:b6:ba:22:0f:88:12:
         6c:ab:b2:25:cd:0b:d7:6d:6f:da:0e:84:0b:93:34:87:ac:58:
         50:19:9b:e9:e9:cb:5f:e4:b5:ff:c8:ce:3f:19:9d:1b:de:a8:
         4e:b8:f5:35:01:54:b9:a8:73:01:82:59:ff:90:e1:2b:07:31:
         30:71:49:1f:72:19:3e:6e:c0:1c:29:b8:d6:c6:e2:1c:63:3c:
         dd:94:d6:f2:59:30:26:24:2b:46:40:63:e4:86:42:f8:9f:f6:
         cd:9c:26:0b:12:8a:ec:7f:35:2e:2b:d0:be:80:21:7a:5f:6b:
         fe:fb:91:78:48:5f:76:f5:5f:7b:5d:70:60:1e:bf:4e:7b:f6:
         b3:c5:07:8b:92:4d:2d:f3:63:83:29:c6:e4:46:97:65:dd:d5:
         07:c1:64:4d:dc:dd:13:b3:cb:26:2f:4d:3d:0f:d7:ac:2f:4c:
         9d:4b:e4:02:e1:fd:e5:63:7b:26:47:34:04:93:b4:03:07:97:
         99:80:6a:60:1b:5d:ef:32:b6:06:df:0f:06:9c:6c:21:13:4a:
         8b:8b:48:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnCHHp7Y3roNGuvRsx/kfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNjllZmU2MDE2ZjcyZDQ1OTJmMWIwYmFiOTE4NjQ3NmZm
M2EyOWQwHhcNMjYwNjI5MDkwMDQ5WhcNMjYwNjMwMDkwMDQ5WjAzMTEwLwYDVQQD
EygwMzFiYTZkMTk0YjEwZDA5NjQxNDFmZTE3ZDBlMzUzMTlmYWYwMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6YPj3sz3bMfv/t3bzufwb6TnN/a
/oX7qqJ0KvittUc5j3bswa8DM4YakkRRNc6K0ep7LlstPNVlp4Xw3Bp36l5srL14
5CIErJZptiZ8GRZizyyn7/oOSIuMcGcj43b3KjNZJlw3xYnel3pcwHH5P1e6MxkT
/f7b0x1FAJ8Y4E4krPTUglfHbt9tshmcsriJHkw8pHgDFRXDA3lXvlQ3OlXbOi2n
34OZy26D4Ce0ye44IBJFEL+sUukrwpELt/aaHyNeXlgLcVPTy0vnl6/0XOsf7VCN
tMOtc1aEYTjcYEM3uhoq/03jmmWn7/vnsEgx7PMSzUp70BdKkCY29/VexwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMbptGUsQ0JZBQf4X0ONTGfrwOWMB8GA1UdIwQY
MBaAFHtp7+YBb3LUWS8bC6uRhkdv86KdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYt
MWQ4YjlhMWFhNGFkLzEvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9mZjM0YmItMTBmOS00NTkzLTljYWYtMWQ4YjlhMWFhNGFk
LzEvZTJudjVnRnZjdFJaTHhzTHE1R0dSMl96b3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2g5hptn
Xwaif5m6DckBGo4HFBsKFyH5o29EYa/1kcBYepwpc+0RgPQV8XBRzXXstroiD4gS
bKuyJc0L121v2g6EC5M0h6xYUBmb6enLX+S1/8jOPxmdG96oTrj1NQFUuahzAYJZ
/5DhKwcxMHFJH3IZPm7AHCm41sbiHGM83ZTW8lkwJiQrRkBj5IZC+J/2zZwmCxKK
7H81LivQvoAhel9r/vuReEhfdvVfe11wYB6/Tnv2s8UHi5JNLfNjgynG5EaXZd3V
B8FkTdzdE7PLJi9NPQ/XrC9MnUvkAuH95WN7Jkc0BJO0AweXmYBqYBtd7zK2Bt8P
BpxsIRNKi4tIpg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:39:58 2026 by rpki-client