Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File:                     4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier:          6pdrdNp8k2sJcNX8nLmI6H24LhxSlZeIGcZly4gGRsE=
Subject key identifier:   42:7D:08:7F:B9:9B:BF:D1:D7:FD:D5:84:48:C3:B1:4A:C1:EB:A7:1D
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer:       /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial:       019EB6FC737379BC10BCE0092C544FD6C215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number:          195F
Signing time:             Thu 11 Jun 2026 14:00:58 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:58 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:58 +0000
Files and hashes:         1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: +96z6y9lDB4mZqAsu3zSbOTzgSxrqNWq/wYgt3FefQY=)
                          2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
                          3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
                          4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
                          5: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
                          6: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
                          7: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:73:73:79:bc:10:bc:e0:09:2c:54:4f:d6:c2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
        Validity
            Not Before: Jun 11 14:00:58 2026 GMT
            Not After : Jun 12 14:00:58 2026 GMT
        Subject: CN=427d087fb99bbfd1d7fdd58448c3b14ac1eba71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:b4:a8:17:02:59:a8:ef:83:b1:79:a4:0d:
                    2b:51:a5:2e:f2:86:5b:38:66:a3:67:4f:b9:ca:3a:
                    e0:27:59:ca:7f:a2:1d:45:f2:c1:84:2c:4f:1e:81:
                    ec:a8:04:fc:77:ff:50:b4:47:71:87:d5:61:33:c8:
                    68:b2:f1:37:28:8e:d1:7e:3f:4f:67:9d:68:5f:18:
                    f6:e5:9a:57:0e:a7:84:83:54:51:28:70:cc:02:a6:
                    b8:05:f0:68:67:e6:d0:dd:6a:3b:72:d6:62:ff:84:
                    11:07:6e:f7:a1:3d:8b:c8:98:05:b7:cf:33:8a:d5:
                    d2:67:d0:1f:15:03:66:f5:50:03:94:d7:b1:82:6a:
                    cb:d5:25:df:b1:81:ba:47:e1:95:4f:4b:80:bb:73:
                    df:42:db:81:1d:70:e7:37:a3:5e:02:20:e0:4b:83:
                    bb:ed:d1:6e:35:50:2f:51:08:ef:e5:93:66:13:58:
                    2a:6c:b4:47:c7:1c:dd:fb:7a:6d:2a:5c:1c:68:e5:
                    5f:45:79:34:3b:ee:94:17:f1:e4:6e:5b:0f:b2:83:
                    d3:bf:02:7c:49:05:b7:18:ef:f3:07:0b:5a:48:51:
                    75:38:de:e0:a7:50:45:ed:71:78:41:8c:b9:08:70:
                    67:8e:f9:36:bf:69:06:07:90:08:37:c4:12:8d:d7:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7D:08:7F:B9:9B:BF:D1:D7:FD:D5:84:48:C3:B1:4A:C1:EB:A7:1D
            X509v3 Authority Key Identifier:
                keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:92:5f:dc:c3:18:2e:da:95:c3:38:bd:67:c0:c4:b2:c9:8a:
         54:34:2a:90:99:32:67:0c:44:d5:64:e7:66:56:7c:4f:a5:de:
         1a:d0:59:9e:58:ff:58:fc:da:96:fe:b9:8e:3f:5b:b2:cf:43:
         aa:99:da:d8:0a:43:e4:6d:3a:f4:2d:2b:c8:fc:68:91:62:ab:
         54:0a:24:9e:20:ed:2b:bb:19:7c:b6:fb:0b:92:0d:1b:ac:71:
         5d:28:41:c7:4d:32:97:fd:ab:f2:0a:ec:42:94:5f:a7:29:98:
         48:97:32:59:e8:ae:0c:18:96:46:5c:8a:2e:f5:86:3d:c9:a5:
         ef:ce:a5:46:ce:ab:b6:d4:a2:ee:b8:fd:21:de:fa:ff:a4:e0:
         c8:72:a1:cd:3e:3e:b3:7c:a8:2c:e2:d0:c2:f4:96:51:6b:51:
         6a:2a:67:7a:f4:e3:53:40:65:a1:4e:2e:2f:95:84:6a:e7:e4:
         91:b7:76:ad:59:bc:46:36:62:54:af:45:fa:3e:5b:84:e5:ba:
         7f:ae:ea:3d:ba:b1:02:f2:b4:f3:55:bb:4c:d9:f1:8d:60:56:
         36:cd:80:5c:de:9a:40:37:06:44:5f:15:c4:b0:30:48:ed:2e:
         31:c4:25:15:f1:e9:75:a5:01:6d:06:f5:55:fe:76:94:19:b8:
         e5:58:02:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62/HNzebwQvOAJLFRP1sIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi
ZTFiMTEwHhcNMjYwNjExMTQwMDU4WhcNMjYwNjEyMTQwMDU4WjAzMTEwLwYDVQQD
Eyg0MjdkMDg3ZmI5OWJiZmQxZDdmZGQ1ODQ0OGMzYjE0YWMxZWJhNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0e0qBcCWajvg7F5pA0rUaUu8oZb
OGajZ0+5yjrgJ1nKf6IdRfLBhCxPHoHsqAT8d/9QtEdxh9VhM8hosvE3KI7Rfj9P
Z51oXxj25ZpXDqeEg1RRKHDMAqa4BfBoZ+bQ3Wo7ctZi/4QRB273oT2LyJgFt88z
itXSZ9AfFQNm9VADlNexgmrL1SXfsYG6R+GVT0uAu3PfQtuBHXDnN6NeAiDgS4O7
7dFuNVAvUQjv5ZNmE1gqbLRHxxzd+3ptKlwcaOVfRXk0O+6UF/HkblsPsoPTvwJ8
SQW3GO/zBwtaSFF1ON7gp1BF7XF4QYy5CHBnjvk2v2kGB5AIN8QSjdd4dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ9CH+5m7/R1/3VhEjDsUrB66cdMB8GA1UdIwQY
MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt
NzQyZGMwYzk3MGMwLzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw
LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJJf3MMY
LtqVwzi9Z8DEssmKVDQqkJkyZwxE1WTnZlZ8T6XeGtBZnlj/WPzalv65jj9bss9D
qpna2ApD5G069C0ryPxokWKrVAokniDtK7sZfLb7C5ING6xxXShBx00yl/2r8grs
QpRfpymYSJcyWeiuDBiWRlyKLvWGPcml786lRs6rttSi7rj9Id76/6TgyHKhzT4+
s3yoLOLQwvSWUWtRaipnevTjU0BloU4uL5WEaufkkbd2rVm8RjZiVK9F+j5bhOW6
f67qPbqxAvK081W7TNnxjWBWNs2AXN6aQDcGRF8VxLAwSO0uMcQlFfHpdaUBbQb1
Vf52lBm45VgCdg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:05 2026 by rpki-client