Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File:                     r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier:          d3yRWq/mJZuBIRbTse+3GJXixs3jbsWcBKuHS7bRS+c=
Subject key identifier:   ED:FF:ED:3A:2D:82:0A:87:78:98:7A:7F:91:A7:13:17:7D:12:F0:CA
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer:       /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial:       019F10E4B75299647B7439C83D5E0BB36E0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number:          0199
Signing time:             Mon 29 Jun 2026 01:00:52 +0000
Manifest this update:     Mon 29 Jun 2026 01:00:52 +0000
Manifest next update:     Tue 30 Jun 2026 01:00:52 +0000
Files and hashes:         1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
                          2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: TyBT7P5qwiVMWPnQYKBElTyO0jp/KXRkfecEJSALnss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e4:b7:52:99:64:7b:74:39:c8:3d:5e:0b:b3:6e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
        Validity
            Not Before: Jun 29 01:00:52 2026 GMT
            Not After : Jun 30 01:00:52 2026 GMT
        Subject: CN=edffed3a2d820a8778987a7f91a713177d12f0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:11:93:bd:9a:8a:6a:57:29:4f:aa:5f:42:
                    2f:6c:9f:2b:2a:fc:3f:b8:7d:34:9e:35:50:10:e1:
                    03:98:37:2b:5e:a8:a1:c2:58:98:00:f8:ae:69:70:
                    a5:50:1e:9d:21:bf:93:61:a8:26:91:cf:11:0f:d7:
                    77:ea:86:86:64:bf:e8:ae:36:32:a5:f6:26:8a:c6:
                    bc:38:d0:d9:7c:f1:2a:eb:c7:f6:32:bd:57:a9:d7:
                    5b:40:9b:27:06:06:ab:03:d5:53:12:1f:77:fd:ef:
                    c7:2d:6f:c5:fb:7f:e4:87:50:3f:fc:84:9f:78:0b:
                    40:05:01:63:9d:c0:2f:b3:db:7b:b2:77:35:43:2d:
                    95:61:68:de:be:bf:8d:f8:62:a5:00:bf:6e:8a:a7:
                    9b:4a:0c:07:5b:99:72:bf:71:bb:11:4b:43:8e:b6:
                    06:61:63:8a:0f:d3:27:bd:2d:b5:de:89:9f:98:51:
                    ca:94:99:1c:b1:35:c4:05:e9:a7:b6:2e:a3:21:86:
                    3a:05:8f:b8:d9:e7:e8:dc:25:18:ae:55:5f:d3:0e:
                    d2:67:04:b9:1b:eb:63:76:68:ff:76:7c:5c:99:94:
                    38:1a:5d:3a:b9:2c:e6:64:7e:dd:4e:5a:81:3c:15:
                    83:0f:15:62:e5:04:20:49:5e:66:54:d5:ff:a4:b3:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FF:ED:3A:2D:82:0A:87:78:98:7A:7F:91:A7:13:17:7D:12:F0:CA
            X509v3 Authority Key Identifier:
                keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8a:c1:85:12:4d:85:ca:a4:a3:5b:5f:e6:58:02:9c:d0:56:
         7d:77:7d:29:fb:31:81:1e:6c:18:6b:87:52:38:02:be:7a:ae:
         75:3b:f2:57:b6:9a:4f:f6:46:9c:66:0f:ab:a3:3d:3b:34:41:
         af:7a:7a:b0:00:0e:3f:b4:03:cc:ec:f5:4d:39:98:ab:cc:a0:
         cf:22:3b:2c:3a:7a:cd:be:26:9e:94:88:9c:48:e0:6f:95:0d:
         fc:be:7c:b6:2f:5e:58:78:96:1f:07:79:1a:83:25:11:fc:a2:
         8d:09:15:b9:6a:23:c1:4c:a4:5b:25:36:15:13:e6:ca:7f:c7:
         10:22:b3:0d:1c:7a:b3:b5:26:41:b2:9d:b6:5f:23:c3:9b:9e:
         50:ba:46:8d:ae:ea:58:29:12:72:04:7a:8f:0c:aa:1e:1a:09:
         49:7e:09:13:31:49:53:ed:78:9c:e6:e2:74:9e:db:b6:10:84:
         43:76:5d:28:98:04:a1:81:0c:fa:77:00:fa:a7:df:25:d7:c4:
         14:fe:e4:82:e5:cc:a0:40:eb:9c:9e:94:2b:51:67:1d:1f:85:
         5a:5b:de:89:8b:ad:e5:4c:07:0a:74:5b:4a:59:d3:94:f1:20:
         96:9f:e0:8b:7c:b4:64:09:61:6a:d4:19:05:c7:12:83:87:c9:
         92:08:0a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5LdSmWR7dDnIPV4Ls24NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWJhY2RlMTU1OTdhMjgxYWUyYmIyOTMwNmRjNGRhNmRj
ZmI3NWUwHhcNMjYwNjI5MDEwMDUyWhcNMjYwNjMwMDEwMDUyWjAzMTEwLwYDVQQD
EyhlZGZmZWQzYTJkODIwYTg3Nzg5ODdhN2Y5MWE3MTMxNzdkMTJmMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvakRk72aimpXKU+qX0IvbJ8rKvw/
uH00njVQEOEDmDcrXqihwliYAPiuaXClUB6dIb+TYagmkc8RD9d36oaGZL/orjYy
pfYmisa8ONDZfPEq68f2Mr1XqddbQJsnBgarA9VTEh93/e/HLW/F+3/kh1A//ISf
eAtABQFjncAvs9t7snc1Qy2VYWjevr+N+GKlAL9uiqebSgwHW5lyv3G7EUtDjrYG
YWOKD9MnvS213omfmFHKlJkcsTXEBemnti6jIYY6BY+42efo3CUYrlVf0w7SZwS5
G+tjdmj/dnxcmZQ4Gl06uSzmZH7dTlqBPBWDDxVi5QQgSV5mVNX/pLOAaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3/7TotggqHeJh6f5GnExd9EvDKMB8GA1UdIwQY
MBaAFK/rrN4VWXooGuK7KTBtxNptz7deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci11czNoVlplaWdhNHJzcE1HM0UybTNQdDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kMjExYzItNmNhOS00ODAzLTk2YjMt
MmUxOTRhYzFhZDZmLzEvci11czNoVlplaWdhNHJzcE1HM0UybTNQdDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kMjExYzItNmNhOS00ODAzLTk2YjMtMmUxOTRhYzFhZDZm
LzEvci11czNoVlplaWdhNHJzcE1HM0UybTNQdDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4rBhRJN
hcqko1tf5lgCnNBWfXd9KfsxgR5sGGuHUjgCvnqudTvyV7aaT/ZGnGYPq6M9OzRB
r3p6sAAOP7QDzOz1TTmYq8ygzyI7LDp6zb4mnpSInEjgb5UN/L58ti9eWHiWHwd5
GoMlEfyijQkVuWojwUykWyU2FRPmyn/HECKzDRx6s7UmQbKdtl8jw5ueULpGja7q
WCkScgR6jwyqHhoJSX4JEzFJU+14nObidJ7bthCEQ3ZdKJgEoYEM+ncA+qffJdfE
FP7kguXMoEDrnJ6UK1FnHR+FWlveiYut5UwHCnRbSlnTlPEglp/gi3y0ZAlhatQZ
BccSg4fJkggKMA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:34 2026 by rpki-client