Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File:                     rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier:          jFwNSo4drPbm9/3DqoceRGYMI+ka8ERVCWu2bX1Bcc8=
Subject key identifier:   73:BB:BB:9C:4E:4D:55:A9:8C:E8:57:C4:F0:3C:84:D0:8E:4B:4D:A6
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       019F12D356E1B663987A64E368F13017F721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number:          199F
Signing time:             Mon 29 Jun 2026 10:01:07 +0000
Manifest this update:     Mon 29 Jun 2026 10:01:07 +0000
Manifest next update:     Tue 30 Jun 2026 10:01:07 +0000
Files and hashes:         1: 6GLB9mtHtQ9igAugr-nU-NnOL5I.roa (hash: v+rAB5v9d/a3phjEOAxXcev6bMkZhENGNBYWynOBKZs=)
                          2: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
                          3: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
                          4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
                          5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
                          6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
                          7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: 5Zm1PRDVitYJqv9fwbZTir6RlhB+w5OAOCsN4EVqC+U=)
                          8: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
                          9: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:d3:56:e1:b6:63:98:7a:64:e3:68:f1:30:17:f7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: Jun 29 10:01:07 2026 GMT
            Not After : Jun 30 10:01:07 2026 GMT
        Subject: CN=73bbbb9c4e4d55a98ce857c4f03c84d08e4b4da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:3e:36:d1:e1:db:5a:a0:01:18:e7:8d:80:
                    ee:03:99:52:4f:67:1f:d4:2b:84:87:57:6a:fe:d2:
                    b7:2e:3c:d0:d3:4e:5f:df:f4:77:c3:18:85:a1:b4:
                    6a:0b:f6:f6:2a:25:a6:97:b9:a0:5f:48:12:2a:3f:
                    53:cb:fa:f8:53:a0:8f:83:e8:d9:43:f3:f7:a8:29:
                    a5:d7:5d:0b:bb:f3:bb:d3:99:f9:0b:da:78:d4:99:
                    9e:a6:8e:c4:28:bc:b7:d7:ab:49:85:2e:b1:b7:c1:
                    b6:8d:0c:07:24:b8:3d:c6:d4:50:2f:5e:5c:10:3c:
                    33:e0:a8:6f:fc:a8:d9:f6:72:d1:82:c0:9e:57:06:
                    73:84:65:c6:09:6a:e2:0f:cc:db:1d:c6:75:d0:02:
                    23:90:b2:3d:51:24:42:5b:4a:ec:7a:6e:e9:c8:42:
                    06:c0:36:ac:c7:fc:a6:57:81:cc:e9:37:c3:32:a4:
                    19:c5:a1:ff:18:d7:81:7d:8c:10:c3:02:cc:d9:ac:
                    65:56:0d:7f:4f:78:15:13:67:f5:41:bb:92:f9:f5:
                    e7:15:dd:59:7b:d3:2d:58:c1:bb:bb:20:af:5b:69:
                    be:de:e2:ec:cd:dd:48:59:b4:c5:af:77:d6:7e:7b:
                    7e:92:28:17:0b:f0:b2:94:58:27:87:d5:58:c4:f5:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BB:BB:9C:4E:4D:55:A9:8C:E8:57:C4:F0:3C:84:D0:8E:4B:4D:A6
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:f9:99:7f:db:4d:f1:58:25:79:ea:03:58:a8:87:49:69:
         61:3c:93:43:5d:d2:0f:3e:dd:76:ac:52:ef:76:0d:0f:76:a1:
         8c:b2:4a:b9:ed:44:19:00:66:dc:19:4e:e1:96:90:1a:59:f5:
         d6:91:86:aa:1f:2e:7a:ea:1f:d1:7c:92:e9:78:a7:02:92:9b:
         54:16:08:20:91:65:12:98:e5:6c:10:35:e6:9d:d9:8f:3d:b9:
         7f:d0:7a:36:c4:d2:71:74:f1:85:a9:68:13:ec:68:80:12:43:
         29:57:0f:ac:23:ea:b5:1d:5e:bd:6d:64:24:a6:8e:18:57:46:
         a6:a2:12:85:43:e2:10:f6:4e:76:65:3a:55:ef:77:97:89:eb:
         d2:bf:31:d6:05:38:81:ad:ba:46:e3:13:8a:a4:da:48:db:64:
         9a:d2:e6:78:b9:b9:93:5e:71:29:ab:90:81:cf:38:81:1f:fc:
         7c:98:c6:f3:5b:1f:21:16:bc:80:53:67:51:ac:88:7e:8f:30:
         54:50:ee:19:5f:04:8d:d8:5c:e1:7c:f0:63:d6:4c:e8:f8:fe:
         19:d4:dc:70:ee:b8:68:1c:6a:ff:84:ab:2f:5e:cc:41:7e:00:
         8f:08:50:74:94:c1:05:58:34:b7:aa:64:26:55:a2:f4:73:31:
         7d:69:13:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S01bhtmOYemTjaPEwF/chMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3
ODZlZjUwHhcNMjYwNjI5MTAwMTA3WhcNMjYwNjMwMTAwMTA3WjAzMTEwLwYDVQQD
Eyg3M2JiYmI5YzRlNGQ1NWE5OGNlODU3YzRmMDNjODRkMDhlNGI0ZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfM+NtHh21qgARjnjYDuA5lST2cf
1CuEh1dq/tK3LjzQ005f3/R3wxiFobRqC/b2KiWml7mgX0gSKj9Ty/r4U6CPg+jZ
Q/P3qCml110Lu/O705n5C9p41Jmepo7EKLy316tJhS6xt8G2jQwHJLg9xtRQL15c
EDwz4Khv/KjZ9nLRgsCeVwZzhGXGCWriD8zbHcZ10AIjkLI9USRCW0rsem7pyEIG
wDasx/ymV4HM6TfDMqQZxaH/GNeBfYwQwwLM2axlVg1/T3gVE2f1QbuS+fXnFd1Z
e9MtWMG7uyCvW2m+3uLszd1IWbTFr3fWfnt+kigXC/CylFgnh9VYxPX6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO7u5xOTVWpjOhXxPA8hNCOS02mMB8GA1UdIwQY
MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It
NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2
LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcs35mX/b
TfFYJXnqA1ioh0lpYTyTQ13SDz7ddqxS73YND3ahjLJKue1EGQBm3BlO4ZaQGln1
1pGGqh8ueuof0XyS6XinApKbVBYIIJFlEpjlbBA15p3Zjz25f9B6NsTScXTxhalo
E+xogBJDKVcPrCPqtR1evW1kJKaOGFdGpqIShUPiEPZOdmU6Ve93l4nr0r8x1gU4
ga26RuMTiqTaSNtkmtLmeLm5k15xKauQgc84gR/8fJjG81sfIRa8gFNnUayIfo8w
VFDuGV8Ejdhc4XzwY9ZM6Pj+GdTccO64aBxq/4SrL17MQX4AjwhQdJTBBVg0t6pk
JlWi9HMxfWkTew==
-----END CERTIFICATE-----
Generated at Mon Jun 29 18:47:52 2026 by rpki-client