Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          ElRmyG1QIYB21zNbErZJv/ZnO89ZAY0L3CrV8Pz+JI0=
Subject key identifier:   4B:BB:75:A6:72:AA:F8:60:D0:B2:B2:51:60:EF:F3:57:95:4C:5D:91
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       019E97A7CDC4BABD0EAA5EA2DDD9DD1691FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          194F
Signing time:             Fri 05 Jun 2026 12:00:17 +0000
Manifest this update:     Fri 05 Jun 2026 12:00:17 +0000
Manifest next update:     Sat 06 Jun 2026 12:00:17 +0000
Files and hashes:         1: 6HLmOIlw0JJlLfNpuVhkS5VevII.roa (hash: duraaLF3+tphpAPz7hcD0W+ai9uSm22QFtqEemAzlOs=)
                          2: cgiCnDdXt2ZfV4gQ6f64Txzv9UI.roa (hash: Epq0AQtf5gLEvFkohacS+3j5hF97hS/AEpHSVuOJB9w=)
                          3: nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa (hash: KTNFAJc/6ueKlLn/0ANsYJWuRw0+1gFif+avYpTFJp4=)
                          4: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: ohKoFbQxWfEAnvnSJjPdzXERpuN61w1GBtm5aGmMCgU=)
                          5: qfWUaAQNlV9wKmB2U3853Bl8uNA.roa (hash: rOp4emJoeO5JknR894vKgNsr/vggi5P0L+PXDJf8JnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:97:a7:cd:c4:ba:bd:0e:aa:5e:a2:dd:d9:dd:16:91:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Jun  5 12:00:17 2026 GMT
            Not After : Jun  6 12:00:17 2026 GMT
        Subject: CN=4bbb75a672aaf860d0b2b25160eff357954c5d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:4b:41:a1:c6:3f:6c:f1:09:96:b0:f4:9b:
                    75:61:4e:0b:e2:c7:66:9d:1c:ee:45:19:f9:19:b4:
                    bf:d9:a8:43:ca:a1:58:df:1f:04:45:10:f2:fc:a2:
                    8c:09:68:58:cb:f1:c4:00:b2:62:45:7e:c3:ce:5b:
                    be:1a:29:b8:1a:18:53:cb:6a:04:25:76:ce:af:c3:
                    c4:2f:96:a1:58:dc:d6:e9:33:6d:41:b3:c7:38:a6:
                    15:64:cd:a3:2c:9f:cd:e8:55:11:65:79:5f:41:09:
                    6a:68:f8:1f:de:f5:e9:89:23:e1:a0:8e:b2:65:db:
                    dc:a5:54:34:f0:ed:24:18:33:66:1f:bc:83:31:dd:
                    7a:67:90:2c:16:73:7b:af:23:cf:ee:27:c6:60:4d:
                    fe:e9:f7:63:1c:d3:e8:4f:ec:61:db:94:85:38:90:
                    ba:49:da:1d:2f:48:d5:c3:3a:0f:84:f0:99:0f:eb:
                    db:05:13:f9:c4:64:ad:61:39:8f:c8:d8:8f:39:74:
                    f8:27:2b:db:f6:4a:4e:6b:ca:f8:fa:71:d8:35:cf:
                    46:70:74:62:9e:0a:8c:c5:d4:c2:ab:6e:96:a1:84:
                    95:cd:11:0c:4c:c1:48:ab:da:dd:7a:7c:eb:22:66:
                    90:80:d0:f9:25:53:56:1a:65:6f:2d:63:52:f4:2c:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:75:A6:72:AA:F8:60:D0:B2:B2:51:60:EF:F3:57:95:4C:5D:91
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:83:5f:26:2c:fb:d6:e8:a2:7f:21:38:a8:63:d0:15:91:28:
         43:29:71:6c:6d:b1:cc:13:11:04:68:cf:02:16:90:50:43:df:
         9f:9c:c5:7e:fe:de:38:46:1e:be:7c:45:72:4d:33:2c:79:3e:
         85:60:a6:99:f0:33:91:69:f0:7f:e5:21:a6:df:71:6d:c2:c8:
         21:d3:2e:53:53:e5:73:0e:1d:18:fc:6e:15:94:32:e0:86:40:
         63:62:84:60:9b:44:6c:f4:99:9a:d9:97:d7:cf:8c:3f:47:75:
         85:8f:98:5a:81:cc:5c:81:22:39:7c:91:da:aa:b6:db:34:44:
         3d:4e:06:84:ba:3f:26:13:15:2d:89:39:e0:75:1c:c9:3c:4f:
         0e:83:d0:fd:a8:31:36:ab:92:97:ef:49:a6:b1:55:7b:f7:f5:
         1f:d7:cf:6c:c9:45:75:0b:b2:a5:f0:6b:a2:f7:00:53:4a:43:
         8b:37:86:00:9e:e0:cc:9b:38:30:6a:02:ff:c5:cd:18:cc:28:
         69:55:6d:5d:bc:9e:0e:14:db:93:71:5e:6c:a8:db:59:80:c5:
         23:e6:da:c8:4a:09:f9:38:d8:22:22:c3:7d:9b:2b:b0:ea:08:
         0c:63:0b:5d:d1:ae:a1:02:fd:5f:d5:7e:4c:4b:b4:c8:fd:6b:
         74:95:95:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Xp83Eur0Oql6i3dndFpH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi
NWU5MTgwHhcNMjYwNjA1MTIwMDE3WhcNMjYwNjA2MTIwMDE3WjAzMTEwLwYDVQQD
Eyg0YmJiNzVhNjcyYWFmODYwZDBiMmIyNTE2MGVmZjM1Nzk1NGM1ZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsINLQaHGP2zxCZaw9Jt1YU4L4sdm
nRzuRRn5GbS/2ahDyqFY3x8ERRDy/KKMCWhYy/HEALJiRX7Dzlu+Gim4GhhTy2oE
JXbOr8PEL5ahWNzW6TNtQbPHOKYVZM2jLJ/N6FURZXlfQQlqaPgf3vXpiSPhoI6y
ZdvcpVQ08O0kGDNmH7yDMd16Z5AsFnN7ryPP7ifGYE3+6fdjHNPoT+xh25SFOJC6
SdodL0jVwzoPhPCZD+vbBRP5xGStYTmPyNiPOXT4Jyvb9kpOa8r4+nHYNc9GcHRi
ngqMxdTCq26WoYSVzREMTMFIq9rdenzrImaQgND5JVNWGmVvLWNS9Cyp/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu7daZyqvhg0LKyUWDv81eVTF2RMB8GA1UdIwQY
MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt
Mzg1M2QzNDBjOWE2LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2
LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYNfJiz7
1uiifyE4qGPQFZEoQylxbG2xzBMRBGjPAhaQUEPfn5zFfv7eOEYevnxFck0zLHk+
hWCmmfAzkWnwf+Uhpt9xbcLIIdMuU1Plcw4dGPxuFZQy4IZAY2KEYJtEbPSZmtmX
18+MP0d1hY+YWoHMXIEiOXyR2qq22zREPU4GhLo/JhMVLYk54HUcyTxPDoPQ/agx
NquSl+9JprFVe/f1H9fPbMlFdQuypfBrovcAU0pDizeGAJ7gzJs4MGoC/8XNGMwo
aVVtXbyeDhTbk3FebKjbWYDFI+bayEoJ+TjYIiLDfZsrsOoIDGMLXdGuoQL9X9V+
TEu0yP1rdJWVhQ==
-----END CERTIFICATE-----
Generated at Fri Jun 5 21:38:16 2026 by rpki-client