Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          TfHe6d3JYU7nXw4u0FQz9pBFOpiFdqbimpIMXgZ6TEc=
Subject key identifier:   61:65:59:56:A9:7D:4C:2B:31:A3:38:ED:B0:BF:F2:7B:33:87:81:DF
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       019E9BF273F40768BE11D14455D1D5E0962A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          194E
Signing time:             Sat 06 Jun 2026 08:00:18 +0000
Manifest this update:     Sat 06 Jun 2026 08:00:18 +0000
Manifest next update:     Sun 07 Jun 2026 08:00:18 +0000
Files and hashes:         1: 9WusnEA7UsiroKwVXFKCOaUJb3c.roa (hash: fb+KrV1ZjwlDY775gAvNE53AejRLewrgw0HPLBs+ie0=)
                          2: EpVqLX2wGdjg6RHIKlcFAYrzxZM.roa (hash: I+GdKkkhDVqSQlbstKKL56Ml+Mm3LF7CHLrw/iB8Sm0=)
                          3: IkDgMGh9UUmRviqmiJ_OYP1f9S4.roa (hash: RuDafgx85YwCS+Dkl1AZk67UPodQ/qCtU6vOrFp0Dc8=)
                          4: aT21_RL1m6rGeB-ld5KbAq-VyRY.roa (hash: igzeABuSc631EbNOWtmlhHktMnf95zdqHlwzunblRoQ=)
                          5: ahiZqqU1sLMyuZr836gd9oxj7Kw.roa (hash: ihPj0GX7KiHEc0nRL0sGVIybPI61K8/7t6F6pKkft+0=)
                          6: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: Ajd79Yqh6K//UvlFUbchfSM8BAA9HyFmUgLAwjZQ2Zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:f2:73:f4:07:68:be:11:d1:44:55:d1:d5:e0:96:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: Jun  6 08:00:18 2026 GMT
            Not After : Jun  7 08:00:18 2026 GMT
        Subject: CN=61655956a97d4c2b31a338edb0bff27b338781df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:df:c0:fa:0e:5e:74:72:3b:4a:87:60:a9:
                    0c:c5:0e:1e:23:a9:2a:6e:98:20:ee:37:22:55:b4:
                    87:13:c3:12:f9:70:bb:95:07:c1:fc:e2:84:bc:39:
                    bd:f5:ab:09:e6:40:c7:40:0d:27:86:0e:98:60:4e:
                    28:2d:2a:61:d6:e5:07:c9:89:26:79:92:4d:98:c4:
                    a4:28:d7:83:25:79:58:78:84:b5:b4:b6:63:e2:66:
                    5c:af:9f:8d:de:86:f2:c9:2d:87:db:5f:ef:b0:8f:
                    0b:05:66:d1:0a:eb:e0:87:22:d9:f3:a8:4c:90:1a:
                    33:ff:cb:79:c7:84:fc:06:2a:f3:9b:d6:0c:84:cb:
                    2e:07:50:de:1f:f9:11:4f:b4:c4:dd:42:4a:bd:29:
                    7e:54:b0:1b:8d:3c:41:87:e8:e0:0a:4a:3a:5a:99:
                    f4:1e:f2:ef:1c:40:09:07:7f:6d:91:a9:03:a3:39:
                    3f:79:d5:61:03:75:df:a4:2c:bf:2d:4a:84:62:77:
                    39:5b:7e:27:7f:12:38:c5:ad:0d:bb:1b:36:da:02:
                    38:23:01:10:ae:62:f5:01:c9:7a:37:cf:bd:f9:2b:
                    2e:6e:79:07:d8:5c:4e:c6:eb:40:bc:00:0f:cb:3c:
                    04:13:d5:e2:24:4b:9e:5d:ca:d2:9a:aa:a6:ff:03:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:59:56:A9:7D:4C:2B:31:A3:38:ED:B0:BF:F2:7B:33:87:81:DF
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:a8:f2:f8:e8:1f:1e:12:cc:5d:0e:9c:0a:76:fb:d3:24:
         aa:cc:bc:3a:91:01:9a:b4:7f:e3:b6:47:71:cb:b5:e3:3e:f9:
         3a:cd:13:39:50:42:af:a8:bc:e7:0b:42:15:c5:94:f3:8f:08:
         6c:6a:98:74:fb:c0:79:23:8d:4e:bc:c7:e0:f4:6a:a4:a5:44:
         da:f0:e4:f1:ad:23:87:a8:d1:74:0f:ea:a5:33:42:0c:1a:06:
         24:4d:70:fd:70:11:6f:f1:95:a3:a0:c0:73:37:d5:6b:76:60:
         5a:06:07:7c:36:db:f1:18:dc:79:41:7a:7e:cf:7b:b7:4a:8d:
         d0:24:b7:08:95:3f:e3:18:43:88:ec:db:bd:73:bd:b6:5e:9f:
         99:b2:7a:a8:9c:69:c9:57:88:73:eb:41:60:c9:02:d4:97:66:
         fb:d8:1d:01:27:21:79:dc:40:d3:c2:73:9a:78:df:40:31:83:
         cf:0e:2a:66:86:1a:4d:fd:5c:b1:f6:8d:21:f2:8c:ae:ee:21:
         f0:e8:32:e9:56:9a:1a:85:ec:69:92:c4:10:a7:46:ca:43:36:
         07:7b:6f:57:c7:44:cc:96:e5:31:b5:c5:07:b2:7a:b6:88:03:
         3e:91:d3:c1:17:35:c5:c9:b9:7f:9d:4b:27:41:c0:45:64:cc:
         1b:65:b7:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6b8nP0B2i+EdFEVdHV4JYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTU1MGU5MDhhOWI5Njg4YzI5YWFjOTg5NTM1M2RlYTgz
NmM0NWEwHhcNMjYwNjA2MDgwMDE4WhcNMjYwNjA3MDgwMDE4WjAzMTEwLwYDVQQD
Eyg2MTY1NTk1NmE5N2Q0YzJiMzFhMzM4ZWRiMGJmZjI3YjMzODc4MWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRvfwPoOXnRyO0qHYKkMxQ4eI6kq
bpgg7jciVbSHE8MS+XC7lQfB/OKEvDm99asJ5kDHQA0nhg6YYE4oLSph1uUHyYkm
eZJNmMSkKNeDJXlYeIS1tLZj4mZcr5+N3obyyS2H21/vsI8LBWbRCuvghyLZ86hM
kBoz/8t5x4T8Birzm9YMhMsuB1DeH/kRT7TE3UJKvSl+VLAbjTxBh+jgCko6Wpn0
HvLvHEAJB39tkakDozk/edVhA3XfpCy/LUqEYnc5W34nfxI4xa0Nuxs22gI4IwEQ
rmL1Acl6N8+9+SsubnkH2FxOxutAvAAPyzwEE9XiJEueXcrSmqqm/wNuPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFlWVapfUwrMaM47bC/8nszh4HfMB8GA1UdIwQY
MBaAFJpVUOkIqblojCmqyYlTU96oNsRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTIt
MTM5OWEyODIyMjdhLzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTItMTM5OWEyODIyMjdh
LzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUn6o8vjo
Hx4SzF0OnAp2+9Mkqsy8OpEBmrR/47ZHccu14z75Os0TOVBCr6i85wtCFcWU848I
bGqYdPvAeSONTrzH4PRqpKVE2vDk8a0jh6jRdA/qpTNCDBoGJE1w/XARb/GVo6DA
czfVa3ZgWgYHfDbb8RjceUF6fs97t0qN0CS3CJU/4xhDiOzbvXO9tl6fmbJ6qJxp
yVeIc+tBYMkC1Jdm+9gdASchedxA08JzmnjfQDGDzw4qZoYaTf1csfaNIfKMru4h
8Ogy6VaaGoXsaZLEEKdGykM2B3tvV8dEzJblMbXFB7J6togDPpHTwRc1xcm5f51L
J0HARWTMG2W3zg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:32:08 2026 by rpki-client