Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File:                     v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier:          F8gYMtXD6m9t/bJRYQMwcAIXrpFBGAj6Qyev1VNuZ3A=
Subject key identifier:   EC:18:AC:B1:BE:62:6F:24:8F:8A:ED:42:0F:FC:5F:55:36:D9:7A:F1
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer:       /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial:       019EB9FD4338055D12174BEE9C99C8070974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 04:00:43 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:43 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:43 +0000
Files and hashes:         1: OflZg6TFsEKRZGwqwFjxO_4uzgA.roa (hash: 9iTUJuItwJxSzT9lJ39rRuHUjdkumJ61tcp/ZIi1CnM=)
                          2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: +ILWLjw7elRU2uGbQYP5xdBXYxEz/pg7Sin2CJkw7Is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:43:38:05:5d:12:17:4b:ee:9c:99:c8:07:09:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
        Validity
            Not Before: Jun 12 04:00:43 2026 GMT
            Not After : Jun 13 04:00:43 2026 GMT
        Subject: CN=ec18acb1be626f248f8aed420ffc5f5536d97af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:1f:d6:2e:7b:eb:8c:4b:f8:77:29:3d:1d:
                    25:97:33:cd:24:12:ba:47:0c:6d:ff:d2:9e:89:20:
                    5c:00:f3:a1:71:99:39:dd:71:1b:0b:ae:cd:e1:3c:
                    fb:9a:29:81:15:36:ca:81:49:a0:41:c2:b5:9e:8d:
                    d6:84:13:26:36:d9:c4:58:f1:bf:67:68:8a:26:73:
                    dc:fe:25:d7:97:2e:e0:c5:b0:ee:2f:0b:68:8a:13:
                    36:61:2f:f1:a9:05:04:7a:ea:ec:da:04:ac:85:dc:
                    ac:75:21:9c:bc:5d:43:bd:a4:3a:fd:8d:5b:14:12:
                    6e:5a:5b:4c:46:50:71:a9:4a:f7:79:96:43:9b:47:
                    f8:c5:b7:ee:f7:86:3c:8f:35:97:19:05:6f:ba:16:
                    82:a1:45:51:93:3c:84:a4:2f:ca:f7:1b:fe:45:de:
                    d7:de:28:54:ad:61:61:f2:9a:1a:ef:c3:9e:a8:63:
                    aa:22:a6:12:2e:59:9c:17:d1:f2:03:80:26:17:bc:
                    b6:90:7d:86:75:3a:d8:f1:4d:e4:0f:8b:2c:a4:5d:
                    37:6c:88:f1:dd:1c:1a:1a:6a:03:09:d6:75:4d:64:
                    94:ac:1f:d0:49:fb:ed:da:ad:76:ca:2d:63:3a:08:
                    b7:8d:01:f9:8d:9c:19:ec:a9:27:e6:f3:ff:cb:39:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:18:AC:B1:BE:62:6F:24:8F:8A:ED:42:0F:FC:5F:55:36:D9:7A:F1
            X509v3 Authority Key Identifier:
                keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:69:b7:cb:97:92:a6:a9:8e:c5:20:17:90:a7:19:2a:52:
         2c:1d:36:5e:c6:76:c6:80:96:8c:42:b5:97:82:3a:12:0b:2a:
         3c:7c:49:b8:29:71:cd:6f:d3:50:2d:d8:50:77:d8:f2:73:ea:
         11:1e:8c:2b:ff:5b:81:5d:80:73:cf:87:80:0b:ae:ac:5d:2c:
         9d:32:ca:86:74:0a:8d:2e:d9:c5:b2:03:7f:e5:96:0a:1b:72:
         7a:8b:52:51:a8:0a:2b:b6:6d:9d:42:08:d7:88:90:7b:af:cc:
         14:c6:d7:41:25:3a:3b:d4:22:f1:1b:c8:a6:1d:9a:2d:a8:63:
         6b:61:be:43:04:4a:e7:3e:f9:d9:e0:42:de:3d:65:27:9b:e2:
         4f:6d:18:4d:46:49:dc:35:ad:b6:28:bf:c1:50:a0:31:9d:1e:
         fe:bc:f2:73:a6:c0:a4:21:3d:8a:3d:4e:85:df:06:89:ae:75:
         9f:7c:be:4a:26:0b:57:68:b3:81:b9:80:a5:88:40:b7:b7:ee:
         53:6d:c0:e4:05:a5:a7:4b:62:85:c4:bb:95:62:af:57:d0:71:
         c0:b7:b5:f0:5d:93:92:d6:7d:3a:9e:ae:c8:06:97:79:d6:70:
         ae:95:ca:27:bd:43:dd:ec:9d:ad:f4:0f:a8:3c:57:fd:ef:9e:
         87:44:0e:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/UM4BV0SF0vunJnIBwl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm
MjIzZjIwHhcNMjYwNjEyMDQwMDQzWhcNMjYwNjEzMDQwMDQzWjAzMTEwLwYDVQQD
EyhlYzE4YWNiMWJlNjI2ZjI0OGY4YWVkNDIwZmZjNWY1NTM2ZDk3YWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny4f1i5764xL+HcpPR0llzPNJBK6
Rwxt/9KeiSBcAPOhcZk53XEbC67N4Tz7mimBFTbKgUmgQcK1no3WhBMmNtnEWPG/
Z2iKJnPc/iXXly7gxbDuLwtoihM2YS/xqQUEeurs2gSshdysdSGcvF1DvaQ6/Y1b
FBJuWltMRlBxqUr3eZZDm0f4xbfu94Y8jzWXGQVvuhaCoUVRkzyEpC/K9xv+Rd7X
3ihUrWFh8poa78OeqGOqIqYSLlmcF9HyA4AmF7y2kH2GdTrY8U3kD4sspF03bIjx
3RwaGmoDCdZ1TWSUrB/QSfvt2q12yi1jOgi3jQH5jZwZ7Kkn5vP/yzkXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwYrLG+Ym8kj4rtQg/8X1U22XrxMB8GA1UdIwQY
MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct
MDUyY2YwMWQyMDQ4LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4
LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKBpt8uX
kqapjsUgF5CnGSpSLB02XsZ2xoCWjEK1l4I6EgsqPHxJuClxzW/TUC3YUHfY8nPq
ER6MK/9bgV2Ac8+HgAuurF0snTLKhnQKjS7ZxbIDf+WWChtyeotSUagKK7ZtnUII
14iQe6/MFMbXQSU6O9Qi8RvIph2aLahja2G+QwRK5z752eBC3j1lJ5viT20YTUZJ
3DWttii/wVCgMZ0e/rzyc6bApCE9ij1Ohd8Gia51n3y+SiYLV2izgbmApYhAt7fu
U23A5AWlp0tihcS7lWKvV9BxwLe18F2TktZ9Op6uyAaXedZwrpXKJ71D3eydrfQP
qDxX/e+eh0QO8w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:06:29 2026 by rpki-client