Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          RSUK5syhQgHcf4MEyLJFTkTrKUElZdF3eDsYbG5BFF8=
Subject key identifier:   8B:A7:52:5E:44:7C:8F:0A:40:10:CD:BF:71:F0:BD:78:69:DA:59:EA
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       019EBA343390AB4641225F881A172768ABFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1971
Signing time:             Fri 12 Jun 2026 05:00:43 +0000
Manifest this update:     Fri 12 Jun 2026 05:00:43 +0000
Manifest next update:     Sat 13 Jun 2026 05:00:43 +0000
Files and hashes:         1: 75usjphnflTK9ekaeXTmIOUK9No.roa (hash: 6EuKwuh4YvgBCa5Zr1EQEmvX8bawaDXoEyNUirI2tqE=)
                          2: EyR92aUa1YmyikBuKCPnhyQ6dQc.roa (hash: 7q/CmNDf+Nlfn++5VpeQfpPGbf0jec81JQlzO3KTrAc=)
                          3: LrQxuyLUvkTlTwVzft2jiHwl2kU.roa (hash: NZE1Am2hblzl+CtHrl8BwC9fFtxbKmx1XK22QJPmvv4=)
                          4: OhtO9gQuXsBPS-Q3O3FN8E4x348.roa (hash: o+Nr9wOEwTpH2Y6JMdDgtincCGDhZv31TNiZL0Hk3Bs=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: y6hebDqkyzn5A0SEJrBrdjBuLddS/7KFN6ftmhsZZ34=)
                          6: xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa (hash: 7LWb0I2IanjDr9ngdvZoV0Vpn7u1mnQr4dTehW6hxdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:33:90:ab:46:41:22:5f:88:1a:17:27:68:ab:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Jun 12 05:00:43 2026 GMT
            Not After : Jun 13 05:00:43 2026 GMT
        Subject: CN=8ba7525e447c8f0a4010cdbf71f0bd7869da59ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:44:6b:09:35:89:df:ff:32:11:37:3a:ae:
                    6a:69:9a:c0:45:11:c7:a5:ba:ec:b9:e6:e6:7d:77:
                    e6:58:62:82:7c:50:92:42:11:6f:8d:86:66:b4:37:
                    e2:bd:1e:58:ae:27:b0:45:4e:a9:0e:1d:37:d6:65:
                    9d:5c:99:76:e4:35:90:bb:b2:9d:c2:58:b9:1f:94:
                    8c:d5:de:48:a1:70:44:2e:b3:ea:e6:66:36:9c:dc:
                    91:7d:1a:e6:13:9e:fb:96:50:41:a5:df:b4:39:6f:
                    a3:7d:50:ad:90:78:04:b2:e1:42:64:2c:86:f7:f3:
                    9a:93:a2:01:72:36:00:3b:03:a0:96:01:c7:d8:97:
                    50:a8:dd:9d:80:6b:58:3a:dc:ed:66:d0:08:c7:4f:
                    ef:6e:25:ed:03:97:e3:82:36:50:8d:a5:00:96:bf:
                    43:47:c4:d3:99:41:11:65:f2:d2:7d:62:05:87:5d:
                    f5:39:94:ec:2f:a1:a1:8b:05:cc:ea:23:c2:74:cd:
                    43:32:8e:05:92:73:c9:28:1f:bc:97:59:2c:95:4a:
                    db:93:6e:81:20:a3:6e:ec:fe:87:ca:f8:40:92:16:
                    63:92:97:23:57:3d:db:59:2b:bb:fb:ec:02:4e:ca:
                    b0:ce:cc:c1:28:59:09:21:27:49:aa:af:0c:eb:5b:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A7:52:5E:44:7C:8F:0A:40:10:CD:BF:71:F0:BD:78:69:DA:59:EA
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:32:5d:0d:70:35:9b:ac:3e:b7:f2:99:7e:7f:59:70:87:
         f7:c2:06:6b:8a:86:13:97:ff:7f:50:80:af:6b:f0:7b:15:d7:
         fd:c7:e1:e3:cb:4c:60:0a:7b:8d:31:06:e4:ad:8b:05:3d:89:
         1d:f6:35:e5:8f:83:1d:0d:d4:f9:21:52:95:9f:a8:3f:04:13:
         8d:83:36:f6:48:a5:59:60:0d:f0:20:62:59:63:14:6b:0f:38:
         17:11:1b:86:57:c0:7d:17:43:63:06:8c:df:23:09:8d:e9:09:
         d5:cd:c3:42:8a:04:72:04:bc:65:46:b1:d0:62:e5:0b:f8:3f:
         ab:57:24:4d:06:28:77:ba:12:d3:1f:d1:a1:98:5c:e5:96:89:
         e1:27:55:49:b6:50:93:4f:ae:fd:22:84:5a:99:a1:a6:a2:f0:
         02:c3:80:df:45:64:52:ad:ea:9b:6e:ef:b5:fe:d8:8e:84:40:
         19:be:39:fb:3f:30:20:7c:5c:31:97:79:8d:e7:97:4e:12:0a:
         f1:0d:a6:09:1c:35:a6:aa:23:65:fe:4f:3d:08:4e:11:78:52:
         e4:ec:de:ae:a2:fd:a6:51:09:22:5d:4f:67:d6:d8:6e:d7:36:
         19:e3:a8:cc:bb:63:d6:94:cf:f9:b7:50:8a:00:1f:cb:6a:67:
         6a:67:ba:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NDOQq0ZBIl+IGhcnaKv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjYwNjEyMDUwMDQzWhcNMjYwNjEzMDUwMDQzWjAzMTEwLwYDVQQD
Eyg4YmE3NTI1ZTQ0N2M4ZjBhNDAxMGNkYmY3MWYwYmQ3ODY5ZGE1OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp71Eawk1id//MhE3Oq5qaZrARRHH
pbrsuebmfXfmWGKCfFCSQhFvjYZmtDfivR5YriewRU6pDh031mWdXJl25DWQu7Kd
wli5H5SM1d5IoXBELrPq5mY2nNyRfRrmE577llBBpd+0OW+jfVCtkHgEsuFCZCyG
9/Oak6IBcjYAOwOglgHH2JdQqN2dgGtYOtztZtAIx0/vbiXtA5fjgjZQjaUAlr9D
R8TTmUERZfLSfWIFh131OZTsL6GhiwXM6iPCdM1DMo4FknPJKB+8l1kslUrbk26B
IKNu7P6HyvhAkhZjkpcjVz3bWSu7++wCTsqwzszBKFkJISdJqq8M61uejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIunUl5EfI8KQBDNv3HwvXhp2lnqMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4IyXQ1w
NZusPrfymX5/WXCH98IGa4qGE5f/f1CAr2vwexXX/cfh48tMYAp7jTEG5K2LBT2J
HfY15Y+DHQ3U+SFSlZ+oPwQTjYM29kilWWAN8CBiWWMUaw84FxEbhlfAfRdDYwaM
3yMJjekJ1c3DQooEcgS8ZUax0GLlC/g/q1ckTQYod7oS0x/RoZhc5ZaJ4SdVSbZQ
k0+u/SKEWpmhpqLwAsOA30VkUq3qm27vtf7YjoRAGb45+z8wIHxcMZd5jeeXThIK
8Q2mCRw1pqojZf5PPQhOEXhS5OzerqL9plEJIl1PZ9bYbtc2GeOozLtj1pTP+bdQ
igAfy2pname6rg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 13:25:23 2026 by rpki-client