Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File:                     quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier:          BUdLvi1QdEfyd+BXGElgTEKR0yUg9/sHPA2x/5O1iGY=
Subject key identifier:   52:21:89:C0:15:6A:F0:D7:21:61:2E:69:F8:1B:6A:EB:F4:47:3F:6C
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer:       /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial:       019EDD658778B306BD33728A32A170FF0585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number:          0865
Signing time:             Fri 19 Jun 2026 01:01:18 +0000
Manifest this update:     Fri 19 Jun 2026 01:01:18 +0000
Manifest next update:     Sat 20 Jun 2026 01:01:18 +0000
Files and hashes:         1: abh6_OV0w_23vHurZg2lf03FAWI.roa (hash: WaNrZ48mNKxaEjIRodmrrMT60e4DHtMtypg5HH38Fac=)
                          2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: ohvYDh7gbJtSqfpWccCYtZ4WJ7GRi0cs9Acc+rcH+iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:65:87:78:b3:06:bd:33:72:8a:32:a1:70:ff:05:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
        Validity
            Not Before: Jun 19 01:01:18 2026 GMT
            Not After : Jun 20 01:01:18 2026 GMT
        Subject: CN=522189c0156af0d721612e69f81b6aebf4473f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:33:d7:57:47:65:bc:cb:56:ec:70:a4:53:
                    ba:b3:de:4d:ab:ab:57:6c:87:4b:f9:6a:e1:ec:73:
                    b3:8c:3a:24:55:01:12:f1:a4:3b:74:6d:00:25:f1:
                    76:b0:93:2a:25:ea:98:b0:3a:f8:ce:74:30:78:a3:
                    6d:ca:85:b7:bf:c7:01:8b:96:16:46:f6:61:3d:52:
                    b5:aa:9d:67:d0:a7:70:f3:84:60:8c:2b:78:fa:84:
                    40:11:db:a9:6a:16:e5:53:f8:d4:e6:32:4f:6a:8e:
                    85:00:80:b8:bf:59:c9:8e:e7:53:3f:9f:80:d7:ca:
                    38:98:7b:96:4e:02:4d:4a:62:01:7d:14:a4:08:76:
                    df:6f:ff:77:98:d9:a8:4a:52:ff:b7:19:55:f0:24:
                    6d:87:a2:bf:c5:8c:d6:44:de:56:1f:72:88:c8:b7:
                    06:da:71:e8:68:d2:a8:16:f5:ab:9a:c6:c5:bc:46:
                    76:9d:67:2c:0c:4b:42:8e:c0:0c:4e:71:d9:d7:88:
                    a1:18:98:73:d7:23:44:1e:f6:56:30:92:ef:20:31:
                    ca:78:cb:63:51:b0:a2:86:ed:cf:6d:50:4f:6b:76:
                    14:83:75:7c:ab:db:e3:87:a0:5f:25:6a:02:5c:91:
                    07:54:f7:6e:00:30:81:b2:7c:46:70:27:40:66:38:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:21:89:C0:15:6A:F0:D7:21:61:2E:69:F8:1B:6A:EB:F4:47:3F:6C
            X509v3 Authority Key Identifier:
                keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:28:33:e7:9f:cb:8c:59:ec:da:59:02:75:6e:2b:6b:9d:84:
         66:63:45:0e:43:6b:08:b4:23:ad:1d:b2:a1:fa:69:47:33:c1:
         04:4d:ec:7d:74:ef:50:8f:de:3b:aa:ad:a0:6f:f9:f2:33:3f:
         65:e5:3f:78:74:8c:a9:7c:fd:e1:a8:cd:47:6a:59:ba:a7:04:
         63:87:da:cf:38:dc:a2:20:60:1a:37:0a:54:b1:2d:64:75:d3:
         93:bc:1b:12:cc:36:91:f2:00:67:c9:a2:47:65:d4:2c:63:f0:
         bb:fd:c7:d3:5e:c6:75:fe:41:35:58:31:67:85:ba:4d:9c:0a:
         c6:71:06:b0:97:68:52:9d:9b:3d:7a:0b:82:c9:99:b4:92:b4:
         7f:c5:d8:b0:f1:6d:71:af:21:eb:c1:ab:c7:4d:73:16:1d:5d:
         8d:9a:aa:83:96:97:a4:ef:2e:86:75:90:3c:42:8d:96:6a:bc:
         85:b3:53:1b:a4:9f:a0:32:3e:df:80:57:0a:d6:c5:3c:99:ef:
         dc:03:e4:cb:a6:1a:94:e2:f7:20:3f:22:c7:28:ee:6c:4a:0c:
         46:0b:1d:e4:b5:09:1b:d1:81:2a:d1:e8:69:8d:54:25:df:9e:
         1f:7b:73:7e:d9:ca:6d:84:2d:19:fc:a9:5e:4a:8f:d7:aa:3e:
         51:51:d8:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7dZYd4swa9M3KKMqFw/wWFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZTQ0ODI3MWQ4NWFlODc5YTlhYmYxNWIzYmNhOTgzNDcw
YTEzNDgwHhcNMjYwNjE5MDEwMTE4WhcNMjYwNjIwMDEwMTE4WjAzMTEwLwYDVQQD
Eyg1MjIxODljMDE1NmFmMGQ3MjE2MTJlNjlmODFiNmFlYmY0NDczZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+4z11dHZbzLVuxwpFO6s95Nq6tX
bIdL+Wrh7HOzjDokVQES8aQ7dG0AJfF2sJMqJeqYsDr4znQweKNtyoW3v8cBi5YW
RvZhPVK1qp1n0Kdw84RgjCt4+oRAEdupahblU/jU5jJPao6FAIC4v1nJjudTP5+A
18o4mHuWTgJNSmIBfRSkCHbfb/93mNmoSlL/txlV8CRth6K/xYzWRN5WH3KIyLcG
2nHoaNKoFvWrmsbFvEZ2nWcsDEtCjsAMTnHZ14ihGJhz1yNEHvZWMJLvIDHKeMtj
UbCihu3PbVBPa3YUg3V8q9vjh6BfJWoCXJEHVPduADCBsnxGcCdAZjhpzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIhicAVavDXIWEuafgbauv0Rz9sMB8GA1UdIwQY
MBaAFKrkSCcdha6Hmpq/FbO8qYNHChNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUt
Nzk5YTE4YzlhYzVhLzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUtNzk5YTE4YzlhYzVh
LzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCgz55/L
jFns2lkCdW4ra52EZmNFDkNrCLQjrR2yofppRzPBBE3sfXTvUI/eO6qtoG/58jM/
ZeU/eHSMqXz94ajNR2pZuqcEY4fazzjcoiBgGjcKVLEtZHXTk7wbEsw2kfIAZ8mi
R2XULGPwu/3H017Gdf5BNVgxZ4W6TZwKxnEGsJdoUp2bPXoLgsmZtJK0f8XYsPFt
ca8h68Grx01zFh1djZqqg5aXpO8uhnWQPEKNlmq8hbNTG6SfoDI+34BXCtbFPJnv
3APky6YalOL3ID8ixyjubEoMRgsd5LUJG9GBKtHoaY1UJd+eH3tzftnKbYQtGfyp
XkqP16o+UVHYHQ==
-----END CERTIFICATE-----
Generated at Fri Jun 19 08:17:42 2026 by rpki-client