Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          vc5IevQx4WmSAj3IcjCOt1pTmyTlj9RjWybA+7z+RTE=
Subject key identifier:   D5:E5:F9:31:50:88:AF:B1:58:02:FA:AB:73:6A:E2:B6:BF:10:B7:62
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       019E91A5E2AE2D27154C5F1B2F513B8B07E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          1559
Signing time:             Thu 04 Jun 2026 08:00:28 +0000
Manifest this update:     Thu 04 Jun 2026 08:00:28 +0000
Manifest next update:     Fri 05 Jun 2026 08:00:28 +0000
Files and hashes:         1: 3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa (hash: CAsZ3C2TdySi/ZWvlReBuoW/T5KbXTvFwU9q/tZJ4e0=)
                          2: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: +n708LCvu+4lAfDHbXstbUlNvuiaMY6Jm7NV+ZmFoUI=)
                          3: RbC01VwFxiZgBTALS-uMjRZzAhY.roa (hash: q9hSu3/IMM4HWr9vjCMGx9EywT+vVqNbYQnoN0MBA20=)
                          4: _FgKHiwZ54ey0goItnrxJYHRboo.roa (hash: sg5CvvnTfG2oD+toERRbafBqjfE3xSjzejxaJO1LxU8=)
                          5: gSlaPw018DNPuMxCsveqA8oQUsY.roa (hash: 0+yjCTwe2aAK7n4AkPNcQnffX1JuMjM0FZBSULYc1vQ=)
                          6: z2A2T1nq3TaPFhF11ccXgPg0K_M.roa (hash: FIAAHyPL1J0jzI8B5mvusigwqLIBDgZSTDh7qjXNzTM=)
                          7: zXZDjCl_wpe20vJI7Svnpaah_LM.roa (hash: Uex3ZzOS035SmbmtX2k6Jvjfz1dsWhh2Uu53J7YkHiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:a5:e2:ae:2d:27:15:4c:5f:1b:2f:51:3b:8b:07:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: Jun  4 08:00:28 2026 GMT
            Not After : Jun  5 08:00:28 2026 GMT
        Subject: CN=d5e5f9315088afb15802faab736ae2b6bf10b762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:9c:59:3d:b2:68:6c:b1:a0:01:16:52:4a:
                    c6:f5:ea:dd:a1:b6:be:23:07:f8:4b:10:cc:8c:e2:
                    71:e5:a6:7e:cc:87:eb:ad:09:21:a8:e7:d4:84:1e:
                    0f:2b:b0:b0:fc:c2:d9:90:61:46:12:c7:86:51:d1:
                    fa:ca:b5:77:b6:7e:53:67:15:7a:22:8b:66:91:06:
                    f4:f2:fc:b2:ef:f0:53:a2:2a:7f:c9:02:10:3e:f9:
                    66:af:80:84:a4:32:26:fa:36:d5:54:f8:84:d6:c2:
                    11:2f:29:dd:ab:0d:76:6c:d5:71:5a:c7:88:2c:06:
                    76:f1:01:87:0b:d2:c3:30:9c:42:84:ae:51:e3:5c:
                    3e:74:92:a1:97:b4:c7:48:11:cc:4c:a5:22:ad:0f:
                    58:83:3f:b9:7e:78:5f:74:18:9c:3f:12:d4:10:0c:
                    bc:82:03:b2:23:89:c9:d4:de:7b:cd:32:fc:7b:a6:
                    f7:b0:31:46:59:5f:97:25:71:82:c6:10:13:e5:7b:
                    2f:4a:aa:57:bb:21:47:45:cb:ba:99:33:dc:e3:e9:
                    53:29:df:55:e7:2c:1a:24:e1:82:0e:1f:ca:d1:67:
                    b3:be:4d:40:93:0f:b6:d5:af:d8:d0:76:53:79:33:
                    69:b2:51:7e:b3:56:a0:20:08:53:00:b0:c5:c7:84:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E5:F9:31:50:88:AF:B1:58:02:FA:AB:73:6A:E2:B6:BF:10:B7:62
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:7c:3a:43:41:eb:3b:de:0e:f8:73:b9:83:48:ba:8a:31:
         1d:54:a4:ec:b8:7d:94:73:9d:a9:42:98:7f:e0:e4:8c:1a:22:
         a3:ed:99:d0:2e:b7:79:06:54:5e:e1:73:74:25:77:0e:eb:32:
         3f:9f:11:e9:3f:40:f2:41:9f:99:74:da:9b:54:1f:e4:f1:f0:
         4f:20:6f:38:dc:87:3b:a1:00:fb:d6:30:88:13:25:c0:6f:e8:
         39:ab:6b:94:ec:93:bb:66:51:e3:0a:cd:2a:b5:ac:30:9e:94:
         82:a7:26:59:72:9a:5f:c4:98:94:01:f6:24:6c:ef:ad:79:a4:
         99:b7:60:58:7f:70:a1:86:7c:30:6c:6c:7b:08:9d:be:78:db:
         59:73:26:54:51:0d:1c:56:85:d5:c1:eb:e4:55:c5:a8:4b:08:
         c7:3c:b9:c7:5b:e3:09:0f:67:b1:cb:f0:3d:8a:33:b6:3e:8d:
         0f:53:72:2a:5e:06:fc:1c:5a:a4:5a:3d:bb:73:72:fb:e9:47:
         ea:80:ef:9b:d4:ac:54:18:03:2a:41:32:2a:30:63:05:39:c8:
         bd:fc:1c:0c:79:9d:c6:2b:88:88:af:71:40:55:68:4c:92:c7:
         75:a4:7b:5b:34:ad:4e:52:96:e7:d9:4a:81:66:ef:fe:0d:e4:
         23:60:dd:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6RpeKuLScVTF8bL1E7iwfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDRkMmZkYmVlM2FhM2UxMjE0MjhlYTcwNTBjOTQzOWQ4
ODg2YTkwHhcNMjYwNjA0MDgwMDI4WhcNMjYwNjA1MDgwMDI4WjAzMTEwLwYDVQQD
EyhkNWU1ZjkzMTUwODhhZmIxNTgwMmZhYWI3MzZhZTJiNmJmMTBiNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOacWT2yaGyxoAEWUkrG9erdoba+
Iwf4SxDMjOJx5aZ+zIfrrQkhqOfUhB4PK7Cw/MLZkGFGEseGUdH6yrV3tn5TZxV6
IotmkQb08vyy7/BToip/yQIQPvlmr4CEpDIm+jbVVPiE1sIRLyndqw12bNVxWseI
LAZ28QGHC9LDMJxChK5R41w+dJKhl7THSBHMTKUirQ9Ygz+5fnhfdBicPxLUEAy8
ggOyI4nJ1N57zTL8e6b3sDFGWV+XJXGCxhAT5XsvSqpXuyFHRcu6mTPc4+lTKd9V
5ywaJOGCDh/K0Wezvk1Akw+21a/Y0HZTeTNpslF+s1agIAhTALDFx4TANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXl+TFQiK+xWAL6q3Nq4ra/ELdiMB8GA1UdIwQY
MBaAFD/U0v2+46o+EhQo6nBQyUOdiIapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMt
NjI2MWU1YjFmYzIwLzEvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMtNjI2MWU1YjFmYzIw
LzEvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHl8OkNB
6zveDvhzuYNIuooxHVSk7Lh9lHOdqUKYf+DkjBoio+2Z0C63eQZUXuFzdCV3Dusy
P58R6T9A8kGfmXTam1Qf5PHwTyBvONyHO6EA+9YwiBMlwG/oOatrlOyTu2ZR4wrN
KrWsMJ6UgqcmWXKaX8SYlAH2JGzvrXmkmbdgWH9woYZ8MGxsewidvnjbWXMmVFEN
HFaF1cHr5FXFqEsIxzy5x1vjCQ9nscvwPYoztj6ND1NyKl4G/BxapFo9u3Ny++lH
6oDvm9SsVBgDKkEyKjBjBTnIvfwcDHmdxiuIiK9xQFVoTJLHdaR7WzStTlKW59lK
gWbv/g3kI2DdAA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:19 2026 by rpki-client