Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File:                     52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier:          HGCuL4kNU7gmEBOo/w01r591GkX75qNJPfIFE/R8Iqw=
Subject key identifier:   21:59:46:68:92:6F:5B:52:8B:F2:9A:C8:64:B8:22:A1:DA:30:67:61
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       019EE1E73258940636802E043DD77B2813F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number:          19B9
Signing time:             Fri 19 Jun 2026 22:01:25 +0000
Manifest this update:     Fri 19 Jun 2026 22:01:25 +0000
Manifest next update:     Sat 20 Jun 2026 22:01:25 +0000
Files and hashes:         1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
                          2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=)
                          3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
                          4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
                          5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: l6gBJ8RUwEjKFmLl9mhMBdepTU82ak1DdxkZUme+NVw=)
                          6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=)
                          7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=)
                          8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
                          9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
                          10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=)
                          11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=)
                          12: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=)
                          13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=)
                          14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
                          15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
                          16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 19:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e1:e7:32:58:94:06:36:80:2e:04:3d:d7:7b:28:13:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jun 19 22:01:25 2026 GMT
            Not After : Jun 20 22:01:25 2026 GMT
        Subject: CN=21594668926f5b528bf29ac864b822a1da306761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:d4:b7:bd:84:64:b8:e4:75:77:82:0e:6f:
                    40:4a:e8:7e:e8:02:98:91:f2:94:a9:32:39:00:5b:
                    f6:f1:fb:c3:35:30:5f:dc:91:45:fb:c1:96:b0:ef:
                    4d:8f:ac:df:6e:7f:ef:80:78:45:b9:7d:83:b4:95:
                    67:05:af:82:29:98:e6:50:d8:b7:07:3c:43:16:e3:
                    a2:09:63:ad:71:66:be:55:fe:37:36:0b:5b:fb:be:
                    49:f9:4a:34:01:04:43:94:2c:52:1d:29:2c:09:fa:
                    f6:f5:e2:ec:0c:72:e4:8c:a6:dd:5d:50:c8:c0:1a:
                    de:a1:11:5b:86:53:f4:56:20:44:67:74:4f:6e:5c:
                    b4:1e:f4:7f:91:f3:97:fb:17:f0:d9:3c:49:30:cf:
                    39:82:71:ad:77:09:a9:ce:13:5b:df:da:b9:c6:dc:
                    8b:0e:95:f7:3c:db:17:25:95:f4:ca:84:cb:f9:da:
                    3e:6f:0c:1a:f6:c3:c5:46:55:cd:ad:4e:1f:27:58:
                    a1:98:a1:10:b6:fc:ad:ff:a0:a4:c9:cd:3c:e3:09:
                    5a:e0:a1:a0:75:c1:d8:0a:b6:09:76:b6:93:09:6e:
                    92:25:81:08:4f:83:1c:3e:8b:79:9c:22:9f:73:4c:
                    dc:20:d4:88:62:a0:9b:1d:74:ba:6a:ab:69:35:2b:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:59:46:68:92:6F:5B:52:8B:F2:9A:C8:64:B8:22:A1:DA:30:67:61
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3d:24:3e:44:e1:b3:6b:a4:e1:f0:c7:67:51:21:80:3a:08:
         eb:63:e6:f9:8e:3d:2a:04:66:a5:9f:65:4b:b8:c1:77:e0:ac:
         1f:c4:5a:1d:26:b8:f3:38:65:46:ef:0e:6f:ef:ef:98:4a:3c:
         3d:4d:bb:15:4a:14:7f:44:8b:35:5e:19:34:93:45:96:70:2a:
         c2:56:19:d9:92:d8:42:86:92:a9:d6:3e:43:46:00:87:91:f5:
         29:ed:3f:55:fc:47:dd:02:30:24:fe:bc:31:6c:30:d7:19:8b:
         1a:e9:aa:a8:68:9c:66:47:38:3e:dc:eb:6d:04:28:fe:85:35:
         64:72:dc:1d:3e:38:8d:5c:01:13:ad:f7:27:0f:19:a9:d7:25:
         a4:fe:6e:c7:ff:db:ca:96:2b:84:e4:52:33:4a:1a:eb:5f:bd:
         0e:c6:63:ee:c2:ad:ab:89:82:88:28:e4:2b:36:81:d9:21:ca:
         93:f7:f9:4b:d3:1e:01:98:ae:57:24:06:70:24:5d:a3:49:7c:
         d0:83:49:6a:46:2d:8a:ed:9c:1c:3f:19:7b:00:eb:1b:ee:05:
         d0:12:3f:af:bc:f8:1f:a7:ba:83:ea:97:72:14:2b:05:fd:35:
         d8:02:21:69:29:73:4c:fe:32:6b:6d:5f:01:9c:3e:00:64:80:
         d0:a9:75:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7h5zJYlAY2gC4EPdd7KBPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjYwNjE5MjIwMTI1WhcNMjYwNjIwMjIwMTI1WjAzMTEwLwYDVQQD
EygyMTU5NDY2ODkyNmY1YjUyOGJmMjlhYzg2NGI4MjJhMWRhMzA2NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDLUt72EZLjkdXeCDm9ASuh+6AKY
kfKUqTI5AFv28fvDNTBf3JFF+8GWsO9Nj6zfbn/vgHhFuX2DtJVnBa+CKZjmUNi3
BzxDFuOiCWOtcWa+Vf43Ngtb+75J+Uo0AQRDlCxSHSksCfr29eLsDHLkjKbdXVDI
wBreoRFbhlP0ViBEZ3RPbly0HvR/kfOX+xfw2TxJMM85gnGtdwmpzhNb39q5xtyL
DpX3PNsXJZX0yoTL+do+bwwa9sPFRlXNrU4fJ1ihmKEQtvyt/6Ckyc084wla4KGg
dcHYCrYJdraTCW6SJYEIT4McPot5nCKfc0zcINSIYqCbHXS6aqtpNSuk5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFZRmiSb1tSi/KayGS4IqHaMGdhMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWD0kPkTh
s2uk4fDHZ1EhgDoI62Pm+Y49KgRmpZ9lS7jBd+CsH8RaHSa48zhlRu8Ob+/vmEo8
PU27FUoUf0SLNV4ZNJNFlnAqwlYZ2ZLYQoaSqdY+Q0YAh5H1Ke0/VfxH3QIwJP68
MWww1xmLGumqqGicZkc4PtzrbQQo/oU1ZHLcHT44jVwBE633Jw8ZqdclpP5ux//b
ypYrhORSM0oa61+9DsZj7sKtq4mCiCjkKzaB2SHKk/f5S9MeAZiuVyQGcCRdo0l8
0INJakYtiu2cHD8ZewDrG+4F0BI/r7z4H6e6g+qXchQrBf012AIhaSlzTP4ya21f
AZw+AGSA0Kl1hg==
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:13:21 2026 by rpki-client