Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          8rT3w7EY+Hh2b0q1rscTaqDfcCscJUUvSHPUMSWgf+k=
Subject key identifier:   86:3D:C9:F7:6F:A5:5C:BD:73:50:41:6D:94:EB:6F:5B:C1:EB:FC:5F
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       019EB958BF78FC366ABEFE896E398BA09D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          195A
Signing time:             Fri 12 Jun 2026 01:01:01 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:01 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:01 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: mE8GwReZuksaVEzDdoHkRAyQsmjzlcRrKNzvAMVz9MM=)
                          2: FNGdELpGS2bwEGg4hvaYUE_r1O4.roa (hash: Ei6sBNoGSjj3ahbV1+2LrTjtk8IEn6iFKEC198BdvPQ=)
                          3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
                          4: zdTKCzMNYrD_vxLGScehqegrrJk.roa (hash: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:bf:78:fc:36:6a:be:fe:89:6e:39:8b:a0:9d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Jun 12 01:01:01 2026 GMT
            Not After : Jun 13 01:01:01 2026 GMT
        Subject: CN=863dc9f76fa55cbd7350416d94eb6f5bc1ebfc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:4f:cf:6d:05:4a:76:3c:49:4c:c0:0c:0e:
                    20:04:62:e8:b6:d3:98:42:c9:2c:59:06:d0:2a:c5:
                    66:1f:fa:ac:8e:f8:97:84:8b:ef:4f:9b:cd:16:e6:
                    ca:99:56:6a:84:cf:dc:d4:e6:5b:15:aa:18:d1:62:
                    a4:16:1e:04:1e:9d:5a:7b:a4:b6:d3:24:31:2a:6f:
                    f1:75:0c:2d:e0:0a:51:a5:d2:db:ac:14:68:4e:a6:
                    39:40:5a:fe:15:e9:de:3f:9d:4c:7b:6b:fd:90:e1:
                    6b:7a:cd:1d:d7:54:ce:4e:97:32:83:27:eb:b6:7e:
                    f3:34:78:a3:3f:10:02:27:1a:23:29:ce:22:e6:76:
                    08:6a:96:c6:1b:f7:08:96:d5:74:63:86:1c:72:0e:
                    5c:09:50:50:1e:4d:51:47:ec:75:92:38:ab:42:05:
                    56:4d:b2:43:35:e8:3c:9b:09:d2:fc:6f:00:d5:87:
                    2e:77:c4:54:e8:bd:84:7a:23:9a:25:13:50:3a:8b:
                    cc:bd:08:69:19:e0:98:82:6f:8b:64:a5:c0:b3:94:
                    c5:a7:f6:99:1e:5c:da:bc:6d:13:94:f5:bf:14:c1:
                    de:2c:75:2e:52:a2:29:24:21:85:0d:80:5e:63:e8:
                    79:c7:2c:9c:46:2c:b7:2c:cc:0b:6d:26:ed:17:40:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3D:C9:F7:6F:A5:5C:BD:73:50:41:6D:94:EB:6F:5B:C1:EB:FC:5F
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:26:b0:47:ca:4a:53:30:93:6d:b6:41:4f:c4:4f:30:ce:ea:
         b9:d8:fd:36:01:70:8b:90:95:6e:6e:8d:0b:6a:77:22:72:7e:
         fe:62:6a:55:12:43:69:09:86:9a:c2:5b:0d:39:30:2f:72:60:
         3c:ea:71:0b:8c:43:01:42:14:49:d8:9d:1d:a2:57:80:f3:9b:
         ed:b4:e0:e8:49:90:b3:72:ac:4a:b1:de:19:12:4e:74:57:c3:
         44:0a:54:03:77:2e:3e:26:ff:56:a5:5a:63:72:0c:3a:dc:4c:
         95:1d:cb:92:d7:4d:68:d9:e8:78:ee:74:09:78:9c:56:e1:a5:
         d3:12:35:69:73:97:f0:b4:50:2d:3f:c2:73:fd:28:c3:85:aa:
         7d:18:72:ba:02:e1:d7:64:07:30:02:b0:d7:d4:34:3f:b0:8c:
         84:88:09:2c:c0:17:e9:f9:78:8a:7f:27:3e:71:2f:1a:db:e3:
         3d:40:55:2a:02:04:b0:35:91:63:42:93:da:15:59:fb:c6:31:
         37:33:a8:07:85:64:af:43:14:86:af:cc:73:1e:27:62:19:d8:
         f6:f3:39:62:1b:8d:0a:09:6b:1c:c4:b6:4c:4f:03:b3:57:3e:
         a0:ca:d0:97:8a:9e:cf:eb:77:87:f1:e4:15:33:c3:11:23:49:
         81:43:36:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WL94/DZqvv6JbjmLoJ1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDEzNGZhZmJhNzJlMDYzMzljYWRjNTVkNWYxM2JhZTQ4
MmIxMmQwHhcNMjYwNjEyMDEwMTAxWhcNMjYwNjEzMDEwMTAxWjAzMTEwLwYDVQQD
Eyg4NjNkYzlmNzZmYTU1Y2JkNzM1MDQxNmQ5NGViNmY1YmMxZWJmYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjFPz20FSnY8SUzADA4gBGLottOY
QsksWQbQKsVmH/qsjviXhIvvT5vNFubKmVZqhM/c1OZbFaoY0WKkFh4EHp1ae6S2
0yQxKm/xdQwt4ApRpdLbrBRoTqY5QFr+FeneP51Me2v9kOFres0d11TOTpcygyfr
tn7zNHijPxACJxojKc4i5nYIapbGG/cIltV0Y4Yccg5cCVBQHk1RR+x1kjirQgVW
TbJDNeg8mwnS/G8A1Ycud8RU6L2EeiOaJRNQOovMvQhpGeCYgm+LZKXAs5TFp/aZ
HlzavG0TlPW/FMHeLHUuUqIpJCGFDYBeY+h5xyycRiy3LMwLbSbtF0DzQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY9yfdvpVy9c1BBbZTrb1vB6/xfMB8GA1UdIwQY
MBaAFA4BNPr7py4GM5ytxV1fE7rkgrEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzct
ZDEyNDZjYzJjMzRlLzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzctZDEyNDZjYzJjMzRl
LzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCawR8pK
UzCTbbZBT8RPMM7qudj9NgFwi5CVbm6NC2p3InJ+/mJqVRJDaQmGmsJbDTkwL3Jg
POpxC4xDAUIUSdidHaJXgPOb7bTg6EmQs3KsSrHeGRJOdFfDRApUA3cuPib/VqVa
Y3IMOtxMlR3LktdNaNnoeO50CXicVuGl0xI1aXOX8LRQLT/Cc/0ow4WqfRhyugLh
12QHMAKw19Q0P7CMhIgJLMAX6fl4in8nPnEvGtvjPUBVKgIEsDWRY0KT2hVZ+8Yx
NzOoB4Vkr0MUhq/Mcx4nYhnY9vM5YhuNCglrHMS2TE8Ds1c+oMrQl4qez+t3h/Hk
FTPDESNJgUM2Mg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:57:29 2026 by rpki-client