Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          MoP+tj9mzpUWS/cwikqz6htyCtm/PZ5KGH1kafv/LQM=
Subject key identifier:   BF:BA:7A:7F:75:38:69:53:15:65:6E:D0:3E:79:0F:E9:55:B9:64:78
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       019EB98FD23D13ED472D9092C2E20F957C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          1956
Signing time:             Fri 12 Jun 2026 02:01:10 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:10 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:10 +0000
Files and hashes:         1: PHd3RlGosSCiiJlgByr5DyGNERo.roa (hash: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: ZnRbhJ1g1vCrwQjK6yo2fxcBJ+1Yn1uOxSpZvm7GzeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:d2:3d:13:ed:47:2d:90:92:c2:e2:0f:95:7c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Jun 12 02:01:10 2026 GMT
            Not After : Jun 13 02:01:10 2026 GMT
        Subject: CN=bfba7a7f7538695315656ed03e790fe955b96478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:6b:38:cc:ec:ba:3c:1e:50:e2:39:c3:d1:
                    ea:a8:58:a2:58:45:ea:95:48:a9:f8:9a:c9:df:a8:
                    31:e0:7b:63:5d:f1:8f:3a:f9:7c:84:d9:a7:e3:2a:
                    e6:e6:ed:fe:a4:a0:94:8c:45:e3:00:a2:dc:72:5d:
                    91:5e:d6:35:0d:62:cf:3c:ca:26:f7:b2:89:9c:4b:
                    c1:57:2c:fa:67:d2:2d:49:60:cf:0e:9e:04:ec:95:
                    fa:34:0e:cc:84:2b:28:4a:e0:3f:13:4e:c5:70:37:
                    be:c8:9f:78:10:9c:a2:a8:ef:6f:1e:bd:6b:77:e9:
                    df:db:8f:d4:5b:1b:6f:cb:61:6c:f6:63:6e:2c:40:
                    19:3e:31:ad:07:7b:d5:e1:f9:f1:ef:d8:86:02:21:
                    fa:8d:89:7a:ca:66:9a:c8:a3:cc:ed:1e:21:d3:b6:
                    a0:49:4f:10:af:c2:be:74:6b:18:66:54:47:9c:55:
                    78:37:6d:c3:3a:95:41:2a:f4:b5:03:b9:2e:63:5a:
                    a0:48:d1:ca:c4:21:a8:10:5a:b2:a7:0c:9f:fe:28:
                    7c:e5:6a:8d:06:6b:18:30:55:0d:80:b3:e7:f6:2b:
                    a7:24:1d:46:19:73:04:22:6a:f6:b4:ff:e8:60:3a:
                    2d:a6:92:30:65:95:a3:4d:3d:39:de:e6:79:35:72:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BA:7A:7F:75:38:69:53:15:65:6E:D0:3E:79:0F:E9:55:B9:64:78
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:6d:ec:32:61:f9:15:16:a3:b8:c8:99:c6:be:2f:87:99:
         b4:9b:82:fc:f3:89:d1:8c:ae:31:a9:50:16:05:b2:7a:c7:44:
         4c:a7:e8:5e:18:fd:2f:d2:ad:8b:1c:22:ed:52:37:3d:5c:ad:
         f5:aa:33:64:43:f9:41:31:11:5e:54:cd:01:49:4e:2d:a0:7a:
         1b:b4:3c:cd:4c:5c:3f:fb:71:85:c5:85:58:c1:8b:32:fd:a7:
         49:1f:f0:57:f3:6e:d5:c7:e2:fb:33:0c:1a:76:75:8d:91:71:
         71:80:09:63:3a:e0:8f:71:e1:2f:fd:91:9b:0e:26:ca:75:fb:
         bd:8e:96:d4:13:94:43:98:ea:18:8b:08:d7:ec:2c:c0:8b:01:
         af:f5:81:17:31:90:53:ec:a7:e2:d9:fb:ab:b7:f8:7e:ed:0f:
         04:bb:54:04:84:b0:19:34:2b:dc:1b:d4:6b:c0:31:66:bb:d1:
         e3:70:9b:57:8e:27:70:fd:6c:be:08:44:fc:bb:67:95:7d:81:
         3e:e5:12:4d:21:0c:81:c6:03:bb:c0:b1:bb:bf:27:1a:3e:6c:
         aa:55:01:fc:ab:8c:82:c4:65:b3:41:10:b4:d4:57:4f:5d:c6:
         74:84:e0:d2:eb:ec:de:33:3f:df:45:b9:23:59:55:fa:72:9e:
         aa:c3:7c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j9I9E+1HLZCSwuIPlXwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0
MGI5ZjEwHhcNMjYwNjEyMDIwMTEwWhcNMjYwNjEzMDIwMTEwWjAzMTEwLwYDVQQD
EyhiZmJhN2E3Zjc1Mzg2OTUzMTU2NTZlZDAzZTc5MGZlOTU1Yjk2NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv5rOMzsujweUOI5w9HqqFiiWEXq
lUip+JrJ36gx4HtjXfGPOvl8hNmn4yrm5u3+pKCUjEXjAKLccl2RXtY1DWLPPMom
97KJnEvBVyz6Z9ItSWDPDp4E7JX6NA7MhCsoSuA/E07FcDe+yJ94EJyiqO9vHr1r
d+nf24/UWxtvy2Fs9mNuLEAZPjGtB3vV4fnx79iGAiH6jYl6ymaayKPM7R4h07ag
SU8Qr8K+dGsYZlRHnFV4N23DOpVBKvS1A7kuY1qgSNHKxCGoEFqypwyf/ih85WqN
BmsYMFUNgLPn9iunJB1GGXMEImr2tP/oYDotppIwZZWjTT053uZ5NXIcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+6en91OGlTFWVu0D55D+lVuWR4MB8GA1UdIwQY
MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt
Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw
LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4Zt7DJh
+RUWo7jImca+L4eZtJuC/POJ0YyuMalQFgWyesdETKfoXhj9L9Ktixwi7VI3PVyt
9aozZEP5QTERXlTNAUlOLaB6G7Q8zUxcP/txhcWFWMGLMv2nSR/wV/Nu1cfi+zMM
GnZ1jZFxcYAJYzrgj3HhL/2Rmw4mynX7vY6W1BOUQ5jqGIsI1+wswIsBr/WBFzGQ
U+yn4tn7q7f4fu0PBLtUBISwGTQr3BvUa8AxZrvR43CbV44ncP1svghE/LtnlX2B
PuUSTSEMgcYDu8Cxu78nGj5sqlUB/KuMgsRls0EQtNRXT13GdITg0uvs3jM/30W5
I1lV+nKeqsN8dQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:36 2026 by rpki-client