Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File:                     SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier:          AARr+H/dqIV87xY0U/iv/gnGgzKYRzXBi9PeFSYehzE=
Subject key identifier:   4D:1E:DD:CF:1D:D0:7B:E1:32:D2:08:98:68:98:CB:16:9E:F9:5D:C8
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer:       /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial:       019EB7331D820606C4950133137DD83D062A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number:          0935
Signing time:             Thu 11 Jun 2026 15:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:40 +0000
Files and hashes:         1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
                          2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: Hl8mOdik+7XKLZ60GVcaEk2hIulHZ4Ipbt5YefnffKU=)
                          3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
                          4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:1d:82:06:06:c4:95:01:33:13:7d:d8:3d:06:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
        Validity
            Not Before: Jun 11 15:00:40 2026 GMT
            Not After : Jun 12 15:00:40 2026 GMT
        Subject: CN=4d1eddcf1dd07be132d208986898cb169ef95dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:bb:a0:62:06:63:a8:60:cd:dc:ef:b5:0a:
                    5c:e8:e5:cb:15:6d:2e:4d:0f:04:f3:00:a1:cd:21:
                    d2:29:3b:b2:ce:5e:84:e8:cd:3a:c8:f3:89:26:90:
                    b2:53:8c:58:0b:9b:e8:8a:81:c9:05:95:14:25:f1:
                    1a:44:bf:d6:fc:38:0e:80:b5:1a:28:df:60:aa:67:
                    dd:91:7e:8f:65:6d:e1:ab:11:28:18:a4:28:4b:ac:
                    11:ee:e8:26:9d:52:ca:cc:8e:e8:4d:96:7c:e7:16:
                    e5:ad:ef:a1:6c:18:e2:73:93:1d:6b:12:45:a8:67:
                    ed:10:a8:0a:08:7a:ce:be:40:a7:61:22:cf:83:a0:
                    ef:a8:f4:c3:5d:8a:20:a6:db:c4:40:e2:76:68:c9:
                    f3:13:f5:9d:fb:5c:ab:71:ca:1f:c0:04:41:56:e3:
                    94:72:a4:e3:e1:21:0f:8e:a8:0d:61:2d:5c:6f:12:
                    7e:7f:19:38:61:ed:03:8d:ca:59:d1:50:f5:f8:cf:
                    2b:d9:81:4f:58:35:b1:be:0d:45:ff:c9:13:e3:33:
                    e5:52:64:2f:37:d7:a8:7b:b3:f4:ee:bc:e6:95:f4:
                    6f:6e:13:34:67:f9:46:df:44:74:5a:71:53:e4:79:
                    fb:f4:57:9b:3c:01:40:6a:1f:36:af:9a:79:e3:2b:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1E:DD:CF:1D:D0:7B:E1:32:D2:08:98:68:98:CB:16:9E:F9:5D:C8
            X509v3 Authority Key Identifier:
                keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:09:8a:a5:17:24:3d:8e:9d:7e:6e:01:b6:09:f4:c3:b1:96:
         ba:b2:6e:d7:2e:d3:0f:da:f1:1c:81:c1:f4:f3:7d:c6:51:e7:
         af:2a:4c:c1:5d:1e:89:d5:ec:82:a5:b7:82:4d:28:52:a6:87:
         92:d3:9e:01:a7:e0:5b:d5:d5:38:52:56:64:4b:8c:bf:7d:f8:
         ec:9e:1b:92:da:77:07:77:68:19:89:82:1a:51:c7:51:be:66:
         0e:8d:1c:ea:48:9d:28:2c:4d:97:3a:1a:64:58:5c:1a:29:79:
         0f:0f:d6:80:81:2f:8b:18:2d:d2:5f:36:6b:8f:92:33:8e:6a:
         10:98:8d:37:a0:b5:5f:da:f9:71:32:69:4d:33:ea:ca:ad:70:
         f1:c7:ef:ee:19:e0:e2:2d:65:5f:dc:19:a7:cf:fa:fe:4a:49:
         fa:b3:41:00:09:cf:ec:0d:65:34:65:85:fc:73:3f:18:b8:c3:
         d0:e9:07:93:fe:db:40:75:f0:69:5f:9f:18:39:66:68:53:4f:
         da:10:06:ab:56:8c:d1:07:a0:bb:8b:6f:fe:37:97:f7:91:31:
         44:0e:23:96:0c:89:09:4b:bd:67:af:4a:38:53:f0:f1:6d:34:
         46:96:18:1a:7b:7d:76:63:cd:ef:a9:17:72:93:25:89:b1:8f:
         15:ac:2e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63Mx2CBgbElQEzE33YPQYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm
MzM1OGEwHhcNMjYwNjExMTUwMDQwWhcNMjYwNjEyMTUwMDQwWjAzMTEwLwYDVQQD
Eyg0ZDFlZGRjZjFkZDA3YmUxMzJkMjA4OTg2ODk4Y2IxNjllZjk1ZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4y7oGIGY6hgzdzvtQpc6OXLFW0u
TQ8E8wChzSHSKTuyzl6E6M06yPOJJpCyU4xYC5voioHJBZUUJfEaRL/W/DgOgLUa
KN9gqmfdkX6PZW3hqxEoGKQoS6wR7ugmnVLKzI7oTZZ85xblre+hbBjic5MdaxJF
qGftEKgKCHrOvkCnYSLPg6DvqPTDXYogptvEQOJ2aMnzE/Wd+1yrccofwARBVuOU
cqTj4SEPjqgNYS1cbxJ+fxk4Ye0DjcpZ0VD1+M8r2YFPWDWxvg1F/8kT4zPlUmQv
N9eoe7P07rzmlfRvbhM0Z/lG30R0WnFT5Hn79FebPAFAah82r5p54yvFyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0e3c8d0HvhMtIImGiYyxae+V3IMB8GA1UdIwQY
MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt
ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl
LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAmKpRck
PY6dfm4Btgn0w7GWurJu1y7TD9rxHIHB9PN9xlHnrypMwV0eidXsgqW3gk0oUqaH
ktOeAafgW9XVOFJWZEuMv3347J4bktp3B3doGYmCGlHHUb5mDo0c6kidKCxNlzoa
ZFhcGil5Dw/WgIEvixgt0l82a4+SM45qEJiNN6C1X9r5cTJpTTPqyq1w8cfv7hng
4i1lX9wZp8/6/kpJ+rNBAAnP7A1lNGWF/HM/GLjD0OkHk/7bQHXwaV+fGDlmaFNP
2hAGq1aM0Qegu4tv/jeX95ExRA4jlgyJCUu9Z69KOFPw8W00RpYYGnt9dmPN76kX
cpMlibGPFawuqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:43:10 2026 by rpki-client