Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File:                     sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier:          qEoyYr7HuVbI2ej9BuMpwtWaFjQAw1o3VjnAPg/sn0g=
Subject key identifier:   8E:51:13:01:5B:0F:54:8A:BC:92:A4:54:95:87:60:1B:58:24:B7:AA
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer:       /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial:       019EC03605DBC9A81270EDDB3D94B379A16B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number:          0179
Signing time:             Sat 13 Jun 2026 09:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:26 +0000
Files and hashes:         1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
                          2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: NoN5aZtyqtsQ95wpC6+Ld1PL63wd4UG2rsGErlG2E+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:05:db:c9:a8:12:70:ed:db:3d:94:b3:79:a1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
        Validity
            Not Before: Jun 13 09:00:26 2026 GMT
            Not After : Jun 14 09:00:26 2026 GMT
        Subject: CN=8e5113015b0f548abc92a4549587601b5824b7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:50:1e:3e:31:de:df:a7:01:74:25:97:bd:
                    7a:f3:99:cc:53:85:f5:45:c8:ca:87:30:b0:53:e0:
                    ab:a3:1c:1b:b3:2a:a5:3b:7a:09:7c:89:88:71:cc:
                    3c:95:07:4c:3d:85:d9:6f:52:88:fc:15:f2:ea:e3:
                    d7:ad:88:bc:75:cf:5a:39:fb:57:8f:ed:d4:b4:d1:
                    cc:56:6e:97:e5:62:d8:e1:49:4f:77:93:28:2a:77:
                    be:06:45:cf:92:f2:f4:93:85:84:31:0b:8b:92:63:
                    9f:70:d0:0c:07:28:79:65:26:bd:d0:b8:d7:5a:e2:
                    3b:f9:67:22:39:8c:47:07:15:50:1c:ee:84:0e:64:
                    ee:c2:33:c8:ed:91:ad:5a:f4:0d:76:56:8e:80:ae:
                    92:68:32:b9:2d:fd:0a:0d:52:5d:ef:81:f4:fc:c9:
                    7b:25:b5:92:97:f0:95:30:0f:fd:f0:0f:bf:47:6d:
                    fb:a9:14:f9:9f:89:37:92:70:44:fa:f8:99:3d:f5:
                    39:0c:77:1d:fa:a7:22:62:df:b5:01:fb:31:34:cc:
                    48:f9:ac:4b:f4:7c:e4:9e:62:ca:4e:e7:16:12:d4:
                    6d:57:ed:82:e3:1c:9d:aa:82:b0:c5:a3:82:f6:8f:
                    19:cc:31:7c:d8:9f:f8:e0:3e:a0:3b:e0:10:d0:68:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:51:13:01:5B:0F:54:8A:BC:92:A4:54:95:87:60:1B:58:24:B7:AA
            X509v3 Authority Key Identifier:
                keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:04:8f:c4:83:db:e1:2e:a9:ce:10:15:9f:4c:f7:be:13:a1:
         bf:f9:9a:00:3c:93:b9:be:cf:02:46:4d:f1:24:45:40:1a:79:
         b1:97:87:31:67:b6:f2:32:1b:cd:ed:85:52:8c:27:e1:46:9e:
         c8:8a:11:7b:ba:66:ce:2d:ea:e0:f5:fd:af:bb:e1:c1:73:ad:
         ae:e3:6c:df:05:cb:6f:f4:93:a1:e7:91:70:89:18:9f:ce:42:
         dc:e5:4e:98:18:1c:36:d6:94:03:e5:2f:b6:2b:d0:15:9b:35:
         34:29:70:34:5d:f6:6a:63:1d:e0:15:8b:68:85:59:28:b4:92:
         97:08:89:39:78:52:ce:da:30:14:ac:52:b8:9f:36:45:f7:3f:
         16:0d:44:a0:38:34:9b:ad:c5:b5:7c:60:d1:b7:dd:96:ec:8e:
         98:ab:48:52:16:ed:76:95:96:53:d0:59:d2:dc:e5:79:67:a1:
         53:2e:a2:cd:08:ed:d6:15:8d:ca:5a:e4:23:a7:54:67:95:1a:
         ca:64:93:31:52:8c:8a:78:1c:84:19:bc:b3:7b:fb:be:56:31:
         37:43:2c:a3:0c:68:34:fe:f4:a1:db:12:8a:58:1f:03:30:ee:
         3e:f1:97:fa:da:87:c3:8f:2f:80:71:f3:bc:b9:19:c9:48:df:
         5f:51:91:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANgXbyagScO3bPZSzeaFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGZlNWExOTljNzU0MzljNTI2NDkwNDU0YjRhYmQ1NDAy
MTM3YTkwHhcNMjYwNjEzMDkwMDI2WhcNMjYwNjE0MDkwMDI2WjAzMTEwLwYDVQQD
Eyg4ZTUxMTMwMTViMGY1NDhhYmM5MmE0NTQ5NTg3NjAxYjU4MjRiN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSRQHj4x3t+nAXQll71685nMU4X1
RcjKhzCwU+CroxwbsyqlO3oJfImIccw8lQdMPYXZb1KI/BXy6uPXrYi8dc9aOftX
j+3UtNHMVm6X5WLY4UlPd5MoKne+BkXPkvL0k4WEMQuLkmOfcNAMByh5ZSa90LjX
WuI7+WciOYxHBxVQHO6EDmTuwjPI7ZGtWvQNdlaOgK6SaDK5Lf0KDVJd74H0/Ml7
JbWSl/CVMA/98A+/R237qRT5n4k3knBE+viZPfU5DHcd+qciYt+1AfsxNMxI+axL
9HzknmLKTucWEtRtV+2C4xydqoKwxaOC9o8ZzDF82J/44D6gO+AQ0Gg0rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5REwFbD1SKvJKkVJWHYBtYJLeqMB8GA1UdIwQY
MBaAFLJP5aGZx1Q5xSZJBFS0q9VAITepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2tfbG9abkhWRG5GSmtrRVZMU3IxVUFoTjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82ZDRmMmItYjdiMS00MTYwLThkYjUt
YzE5OWRjYWY1YTEzLzEvc2tfbG9abkhWRG5GSmtrRVZMU3IxVUFoTjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy82ZDRmMmItYjdiMS00MTYwLThkYjUtYzE5OWRjYWY1YTEz
LzEvc2tfbG9abkhWRG5GSmtrRVZMU3IxVUFoTjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwSPxIPb
4S6pzhAVn0z3vhOhv/maADyTub7PAkZN8SRFQBp5sZeHMWe28jIbze2FUown4Uae
yIoRe7pmzi3q4PX9r7vhwXOtruNs3wXLb/SToeeRcIkYn85C3OVOmBgcNtaUA+Uv
tivQFZs1NClwNF32amMd4BWLaIVZKLSSlwiJOXhSztowFKxSuJ82Rfc/Fg1EoDg0
m63FtXxg0bfdluyOmKtIUhbtdpWWU9BZ0tzleWehUy6izQjt1hWNylrkI6dUZ5Ua
ymSTMVKMingchBm8s3v7vlYxN0MsowxoNP70odsSilgfAzDuPvGX+tqHw48vgHHz
vLkZyUjfX1GRgw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:10 2026 by rpki-client