Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File:                     01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier:          Klxs0YHK5raNHSTSkXoWEvtjP1e4IcX1T1c3Bef/j7o=
Subject key identifier:   90:82:11:AA:8E:5A:A3:42:50:BC:6B:93:03:53:B1:7C:5F:FA:6F:D8
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer:       /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial:       019EBEECC34E0A668BB2094C681E2353CB51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number:          B1
Signing time:             Sat 13 Jun 2026 03:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:47 +0000
Files and hashes:         1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: QUhgIMt1Kj+RxgD4/GQE5juoKeSPLgPTstZun2HIRYE=)
                          2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
                          3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:c3:4e:0a:66:8b:b2:09:4c:68:1e:23:53:cb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
        Validity
            Not Before: Jun 13 03:00:47 2026 GMT
            Not After : Jun 14 03:00:47 2026 GMT
        Subject: CN=908211aa8e5aa34250bc6b930353b17c5ffa6fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:cb:f0:05:06:21:fa:0e:66:fb:94:a2:d3:
                    0a:3d:04:02:8f:bb:70:2f:81:ec:b2:94:41:39:8d:
                    ec:09:54:1c:72:d8:54:1b:b4:4e:97:6f:2e:0f:82:
                    bb:3e:22:2f:17:06:e2:ac:8f:d3:ae:b8:f2:f2:c7:
                    f1:8f:b4:0b:f5:5a:3d:19:67:cf:29:1e:58:27:5c:
                    14:89:50:3e:c4:1f:e4:26:41:cd:34:f2:81:2f:f1:
                    bd:be:1c:a4:89:08:e9:b6:a9:2e:e3:50:30:c7:26:
                    bd:c6:a9:fc:94:2d:9a:f2:30:9f:48:36:9c:44:aa:
                    09:1e:95:fd:a0:01:a2:73:7c:76:8b:ca:ab:a5:63:
                    bd:17:4b:ac:75:62:8e:b3:85:d9:c5:6a:8e:7c:d4:
                    f0:e2:ca:55:92:90:38:02:57:e7:20:9c:c0:56:91:
                    89:29:06:82:be:00:b1:cd:78:91:46:5e:3b:00:01:
                    3e:e6:6a:c4:1b:b5:c7:a3:39:5e:d6:da:8d:a0:54:
                    fc:56:61:06:35:ff:7a:a6:8b:96:98:2b:47:2e:8f:
                    c2:9b:72:3a:ac:b6:e6:77:ef:0c:5c:45:1b:99:d9:
                    53:2e:4b:f1:ed:ee:00:3f:2f:df:7e:7a:a0:5d:a9:
                    66:ef:3c:2e:26:74:53:00:f6:4f:80:b1:af:56:1c:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:11:AA:8E:5A:A3:42:50:BC:6B:93:03:53:B1:7C:5F:FA:6F:D8
            X509v3 Authority Key Identifier:
                keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:62:40:2c:6f:43:87:69:ac:8f:39:e5:73:eb:ae:57:81:fb:
         9b:72:29:38:de:cb:db:89:03:ad:d1:78:22:0a:16:ab:bf:22:
         3d:73:52:ae:f3:89:77:7e:d0:43:cd:63:5d:13:a7:69:6a:fa:
         b7:d7:01:8a:54:8e:ee:4e:61:b2:49:31:e0:4f:5a:ac:f4:36:
         da:00:50:af:9c:8a:d5:cb:13:a8:c9:85:73:1c:b0:b5:bb:13:
         51:0b:b9:86:ae:13:6f:60:4d:dd:d7:8b:7d:1a:e4:13:7d:5f:
         c3:d6:35:ee:8b:44:3b:cc:79:f4:17:1f:8e:b2:65:d3:09:a6:
         0c:c0:30:6c:f0:78:cd:a3:0b:2b:bd:7c:70:04:6a:6b:e2:26:
         17:1d:97:46:e8:0e:2e:a5:61:3e:9a:42:4a:db:cd:86:6d:5e:
         ba:7f:a9:e2:46:19:46:e1:43:96:59:ce:f1:61:1c:b7:c9:0c:
         e3:4e:71:cd:e9:b4:37:9f:11:3a:b4:d3:df:b6:d5:e3:dc:60:
         d6:42:57:60:36:42:7d:4a:0d:09:3b:1b:49:42:a9:3d:c2:e5:
         10:ea:5d:2c:fd:cb:81:5a:66:c6:84:a5:29:6d:39:93:0f:c0:
         e9:8d:ca:57:6f:98:9c:cd:a9:03:d4:ef:23:2d:f9:97:f7:77:
         0e:55:0f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7MNOCmaLsglMaB4jU8tRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTU1ZGI5ZjZjZGNiZGRiMDUyYTQ1MzQ4ZWYwZDZhNmQ1
YmMxYzEwHhcNMjYwNjEzMDMwMDQ3WhcNMjYwNjE0MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg5MDgyMTFhYThlNWFhMzQyNTBiYzZiOTMwMzUzYjE3YzVmZmE2ZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdDL8AUGIfoOZvuUotMKPQQCj7tw
L4HsspRBOY3sCVQccthUG7ROl28uD4K7PiIvFwbirI/Trrjy8sfxj7QL9Vo9GWfP
KR5YJ1wUiVA+xB/kJkHNNPKBL/G9vhykiQjptqku41Awxya9xqn8lC2a8jCfSDac
RKoJHpX9oAGic3x2i8qrpWO9F0usdWKOs4XZxWqOfNTw4spVkpA4AlfnIJzAVpGJ
KQaCvgCxzXiRRl47AAE+5mrEG7XHozle1tqNoFT8VmEGNf96pouWmCtHLo/Cm3I6
rLbmd+8MXEUbmdlTLkvx7e4APy/ffnqgXalm7zwuJnRTAPZPgLGvVhw6VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCCEaqOWqNCULxrkwNTsXxf+m/YMB8GA1UdIwQY
MBaAFNNVXbn2zcvdsFKkU0jvDWptW8HBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFWZHVmYk55OTJ3VXFSVFNPOE5hbTFid2NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zYWRlMzEtNGFjMS00MzVlLWI0ZTUt
M2FkMTNjNjAzZWEyLzEvMDFWZHVmYk55OTJ3VXFSVFNPOE5hbTFid2NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zYWRlMzEtNGFjMS00MzVlLWI0ZTUtM2FkMTNjNjAzZWEy
LzEvMDFWZHVmYk55OTJ3VXFSVFNPOE5hbTFid2NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGJALG9D
h2msjznlc+uuV4H7m3IpON7L24kDrdF4IgoWq78iPXNSrvOJd37QQ81jXROnaWr6
t9cBilSO7k5hskkx4E9arPQ22gBQr5yK1csTqMmFcxywtbsTUQu5hq4Tb2BN3deL
fRrkE31fw9Y17otEO8x59BcfjrJl0wmmDMAwbPB4zaMLK718cARqa+ImFx2XRugO
LqVhPppCStvNhm1eun+p4kYZRuFDllnO8WEct8kM405xzem0N58ROrTT37bV49xg
1kJXYDZCfUoNCTsbSUKpPcLlEOpdLP3LgVpmxoSlKW05kw/A6Y3KV2+YnM2pA9Tv
Iy35l/d3DlUPBg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:00 2026 by rpki-client