Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
File:                     Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft (raw, json)
Hash identifier:          OiPArEsnMUWKVWa9ILIHYL18G0hggEUKOEkvRk/E/Oc=
Subject key identifier:   56:AB:CC:A2:76:61:44:19:28:2C:58:23:49:A1:39:F0:66:0B:74:DD
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Certificate issuer:       /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial:       019EBE1096911C67D6C0479C8980D3B8B9A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
Manifest number:          01A2
Signing time:             Fri 12 Jun 2026 23:00:18 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:18 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:18 +0000
Files and hashes:         1: Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl (hash: X7boiS52XYRsTuSHptP8ebumTaH0gnY6halVg6PHapQ=)
                          2: _xStacbF1--N4qcbHR6hs_B-jRQ.asa (hash: Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:96:91:1c:67:d6:c0:47:9c:89:80:d3:b8:b9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
        Validity
            Not Before: Jun 12 23:00:18 2026 GMT
            Not After : Jun 13 23:00:18 2026 GMT
        Subject: CN=56abcca276614419282c582349a139f0660b74dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:e2:2d:93:01:a6:66:04:5e:b8:16:62:00:
                    9b:94:cf:ca:43:5d:61:d1:3b:4a:92:46:ac:24:ae:
                    94:de:26:87:a2:00:80:5c:4a:93:b5:cc:b3:49:72:
                    d1:46:57:cd:0b:2f:17:b9:d9:e6:ba:84:43:30:24:
                    07:01:e1:1a:64:b8:de:da:f9:09:55:f3:d7:13:b8:
                    83:4c:88:da:a0:fc:dc:de:4a:b2:7a:46:c0:3e:53:
                    30:49:4e:2b:7f:6e:16:f5:11:88:89:a9:e3:55:d5:
                    23:ac:68:28:c2:61:09:8e:7c:01:b4:5c:c9:30:76:
                    8b:c8:32:ec:6b:d4:a6:ee:42:4b:3f:3a:53:b3:ac:
                    20:56:de:85:e2:02:83:6a:6b:e0:80:5d:b8:07:a4:
                    88:4c:a2:45:9e:e7:64:65:60:2c:bd:ba:0a:5b:73:
                    7d:9a:8f:80:db:fb:4e:b8:2a:b9:5a:9b:97:b8:d5:
                    35:2a:8d:0e:e1:62:5a:54:24:fb:62:a2:1a:03:da:
                    0d:47:00:a6:5f:76:48:fe:4d:ea:a8:92:26:a8:54:
                    76:11:e3:53:66:6a:d7:13:4d:85:04:45:b7:c4:47:
                    44:46:b9:7e:7d:82:3b:e7:c6:2c:9a:d2:7b:d1:b4:
                    12:f2:2e:3f:51:30:f5:15:6b:94:19:43:20:b2:e9:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AB:CC:A2:76:61:44:19:28:2C:58:23:49:A1:39:F0:66:0B:74:DD
            X509v3 Authority Key Identifier:
                keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3b:50:eb:a1:16:ee:cb:a0:59:62:59:97:7d:69:53:a4:44:
         2c:83:88:a5:66:bc:1d:6e:f2:c3:93:e7:64:a5:dc:9a:ad:11:
         15:a4:11:fb:9d:1f:c8:0a:8b:1a:0f:6f:df:bf:bd:c5:cf:15:
         c8:ca:40:7d:ce:a6:b3:04:98:e1:ac:1d:d5:d2:cd:2d:dc:a2:
         50:fa:1b:ff:03:4c:56:cc:60:a8:06:19:ec:2d:bc:63:2b:84:
         42:82:2c:15:ad:22:39:d1:21:24:9e:fc:17:de:94:81:5a:8c:
         97:7e:37:58:a7:9b:d0:b4:1d:bd:7d:61:5a:a3:8f:99:2c:42:
         9c:f8:b8:42:de:95:ea:50:cf:54:a6:3f:85:45:d6:14:69:1f:
         17:f8:c7:eb:86:d2:59:92:f4:44:67:00:2b:6a:02:f3:fd:42:
         85:43:ad:6c:c6:a9:86:67:8a:be:ee:2f:da:d4:0f:df:69:17:
         5b:80:03:c4:dd:62:ea:38:1c:6b:fc:0f:a7:5b:35:e5:c8:2c:
         34:eb:5b:26:3e:e5:df:01:2a:f3:d0:72:a8:39:ef:98:e6:ec:
         ed:12:97:37:11:7b:f5:63:dc:cd:b9:8e:9a:ba:8c:09:9f:dd:
         e3:d5:b4:3f:97:8f:5e:a9:74:e2:5e:f7:ea:0e:f2:62:46:41:
         fd:0b:7a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EJaRHGfWwEeciYDTuLmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2QyM2ZlMmY3MzhlNTNlNzM1MGMyN2MxMmUzODI4NGJj
ZGE4N2QwHhcNMjYwNjEyMjMwMDE4WhcNMjYwNjEzMjMwMDE4WjAzMTEwLwYDVQQD
Eyg1NmFiY2NhMjc2NjE0NDE5MjgyYzU4MjM0OWExMzlmMDY2MGI3NGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG/iLZMBpmYEXrgWYgCblM/KQ11h
0TtKkkasJK6U3iaHogCAXEqTtcyzSXLRRlfNCy8XudnmuoRDMCQHAeEaZLje2vkJ
VfPXE7iDTIjaoPzc3kqyekbAPlMwSU4rf24W9RGIianjVdUjrGgowmEJjnwBtFzJ
MHaLyDLsa9Sm7kJLPzpTs6wgVt6F4gKDamvggF24B6SITKJFnudkZWAsvboKW3N9
mo+A2/tOuCq5WpuXuNU1Ko0O4WJaVCT7YqIaA9oNRwCmX3ZI/k3qqJImqFR2EeNT
ZmrXE02FBEW3xEdERrl+fYI758YsmtJ70bQS8i4/UTD1FWuUGUMgsunH+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFarzKJ2YUQZKCxYI0mhOfBmC3TdMB8GA1UdIwQY
MBaAFCM9I/4vc45T5zUMJ8EuOChLzah9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2Et
MmU0MTU0ZjM5NTBkLzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80ZjQ1NGYtMGRlNC00YWM3LWI1Y2EtMmU0MTU0ZjM5NTBk
LzEvSXowal9pOXpqbFBuTlF3bndTNDRLRXZOcUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjtQ66EW
7sugWWJZl31pU6RELIOIpWa8HW7yw5PnZKXcmq0RFaQR+50fyAqLGg9v37+9xc8V
yMpAfc6mswSY4awd1dLNLdyiUPob/wNMVsxgqAYZ7C28YyuEQoIsFa0iOdEhJJ78
F96UgVqMl343WKeb0LQdvX1hWqOPmSxCnPi4Qt6V6lDPVKY/hUXWFGkfF/jH64bS
WZL0RGcAK2oC8/1ChUOtbMaphmeKvu4v2tQP32kXW4ADxN1i6jgca/wPp1s15cgs
NOtbJj7l3wEq89ByqDnvmObs7RKXNxF79WPczbmOmrqMCZ/d49W0P5ePXql04l73
6g7yYkZB/Qt6Og==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:34 2026 by rpki-client