Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
File:                     rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft (raw, json)
Hash identifier:          Cu1eGn60QDlVceYfMp0sLW7Yt8rCTxQlFmlKta3IsBE=
Subject key identifier:   8E:BD:B3:77:B8:DB:84:76:15:95:30:BF:8D:DE:B6:A9:A6:2B:A0:32
Authority key identifier: AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
Certificate issuer:       /CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Certificate serial:       019EC36E5471AD3DCD4A120D9DCE9122E4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
Manifest number:          A3
Signing time:             Sun 14 Jun 2026 00:00:48 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:48 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:48 +0000
Files and hashes:         1: WgFjeIjodHf0tIFJwgd7qL6VzDY.roa (hash: SbLcaGFtR51gDtKvy7+lV/tvtr//sjAXrktSn3Oq23Q=)
                          2: rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl (hash: JAwpEvI6e3PQ9O6MxWwmNFww3qaVEQKlceJvPdvxYBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:54:71:ad:3d:cd:4a:12:0d:9d:ce:91:22:e4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add3eec331b702a206b54dfe9063b8c17a42b81c
        Validity
            Not Before: Jun 14 00:00:48 2026 GMT
            Not After : Jun 15 00:00:48 2026 GMT
        Subject: CN=8ebdb377b8db8476159530bf8ddeb6a9a62ba032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:c7:b9:f1:fc:6a:33:91:4a:ed:fa:ff:e2:
                    e2:e0:1b:54:23:c1:f0:0d:0e:e4:e7:05:f7:eb:13:
                    96:04:b8:cc:fe:9e:3d:db:15:a2:fa:09:04:df:8c:
                    85:3d:3b:d1:8c:70:c5:1c:30:20:c1:57:60:4a:88:
                    44:7c:f1:31:0a:03:c3:25:f4:45:80:43:85:9b:b5:
                    af:82:c5:89:0c:4b:e0:0d:b2:25:59:10:4d:6b:50:
                    b5:35:e0:f1:ca:5e:eb:d7:b7:64:24:40:59:e0:cf:
                    16:97:f7:87:65:2b:b4:3f:87:88:9d:27:58:20:69:
                    96:51:bc:bb:8b:a4:eb:df:3a:df:8b:58:84:f3:ec:
                    80:9d:33:23:25:17:93:12:6c:f3:95:95:5f:02:13:
                    73:d0:1e:58:6a:f5:a2:34:9e:0a:61:52:b0:3b:5e:
                    b3:32:3c:f1:84:3e:e8:9e:9e:69:50:1b:7b:14:6a:
                    b9:35:e6:66:4a:27:9f:ca:29:4f:78:ed:04:58:ad:
                    10:cc:0a:df:2a:6f:1c:c8:c4:03:4e:a6:f3:82:61:
                    4e:e2:44:61:f4:07:c2:4c:dc:4a:eb:ac:03:3b:2d:
                    34:60:3f:18:a3:df:38:b2:77:55:1f:ae:e4:e5:7f:
                    58:cf:07:03:69:dd:d8:41:b7:b1:34:f7:53:10:4c:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:B3:77:B8:DB:84:76:15:95:30:BF:8D:DE:B6:A9:A6:2B:A0:32
            X509v3 Authority Key Identifier:
                keyid:AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f6:2a:80:5a:20:12:2e:53:27:42:e2:2f:43:71:a2:aa:41:
         ba:80:b6:ba:31:bb:54:49:f9:80:73:a4:dd:73:f5:d2:4d:8b:
         78:e7:dc:b0:f7:fa:f9:82:cf:49:af:07:9b:c7:fb:fd:1e:d9:
         73:0c:4d:7b:b3:bd:64:a5:01:94:a2:72:e4:1b:1a:81:0f:94:
         fd:83:3b:31:ec:ac:a7:22:c0:a9:92:06:50:e9:05:2a:53:71:
         52:a2:a8:76:6a:a7:1d:89:dd:13:40:2a:b7:7a:9e:35:d4:a6:
         83:13:55:0b:b0:57:a0:a3:ff:74:3f:56:06:84:c5:4d:5b:37:
         50:c2:76:e1:a0:2d:7c:6f:75:18:9a:79:7b:a4:8f:0c:97:20:
         52:f6:8c:5f:19:6c:af:76:d0:e2:e5:d1:bb:63:44:c9:3d:c4:
         6a:64:e7:51:cd:bb:0f:91:54:48:d3:41:e8:f4:30:69:7b:bb:
         ad:05:05:3e:55:4a:8c:f2:37:77:90:1d:da:cd:79:ae:ec:f0:
         2b:cc:5e:93:f6:4b:11:86:4f:2e:b0:5b:fa:82:4b:41:9c:c6:
         6c:09:f8:bf:b7:fc:30:a8:dd:14:a4:f7:8c:af:40:7b:24:3c:
         f9:c0:ee:79:d4:d7:40:57:3d:f9:84:38:c8:fb:31:41:bc:af:
         5d:04:8f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DblRxrT3NShINnc6RIuT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDNlZWMzMzFiNzAyYTIwNmI1NGRmZTkwNjNiOGMxN2E0
MmI4MWMwHhcNMjYwNjE0MDAwMDQ4WhcNMjYwNjE1MDAwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZWJkYjM3N2I4ZGI4NDc2MTU5NTMwYmY4ZGRlYjZhOWE2MmJhMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFbHufH8ajORSu36/+Li4BtUI8Hw
DQ7k5wX36xOWBLjM/p492xWi+gkE34yFPTvRjHDFHDAgwVdgSohEfPExCgPDJfRF
gEOFm7WvgsWJDEvgDbIlWRBNa1C1NeDxyl7r17dkJEBZ4M8Wl/eHZSu0P4eInSdY
IGmWUby7i6Tr3zrfi1iE8+yAnTMjJReTEmzzlZVfAhNz0B5YavWiNJ4KYVKwO16z
MjzxhD7onp5pUBt7FGq5NeZmSiefyilPeO0EWK0QzArfKm8cyMQDTqbzgmFO4kRh
9AfCTNxK66wDOy00YD8Yo984sndVH67k5X9YzwcDad3YQbexNPdTEEwCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI69s3e424R2FZUwv43etqmmK6AyMB8GA1UdIwQY
MBaAFK3T7sMxtwKiBrVN/pBjuMF6QrgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmRQdXd6RzNBcUlHdFUzLWtHTzR3WHBDdUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZTZmOTMtYjJmYy00OWUwLWJlODct
MzRiYjcxMGEzNDc4LzEvcmRQdXd6RzNBcUlHdFUzLWtHTzR3WHBDdUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9mZTZmOTMtYjJmYy00OWUwLWJlODctMzRiYjcxMGEzNDc4
LzEvcmRQdXd6RzNBcUlHdFUzLWtHTzR3WHBDdUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfYqgFog
Ei5TJ0LiL0NxoqpBuoC2ujG7VEn5gHOk3XP10k2LeOfcsPf6+YLPSa8Hm8f7/R7Z
cwxNe7O9ZKUBlKJy5BsagQ+U/YM7MeyspyLAqZIGUOkFKlNxUqKodmqnHYndE0Aq
t3qeNdSmgxNVC7BXoKP/dD9WBoTFTVs3UMJ24aAtfG91GJp5e6SPDJcgUvaMXxls
r3bQ4uXRu2NEyT3EamTnUc27D5FUSNNB6PQwaXu7rQUFPlVKjPI3d5Ad2s15ruzw
K8xek/ZLEYZPLrBb+oJLQZzGbAn4v7f8MKjdFKT3jK9AeyQ8+cDuedTXQFc9+YQ4
yPsxQbyvXQSPfw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:08 2026 by rpki-client