Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          Fq3nvVNVF1WTMSLdVHRYAWDSqw6DCRAwuImK6G/xl/I=
Subject key identifier:   88:DC:89:B8:41:45:99:9B:DF:A3:E2:60:13:F2:11:63:DB:71:65:54
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       019EC3002A95B79DD51BF86C51FE561C3748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          14A1
Signing time:             Sat 13 Jun 2026 22:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:28 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: BDL41oamxMEuO8XuhO0zehFzy29mVAHM/KaK/d3wzNw=)
                          2: _BiThTGjxk4mTLq-x93nIMvlUFM.roa (hash: eb4KvoDqDMfsY+rM/WfNgq/w+lmr8scY27yz0mI6HFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:2a:95:b7:9d:d5:1b:f8:6c:51:fe:56:1c:37:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Jun 13 22:00:28 2026 GMT
            Not After : Jun 14 22:00:28 2026 GMT
        Subject: CN=88dc89b84145999bdfa3e26013f21163db716554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:72:fa:89:72:94:ee:99:17:a5:b6:f8:29:
                    db:5f:83:b2:34:58:63:52:02:ad:59:c9:d1:4e:cd:
                    0d:38:b5:ce:4c:b4:f9:5b:16:b4:8a:0f:a5:d8:27:
                    e3:71:a2:1f:c9:e8:8b:fd:f1:7b:28:cc:79:b6:d9:
                    8e:a1:2d:98:7c:a0:7a:eb:84:31:49:81:5b:27:2c:
                    9a:46:fb:de:2d:21:b8:03:1d:b4:73:c1:25:ae:0a:
                    cb:38:52:07:b4:f8:93:1b:ec:bd:83:83:77:5d:57:
                    f3:92:00:a0:df:b5:55:71:88:63:93:17:2f:f4:e4:
                    51:dc:e8:8a:1b:1d:7f:7f:11:f4:cd:96:1b:66:b7:
                    7c:22:57:79:35:8c:7a:92:8c:ac:ed:81:07:39:42:
                    80:b7:28:18:47:ad:7b:8d:be:69:0c:85:9f:97:3a:
                    b8:a5:0a:00:c8:a2:1a:30:d9:05:0d:c9:1a:e4:f0:
                    4f:c7:3a:4a:7e:a2:d6:04:b5:2e:90:c2:cb:50:97:
                    bf:d5:26:e9:79:68:4a:27:19:5c:82:9c:47:a7:65:
                    ad:12:5b:a1:5d:dc:d2:9e:13:6a:48:15:d1:42:41:
                    cb:78:45:ee:cb:77:1d:c3:43:9e:47:f9:e1:c4:4b:
                    66:27:f4:f1:c0:93:af:cb:9a:20:8f:a3:3d:3e:30:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DC:89:B8:41:45:99:9B:DF:A3:E2:60:13:F2:11:63:DB:71:65:54
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:f7:27:71:c8:54:45:0a:65:a8:8a:84:f8:0f:fd:16:f8:
         8e:1e:48:19:43:34:68:f5:12:c3:03:17:12:b9:fa:4e:58:1d:
         d9:f6:10:a6:8d:04:8a:4e:87:59:88:24:87:78:d7:66:f3:d6:
         46:9f:cd:56:93:0f:5f:30:d3:69:8c:6f:a8:ef:5e:2d:fe:f4:
         c7:51:6e:db:95:8b:e1:c9:dd:7a:6b:05:e3:88:ed:22:32:27:
         b1:87:e2:58:fd:11:a6:82:7a:51:bb:bd:c5:57:99:09:a7:f0:
         62:54:61:24:ac:ac:55:d6:46:be:9f:71:01:10:fe:2e:06:85:
         7e:cb:79:42:8e:5c:79:dc:3a:84:75:7a:77:15:86:c5:d4:4a:
         27:ac:02:78:03:24:da:d0:d7:be:dc:8a:df:c3:ec:6e:1c:3a:
         5e:5f:ee:a1:df:8d:41:8c:6e:49:93:3a:13:23:6f:16:66:ef:
         f5:27:c1:75:89:f9:af:2a:d9:8e:83:dc:b9:8a:c3:c1:5f:71:
         b8:3f:41:f4:51:a5:2e:01:53:46:e0:4c:1b:3d:4c:72:41:f0:
         6b:56:02:0f:0a:1d:01:6a:76:48:58:5f:6e:46:c9:42:1c:08:
         e1:c2:ac:21:c6:35:e9:c0:0b:2a:36:90:4b:0f:ed:71:53:15:
         c9:ed:78:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DACqVt53VG/hsUf5WHDdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjNhZDQwZjk2ZWQ1ZTdmMzlkOGQ5ZTE5NmFiZjBmYTIz
ODFlOGMwHhcNMjYwNjEzMjIwMDI4WhcNMjYwNjE0MjIwMDI4WjAzMTEwLwYDVQQD
Eyg4OGRjODliODQxNDU5OTliZGZhM2UyNjAxM2YyMTE2M2RiNzE2NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPBy+olylO6ZF6W2+CnbX4OyNFhj
UgKtWcnRTs0NOLXOTLT5Wxa0ig+l2CfjcaIfyeiL/fF7KMx5ttmOoS2YfKB664Qx
SYFbJyyaRvveLSG4Ax20c8ElrgrLOFIHtPiTG+y9g4N3XVfzkgCg37VVcYhjkxcv
9ORR3OiKGx1/fxH0zZYbZrd8Ild5NYx6koys7YEHOUKAtygYR617jb5pDIWflzq4
pQoAyKIaMNkFDcka5PBPxzpKfqLWBLUukMLLUJe/1SbpeWhKJxlcgpxHp2WtEluh
XdzSnhNqSBXRQkHLeEXuy3cdw0OeR/nhxEtmJ/TxwJOvy5ogj6M9PjBhXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjcibhBRZmb36PiYBPyEWPbcWVUMB8GA1UdIwQY
MBaAFBPzrUD5btXn852Nnhlqvw+iOB6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzJlN2UtZjBmMC00ZmUwLWE2MzQt
ZjRmYmUwY2I5NDQ0LzEvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzJlN2UtZjBmMC00ZmUwLWE2MzQtZjRmYmUwY2I5NDQ0
LzEvRV9PdFFQbHUxZWZ6blkyZUdXcV9ENkk0SG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaH3J3HI
VEUKZaiKhPgP/Rb4jh5IGUM0aPUSwwMXErn6Tlgd2fYQpo0Eik6HWYgkh3jXZvPW
Rp/NVpMPXzDTaYxvqO9eLf70x1Fu25WL4cndemsF44jtIjInsYfiWP0RpoJ6Ubu9
xVeZCafwYlRhJKysVdZGvp9xARD+LgaFfst5Qo5cedw6hHV6dxWGxdRKJ6wCeAMk
2tDXvtyK38Psbhw6Xl/uod+NQYxuSZM6EyNvFmbv9SfBdYn5ryrZjoPcuYrDwV9x
uD9B9FGlLgFTRuBMGz1MckHwa1YCDwodAWp2SFhfbkbJQhwI4cKsIcY16cALKjaQ
Sw/tcVMVye14sw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:48 2026 by rpki-client