Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File:                     AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier:          krebRfUBcwnqOq6z0v3hbtWnNEEFuG1aaEu5PSDZyT0=
Subject key identifier:   BA:47:5E:92:B5:F7:E1:B9:2A:EE:8E:23:64:43:BE:61:78:17:E8:F1
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer:       /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial:       019EC06D4DEB98D0453BE5157B4CCB4667F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number:          104B
Signing time:             Sat 13 Jun 2026 10:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:49 +0000
Files and hashes:         1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: 090f5Izqe4oKffON7uPi6f/5slCaPsGbCdxHSP2yO88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:4d:eb:98:d0:45:3b:e5:15:7b:4c:cb:46:67:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
        Validity
            Not Before: Jun 13 10:00:49 2026 GMT
            Not After : Jun 14 10:00:49 2026 GMT
        Subject: CN=ba475e92b5f7e1b92aee8e236443be617817e8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:43:dd:91:80:77:f5:49:39:7a:20:b0:b9:
                    80:ad:ac:8e:bb:d1:bb:ed:0c:f4:d8:a5:2c:c3:5c:
                    21:0e:c4:cc:05:69:e0:f1:15:06:ea:2d:88:c6:68:
                    67:0b:cd:30:18:ad:46:8c:aa:65:0b:5e:e6:f6:0f:
                    7d:17:8e:03:93:b4:14:a2:4f:63:db:5f:50:a6:9d:
                    7c:01:b5:58:3a:53:e4:23:c7:67:b8:b1:b0:c0:e9:
                    95:07:3e:0b:59:d3:28:5b:af:fc:fa:db:dc:0d:dc:
                    3a:66:92:e1:8e:db:fe:5d:e2:4b:fa:24:92:59:7b:
                    34:32:80:ee:48:ad:cd:1a:2a:4b:31:1f:66:43:83:
                    31:68:d8:5d:ae:c7:ec:fa:d0:09:c0:aa:e5:2a:55:
                    7e:91:c1:96:77:a1:56:15:09:40:88:75:ae:14:41:
                    3b:c9:88:0f:5d:95:b2:fc:0d:62:68:fb:06:d3:d7:
                    2d:00:93:58:2b:f3:cf:58:13:37:1f:d4:1f:8f:cf:
                    c6:dd:72:6d:55:b2:38:25:7e:dd:2d:26:e4:ad:11:
                    4e:23:c8:94:a3:ab:f8:2a:bc:7f:ad:91:f6:7a:8e:
                    64:e6:b3:3d:90:d9:ba:f5:fa:69:a2:90:a1:e3:15:
                    d2:b7:7a:4a:9c:89:60:b2:55:b8:03:c9:69:79:32:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:47:5E:92:B5:F7:E1:B9:2A:EE:8E:23:64:43:BE:61:78:17:E8:F1
            X509v3 Authority Key Identifier:
                keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:72:60:b5:de:d2:cd:2a:d1:33:5d:89:07:bd:37:1f:8a:2e:
         54:62:87:37:b2:88:83:a1:96:bd:51:6b:0a:bd:27:81:02:19:
         89:14:19:60:c6:3a:e4:c9:fc:33:80:17:7e:c1:32:c3:cc:40:
         82:f6:92:3c:8a:d9:7d:dc:94:75:17:e8:ee:64:3f:69:c1:18:
         8f:7d:4d:a3:f0:15:3c:63:f4:10:9b:2a:03:ba:9d:b7:d8:a4:
         82:ae:b2:9c:07:20:5f:99:64:84:41:9b:1b:9e:47:ed:08:df:
         60:6c:48:9e:b8:ef:90:1a:f0:ce:f8:a8:3f:e6:26:55:29:fd:
         ca:6b:ca:ce:a2:97:8a:d8:4e:9a:83:d5:17:4c:db:aa:ed:4d:
         a0:31:3c:06:35:62:55:31:b3:25:de:aa:8d:4f:19:fd:b4:b1:
         ae:fb:c0:2d:8b:68:1b:f3:e7:1c:80:53:30:05:8a:ec:88:84:
         c5:06:12:05:60:06:9a:2d:bf:16:71:85:56:01:0b:e7:96:d9:
         ce:58:ba:27:e1:87:e1:f3:9d:0e:e4:6c:00:19:58:cd:11:d1:
         8d:cd:83:73:d6:ee:b3:fb:72:c7:31:06:5f:79:50:c9:e7:6c:
         b8:c8:35:bd:6c:4d:11:a7:e8:36:5b:f8:47:cc:18:d1:22:92:
         74:01:40:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbU3rmNBFO+UVe0zLRmf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz
N2I4NDMwHhcNMjYwNjEzMTAwMDQ5WhcNMjYwNjE0MTAwMDQ5WjAzMTEwLwYDVQQD
EyhiYTQ3NWU5MmI1ZjdlMWI5MmFlZThlMjM2NDQzYmU2MTc4MTdlOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwRD3ZGAd/VJOXogsLmArayOu9G7
7Qz02KUsw1whDsTMBWng8RUG6i2IxmhnC80wGK1GjKplC17m9g99F44Dk7QUok9j
219Qpp18AbVYOlPkI8dnuLGwwOmVBz4LWdMoW6/8+tvcDdw6ZpLhjtv+XeJL+iSS
WXs0MoDuSK3NGipLMR9mQ4MxaNhdrsfs+tAJwKrlKlV+kcGWd6FWFQlAiHWuFEE7
yYgPXZWy/A1iaPsG09ctAJNYK/PPWBM3H9Qfj8/G3XJtVbI4JX7dLSbkrRFOI8iU
o6v4Krx/rZH2eo5k5rM9kNm69fppopCh4xXSt3pKnIlgslW4A8lpeTLtHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpHXpK19+G5Ku6OI2RDvmF4F+jxMB8GA1UdIwQY
MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt
Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2
LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnJgtd7S
zSrRM12JB703H4ouVGKHN7KIg6GWvVFrCr0ngQIZiRQZYMY65Mn8M4AXfsEyw8xA
gvaSPIrZfdyUdRfo7mQ/acEYj31No/AVPGP0EJsqA7qdt9ikgq6ynAcgX5lkhEGb
G55H7QjfYGxInrjvkBrwzvioP+YmVSn9ymvKzqKXithOmoPVF0zbqu1NoDE8BjVi
VTGzJd6qjU8Z/bSxrvvALYtoG/PnHIBTMAWK7IiExQYSBWAGmi2/FnGFVgEL55bZ
zli6J+GH4fOdDuRsABlYzRHRjc2Dc9bus/tyxzEGX3lQyedsuMg1vWxNEafoNlv4
R8wY0SKSdAFAxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:49 2026 by rpki-client