Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File:                     CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier:          SuSjrTbgL9mN77J3mCskQA0C8b+Jm3sZVz6vDpQsHy0=
Subject key identifier:   7F:72:D4:FA:68:36:66:C7:1E:9E:CD:BF:96:CB:9E:3B:FC:5E:0A:20
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer:       /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial:       019EC111FEB39AE0F9ED26FD56C88E058394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number:          06E4
Signing time:             Sat 13 Jun 2026 13:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:42 +0000
Files and hashes:         1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: 2xjV/n0Dw/U4WnZ2h9+RpALF5dps/XzCzwNipaPE/XU=)
                          2: dh9HELJ4HeZmOUN7AF9in9ZZ-Wk.roa (hash: QD9afYe9Euena6uMhuaF6GPrPcYje7bkgfG0gL/2Snw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:fe:b3:9a:e0:f9:ed:26:fd:56:c8:8e:05:83:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
        Validity
            Not Before: Jun 13 13:00:42 2026 GMT
            Not After : Jun 14 13:00:42 2026 GMT
        Subject: CN=7f72d4fa683666c71e9ecdbf96cb9e3bfc5e0a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:03:0a:ba:c0:ff:43:3c:28:dc:d4:13:69:
                    06:fb:1b:9e:6d:1d:7e:82:ba:c3:16:d0:2e:05:21:
                    f2:a7:29:3c:0a:10:6c:ba:4c:58:48:a6:7c:82:9f:
                    14:4a:fa:f1:af:be:d4:01:b1:8a:bc:20:87:ba:fc:
                    e7:07:38:41:a4:95:f5:22:d2:5f:c2:88:8a:de:3e:
                    52:d9:f8:15:52:f2:b4:0f:37:87:bf:17:6b:8f:99:
                    ff:df:00:fb:b4:0e:23:1c:82:13:5a:23:93:45:e9:
                    e3:ad:c1:27:9d:cd:ba:f1:50:70:a3:c9:ed:68:46:
                    7e:ee:4b:47:79:e0:d3:92:20:58:cf:17:93:b6:59:
                    42:a2:3d:92:fb:34:f0:c5:4c:0f:25:b7:99:ce:a2:
                    bb:b4:84:71:5a:8a:9b:70:89:61:23:24:84:df:88:
                    d4:d9:16:66:0f:66:35:12:0a:cc:23:66:57:17:4b:
                    18:13:e3:49:db:b9:60:45:51:ee:31:f2:ec:41:48:
                    cb:47:fb:d2:23:96:de:82:0d:92:49:06:e3:87:c9:
                    2d:4e:84:92:15:f4:ee:d0:47:a6:3d:3b:c1:85:42:
                    93:6e:80:ed:75:30:04:4b:f4:8d:d0:2c:5b:0e:c3:
                    20:04:3f:f9:af:e5:de:34:e4:58:dd:b1:de:bd:35:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:D4:FA:68:36:66:C7:1E:9E:CD:BF:96:CB:9E:3B:FC:5E:0A:20
            X509v3 Authority Key Identifier:
                keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5d:a2:c9:ae:3f:df:14:dc:d0:e0:7c:74:0d:5d:f1:11:32:
         8a:5c:75:7c:b1:c3:13:58:41:24:f0:c3:ee:3b:72:cd:b4:d2:
         ee:dc:a0:7b:93:91:c0:64:82:99:7a:4a:14:f7:80:df:d3:82:
         b9:1f:7a:62:8c:70:b9:ea:7b:ff:1c:f9:ab:06:7e:31:f2:ce:
         cb:53:22:51:46:21:af:d2:7a:5e:0a:49:53:64:9c:15:ce:1c:
         d7:23:46:d5:7f:83:e2:b8:29:a0:20:92:4f:f6:37:87:c7:2c:
         32:3e:cf:01:49:8b:d1:f3:03:0a:b8:4d:13:6f:26:86:6d:bf:
         ee:31:f0:48:32:eb:ae:bc:8b:2c:61:ea:03:5e:4b:95:1a:25:
         33:c5:48:c9:15:97:52:b7:7b:40:fc:22:db:8a:65:af:98:dd:
         ef:39:6f:0e:e8:87:06:fb:7d:2a:8f:96:6e:ce:a1:15:d5:8d:
         e0:9b:09:36:fc:71:1a:4f:02:02:b0:77:32:51:51:1f:63:f0:
         ed:88:a9:72:c1:07:fb:fc:95:ff:da:0a:c8:71:f9:85:96:d8:
         5b:7e:00:d3:fb:1e:a3:f2:a1:56:fe:d3:42:0d:df:c4:18:a5:
         62:1a:be:42:c5:d2:f3:88:57:2a:29:71:1e:5c:a2:c8:87:58:
         08:a0:3f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEf6zmuD57Sb9VsiOBYOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzU2MDg3YzIwYzdhMzI1NDE2ZmRhODAzY2I3NmYzZGE3
OTQ3YTkwHhcNMjYwNjEzMTMwMDQyWhcNMjYwNjE0MTMwMDQyWjAzMTEwLwYDVQQD
Eyg3ZjcyZDRmYTY4MzY2NmM3MWU5ZWNkYmY5NmNiOWUzYmZjNWUwYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zcDCrrA/0M8KNzUE2kG+xuebR1+
grrDFtAuBSHypyk8ChBsukxYSKZ8gp8USvrxr77UAbGKvCCHuvznBzhBpJX1ItJf
woiK3j5S2fgVUvK0DzeHvxdrj5n/3wD7tA4jHIITWiOTRenjrcEnnc268VBwo8nt
aEZ+7ktHeeDTkiBYzxeTtllCoj2S+zTwxUwPJbeZzqK7tIRxWoqbcIlhIySE34jU
2RZmD2Y1EgrMI2ZXF0sYE+NJ27lgRVHuMfLsQUjLR/vSI5begg2SSQbjh8ktToSS
FfTu0EemPTvBhUKTboDtdTAES/SN0CxbDsMgBD/5r+XeNORY3bHevTUfiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9y1PpoNmbHHp7Nv5bLnjv8XgogMB8GA1UdIwQY
MBaAFAs1YIfCDHoyVBb9qAPLdvPaeUepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAt
NTdlYWY4MzNhYjBiLzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAtNTdlYWY4MzNhYjBi
LzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl2iya4/
3xTc0OB8dA1d8REyilx1fLHDE1hBJPDD7jtyzbTS7tyge5ORwGSCmXpKFPeA39OC
uR96Yoxwuep7/xz5qwZ+MfLOy1MiUUYhr9J6XgpJU2ScFc4c1yNG1X+D4rgpoCCS
T/Y3h8csMj7PAUmL0fMDCrhNE28mhm2/7jHwSDLrrryLLGHqA15LlRolM8VIyRWX
Urd7QPwi24plr5jd7zlvDuiHBvt9Ko+Wbs6hFdWN4JsJNvxxGk8CArB3MlFRH2Pw
7YipcsEH+/yV/9oKyHH5hZbYW34A0/seo/KhVv7TQg3fxBilYhq+QsXS84hXKilx
HlyiyIdYCKA/0A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:27:37 2026 by rpki-client