Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          kFP8GXRE+vIrbR5OgfXlHgA3SzAgdUp5n2LvR8sLejw=
Subject key identifier:   28:EE:78:D2:24:C6:34:5A:A5:17:87:7F:E1:8B:0C:9A:F8:0C:C8:4C
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       019ED461C0AA08164E49657F2D98FD426629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 07:00:36 +0000
Manifest this update:     Wed 17 Jun 2026 07:00:36 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:36 +0000
Files and hashes:         1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: r4ZtqonUybu6EbKqR/wFGzBsghwqOOADoJRr/QmJKJs=)
                          2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:61:c0:aa:08:16:4e:49:65:7f:2d:98:fd:42:66:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: Jun 17 07:00:36 2026 GMT
            Not After : Jun 18 07:00:36 2026 GMT
        Subject: CN=28ee78d224c6345aa517877fe18b0c9af80cc84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:ea:7e:f7:42:39:05:5f:c3:9f:12:7d:bc:
                    59:c6:58:6b:73:91:ec:d9:0b:9b:7a:54:a6:ba:1e:
                    f4:f7:6a:ac:dd:8a:68:29:e8:07:80:44:b6:b7:b0:
                    23:e2:42:30:87:61:0b:ae:de:7d:82:e0:40:85:6b:
                    f8:65:b9:4f:ab:14:a6:8b:29:8b:4a:77:4b:99:06:
                    61:e0:5f:f9:00:dd:99:2a:d9:ef:97:ff:fe:3e:bb:
                    62:d5:b8:f0:57:60:33:c4:02:84:c6:ab:54:30:e0:
                    fe:fd:44:09:8c:47:f7:1e:b0:d0:cf:46:11:2c:f1:
                    0e:f0:c1:11:ac:bd:05:69:b7:0b:46:22:df:72:8f:
                    cc:b9:dd:13:15:54:45:27:79:28:a6:5e:f9:51:20:
                    50:5b:60:9a:a0:4a:ae:69:22:f1:1d:3a:29:87:47:
                    0a:a6:51:5c:fd:59:37:07:1f:f9:08:ad:33:7c:d3:
                    f3:96:7a:ad:7c:86:3a:25:6c:b7:56:84:24:61:be:
                    ff:c2:12:82:0f:fa:78:0c:67:4e:98:a1:54:a2:49:
                    ae:c7:00:0b:5c:a5:6f:d9:1f:c7:1e:e3:d8:14:24:
                    3a:bb:0e:8c:3f:8f:3b:c6:31:ef:1e:1c:25:96:70:
                    e9:c9:19:61:30:f1:8b:ad:c8:1e:11:15:20:7c:e7:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EE:78:D2:24:C6:34:5A:A5:17:87:7F:E1:8B:0C:9A:F8:0C:C8:4C
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:0c:89:4e:03:14:16:45:80:75:5d:22:c6:f5:85:fc:9a:
         3b:80:90:ac:4d:d9:01:fe:92:c3:8c:a3:48:ee:5d:f3:89:5b:
         30:ce:11:c9:82:59:63:f8:6d:77:cd:bf:d3:b2:96:46:f0:77:
         fc:b8:5a:1e:ae:92:cf:76:06:c2:52:7c:83:a4:5d:bd:37:ad:
         90:2a:80:a8:2f:51:09:75:3e:d4:6f:f9:51:99:3f:f3:91:b4:
         30:11:f1:c4:bf:1f:89:c3:9a:07:13:0f:6d:40:4d:9b:b1:48:
         f1:16:5d:98:84:36:d2:9d:cc:d6:55:11:ae:61:9f:6a:3e:fd:
         ec:8e:47:33:40:e1:0d:93:d4:3c:50:43:11:14:95:60:27:e3:
         a3:a2:4f:5a:71:1a:f8:51:f3:74:a4:0f:01:13:5e:45:4f:a0:
         6d:23:14:1d:f2:ab:51:06:65:c3:dc:9c:6c:fb:a9:9f:8d:f0:
         e2:8d:43:18:41:85:4f:f8:8b:dd:88:d5:f3:2b:b3:d6:80:f8:
         f8:19:8a:ad:82:7e:fa:7b:bd:7d:04:c7:29:db:f4:4e:17:a7:
         cf:d5:a6:21:14:02:e2:8c:9d:06:ec:c0:72:da:0a:c5:7f:d3:
         cf:83:89:2a:17:5e:2b:21:79:93:20:ff:ba:ec:59:63:7a:28:
         72:9a:8b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UYcCqCBZOSWV/LZj9QmYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy
NWQ5MWEwHhcNMjYwNjE3MDcwMDM2WhcNMjYwNjE4MDcwMDM2WjAzMTEwLwYDVQQD
EygyOGVlNzhkMjI0YzYzNDVhYTUxNzg3N2ZlMThiMGM5YWY4MGNjODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyDqfvdCOQVfw58SfbxZxlhrc5Hs
2QubelSmuh7092qs3YpoKegHgES2t7Aj4kIwh2ELrt59guBAhWv4ZblPqxSmiymL
SndLmQZh4F/5AN2ZKtnvl//+Prti1bjwV2AzxAKExqtUMOD+/UQJjEf3HrDQz0YR
LPEO8MERrL0FabcLRiLfco/Mud0TFVRFJ3kopl75USBQW2CaoEquaSLxHToph0cK
plFc/Vk3Bx/5CK0zfNPzlnqtfIY6JWy3VoQkYb7/whKCD/p4DGdOmKFUokmuxwAL
XKVv2R/HHuPYFCQ6uw6MP487xjHvHhwllnDpyRlhMPGLrcgeERUgfOe5gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjueNIkxjRapReHf+GLDJr4DMhMMB8GA1UdIwQY
MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt
ZTcxYzMxN2EzZmE4LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4
LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG0MiU4D
FBZFgHVdIsb1hfyaO4CQrE3ZAf6Sw4yjSO5d84lbMM4RyYJZY/htd82/07KWRvB3
/LhaHq6Sz3YGwlJ8g6RdvTetkCqAqC9RCXU+1G/5UZk/85G0MBHxxL8ficOaBxMP
bUBNm7FI8RZdmIQ20p3M1lURrmGfaj797I5HM0DhDZPUPFBDERSVYCfjo6JPWnEa
+FHzdKQPARNeRU+gbSMUHfKrUQZlw9ycbPupn43w4o1DGEGFT/iL3YjV8yuz1oD4
+BmKrYJ++nu9fQTHKdv0Thenz9WmIRQC4oydBuzActoKxX/Tz4OJKhdeKyF5kyD/
uuxZY3oocpqLuQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:12:01 2026 by rpki-client