Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File:                     cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier:          IsyfgSEPgSM+9A5RdiA0hYX9MxUFl5RZ52CCaw6bgjI=
Subject key identifier:   13:7B:14:36:B7:03:26:0A:02:FE:BF:04:BF:9C:8F:24:12:C5:B7:25
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer:       /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial:       019EC1B675383837A5101A2D4AC998106557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number:          12E6
Signing time:             Sat 13 Jun 2026 16:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:20 +0000
Files and hashes:         1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
                          2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: kE9Efg6/Pbv+G+/ySXz7FexitIeLk/k9FkVMaFtQP+0=)
                          3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:75:38:38:37:a5:10:1a:2d:4a:c9:98:10:65:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
        Validity
            Not Before: Jun 13 16:00:20 2026 GMT
            Not After : Jun 14 16:00:20 2026 GMT
        Subject: CN=137b1436b703260a02febf04bf9c8f2412c5b725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:e2:85:ca:0a:f2:44:e2:f3:b6:bb:37:a5:
                    de:dd:43:2f:2c:58:14:d3:6b:29:9c:24:96:a7:73:
                    7a:0c:d8:a6:28:16:25:d0:ed:49:83:35:8b:4a:2f:
                    ee:2b:48:37:de:2d:a6:b1:49:e0:eb:c9:f2:de:9c:
                    12:06:cb:40:cf:f8:3c:9d:13:a6:44:8c:97:4b:64:
                    e6:82:d9:b5:65:80:d9:fd:5b:66:da:12:b9:4a:9e:
                    99:c9:cd:0c:37:d7:c2:19:f7:43:ec:5f:fa:bf:d0:
                    64:ec:c8:f2:21:b9:4d:a8:2f:71:c1:1d:dc:e2:37:
                    ca:a4:97:72:75:e6:0d:22:17:0e:7b:f8:6a:52:52:
                    75:27:55:12:2a:46:22:42:41:ae:fa:08:2a:09:3a:
                    d9:e1:6e:be:5e:40:35:b0:0d:c7:9f:f3:cf:c5:2a:
                    e9:23:ee:fc:0c:4a:cb:f1:65:e2:13:93:23:fe:78:
                    f2:f8:44:21:85:c3:fc:4a:5f:62:ae:39:02:02:ad:
                    27:ad:0d:c4:86:84:7f:fe:e7:71:00:d3:86:8e:10:
                    1a:39:74:75:2c:6a:64:e4:11:51:16:4c:55:e1:7e:
                    9e:80:46:f5:13:75:60:71:de:c6:1a:09:a9:56:80:
                    fa:a9:b2:6b:ae:03:40:6f:f6:49:96:64:e5:c1:24:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:14:36:B7:03:26:0A:02:FE:BF:04:BF:9C:8F:24:12:C5:B7:25
            X509v3 Authority Key Identifier:
                keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:bf:b8:47:2a:62:9b:ae:12:71:69:16:13:70:1c:88:d0:
         5b:37:0f:92:b0:3e:f9:7c:78:60:89:99:46:7f:df:e8:55:c4:
         65:9a:76:eb:32:78:8a:38:49:6d:e2:1d:a5:cf:d8:bc:f9:3d:
         1c:7b:c2:ff:0a:a2:3d:92:ad:dd:a0:b4:8f:cf:1c:53:b5:e5:
         df:e5:34:eb:7d:1d:c0:9b:4f:52:20:7d:f7:47:47:77:d7:7a:
         ca:b8:14:a0:15:15:ec:3e:a1:ba:97:bc:3f:ea:ee:39:d5:43:
         f6:21:e8:55:46:f6:13:e5:60:01:3a:f3:fd:9c:9b:1f:13:82:
         15:c9:5b:b7:6b:34:b8:26:90:92:9a:e9:da:31:1c:24:d0:af:
         ad:d1:ab:eb:40:30:70:cc:e6:05:bf:23:d2:26:e2:0b:7f:4a:
         f3:b2:61:34:5b:3f:9e:69:0f:e0:d6:38:8b:9d:65:d9:8f:c1:
         94:f2:5e:30:73:45:4a:32:36:e4:1f:49:0d:34:eb:f0:51:3e:
         f0:a4:32:ef:d4:e6:8d:77:0a:ee:b9:ae:6b:81:cb:74:62:d4:
         9d:93:4b:d3:f4:d2:a3:f6:7d:b8:5e:6d:f6:11:96:ab:f4:e0:
         a0:e4:db:c3:f1:e1:3d:8f:4a:35:70:99:62:22:d7:33:9b:bc:
         f8:b5:f9:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtnU4ODelEBotSsmYEGVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjYwNjEzMTYwMDIwWhcNMjYwNjE0MTYwMDIwWjAzMTEwLwYDVQQD
EygxMzdiMTQzNmI3MDMyNjBhMDJmZWJmMDRiZjljOGYyNDEyYzViNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDrihcoK8kTi87a7N6Xe3UMvLFgU
02spnCSWp3N6DNimKBYl0O1JgzWLSi/uK0g33i2msUng68ny3pwSBstAz/g8nROm
RIyXS2Tmgtm1ZYDZ/Vtm2hK5Sp6Zyc0MN9fCGfdD7F/6v9Bk7MjyIblNqC9xwR3c
4jfKpJdydeYNIhcOe/hqUlJ1J1USKkYiQkGu+ggqCTrZ4W6+XkA1sA3Hn/PPxSrp
I+78DErL8WXiE5Mj/njy+EQhhcP8Sl9irjkCAq0nrQ3EhoR//udxANOGjhAaOXR1
LGpk5BFRFkxV4X6egEb1E3Vgcd7GGgmpVoD6qbJrrgNAb/ZJlmTlwSTHOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN7FDa3AyYKAv6/BL+cjyQSxbclMB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0K/uEcq
YpuuEnFpFhNwHIjQWzcPkrA++Xx4YImZRn/f6FXEZZp26zJ4ijhJbeIdpc/YvPk9
HHvC/wqiPZKt3aC0j88cU7Xl3+U0630dwJtPUiB990dHd9d6yrgUoBUV7D6hupe8
P+ruOdVD9iHoVUb2E+VgATrz/ZybHxOCFclbt2s0uCaQkprp2jEcJNCvrdGr60Aw
cMzmBb8j0ibiC39K87JhNFs/nmkP4NY4i51l2Y/BlPJeMHNFSjI25B9JDTTr8FE+
8KQy79TmjXcK7rmua4HLdGLUnZNL0/TSo/Z9uF5t9hGWq/TgoOTbw/HhPY9KNXCZ
YiLXM5u8+LX5KA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:57 2026 by rpki-client