Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File:                     A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier:          6LUXvUHkwBn0XJ+MWPlSbQx+owcFRquXVi2qFBx+3E4=
Subject key identifier:   5C:A0:DC:F7:45:99:71:60:BC:8E:B2:4A:62:41:F4:0B:62:BF:97:F9
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer:       /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial:       019EC337EA906E651F05AE8A98CFCD80CC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number:          0A3A
Signing time:             Sat 13 Jun 2026 23:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:22 +0000
Files and hashes:         1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
                          2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: A5vQgdoJms/s60z04CUzfRQN47YxmPzS19vecKt9BkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:ea:90:6e:65:1f:05:ae:8a:98:cf:cd:80:cc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
        Validity
            Not Before: Jun 13 23:01:22 2026 GMT
            Not After : Jun 14 23:01:22 2026 GMT
        Subject: CN=5ca0dcf745997160bc8eb24a6241f40b62bf97f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:b9:2d:92:29:0b:21:4d:15:d6:dc:dd:83:
                    36:de:23:c5:df:a5:17:9c:5d:79:22:9c:9a:b1:35:
                    93:d1:dd:d9:cf:e2:8b:c4:2f:af:dd:e1:41:a0:9f:
                    c0:35:ee:cf:d3:c6:7f:c3:93:20:c3:78:a7:e0:7c:
                    ec:11:89:d4:f6:f0:02:11:28:bb:61:fc:51:ba:de:
                    79:f6:2a:8c:26:34:1b:52:c0:f4:1a:5e:cb:d7:a4:
                    0f:00:2c:f6:d7:e7:ae:4f:6c:fa:1a:0d:a7:23:27:
                    43:36:e5:71:d8:65:b5:41:a5:e2:0b:14:b2:b3:5d:
                    2e:e6:6e:bb:42:e4:47:00:d1:24:6b:35:2f:7e:5d:
                    9e:01:72:7f:20:ed:81:41:e2:a3:71:04:ac:4c:08:
                    44:50:4b:2c:ef:68:1d:4a:3d:1e:56:0f:bc:c9:1b:
                    eb:98:e0:70:da:70:c6:48:4a:5b:27:22:bf:1a:db:
                    cb:af:d8:a6:0c:45:57:a1:f1:f7:d0:62:47:e4:94:
                    a3:66:b7:4f:87:ed:da:fe:0e:cd:c6:af:31:97:ca:
                    09:51:15:ac:35:a2:f0:e8:4d:2b:26:b7:19:bd:0c:
                    96:74:49:1c:98:88:d2:0e:94:d1:26:b3:31:73:17:
                    9c:09:a7:cd:c1:c9:c3:6b:18:6d:df:84:82:72:c4:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:DC:F7:45:99:71:60:BC:8E:B2:4A:62:41:F4:0B:62:BF:97:F9
            X509v3 Authority Key Identifier:
                keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:21:2a:74:98:3d:59:0e:3b:a2:ab:19:02:af:5b:37:ef:
         53:70:fd:eb:7d:bf:bb:b4:3d:63:20:ed:01:b6:88:1e:72:a4:
         db:7a:dc:de:b9:d8:e8:b7:78:4e:8e:3a:87:15:c9:e3:c4:50:
         a3:92:68:14:fd:16:b6:6b:a6:e5:8a:4c:ab:95:74:78:b6:ce:
         0c:ac:ab:1b:de:32:c0:b5:2c:b4:87:c8:ec:1c:0f:82:70:28:
         31:f1:72:b5:8b:b8:cf:ba:f5:cb:e9:c6:f2:54:f5:1a:21:99:
         62:f7:56:21:d6:60:7a:11:f3:9a:72:18:95:ee:17:de:50:cd:
         3b:88:d3:b7:24:83:4d:7e:48:e2:3d:1e:62:83:b3:d6:34:5a:
         5f:1d:a6:3d:a1:b2:a7:1e:eb:6f:60:0f:00:77:8d:e2:10:6e:
         10:3e:4d:53:01:51:23:27:5b:00:f5:7c:1e:11:c2:de:6d:5e:
         b8:29:0b:cb:e2:a6:52:b3:48:5f:fc:dd:ea:8b:7c:e1:5b:c4:
         b4:3e:17:90:40:2e:03:3f:23:eb:6a:48:43:a2:9b:26:0b:99:
         73:a7:d6:b7:18:eb:1c:ca:3a:5e:4c:73:c1:32:76:28:4a:a9:
         85:77:6d:8e:a7:17:a1:25:e2:9d:29:80:54:3b:eb:34:aa:74:
         91:b2:5e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN+qQbmUfBa6KmM/NgMyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh
MDhlMWYwHhcNMjYwNjEzMjMwMTIyWhcNMjYwNjE0MjMwMTIyWjAzMTEwLwYDVQQD
Eyg1Y2EwZGNmNzQ1OTk3MTYwYmM4ZWIyNGE2MjQxZjQwYjYyYmY5N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05u5LZIpCyFNFdbc3YM23iPF36UX
nF15IpyasTWT0d3Zz+KLxC+v3eFBoJ/ANe7P08Z/w5Mgw3in4HzsEYnU9vACESi7
YfxRut559iqMJjQbUsD0Gl7L16QPACz21+euT2z6Gg2nIydDNuVx2GW1QaXiCxSy
s10u5m67QuRHANEkazUvfl2eAXJ/IO2BQeKjcQSsTAhEUEss72gdSj0eVg+8yRvr
mOBw2nDGSEpbJyK/GtvLr9imDEVXofH30GJH5JSjZrdPh+3a/g7Nxq8xl8oJURWs
NaLw6E0rJrcZvQyWdEkcmIjSDpTRJrMxcxecCafNwcnDaxht34SCcsR6twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyg3PdFmXFgvI6ySmJB9Ativ5f5MB8GA1UdIwQY
MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt
NDE0OWRlNTI4ODMzLzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTktNDE0OWRlNTI4ODMz
LzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9QhKnSY
PVkOO6KrGQKvWzfvU3D9632/u7Q9YyDtAbaIHnKk23rc3rnY6Ld4To46hxXJ48RQ
o5JoFP0Wtmum5YpMq5V0eLbODKyrG94ywLUstIfI7BwPgnAoMfFytYu4z7r1y+nG
8lT1GiGZYvdWIdZgehHzmnIYle4X3lDNO4jTtySDTX5I4j0eYoOz1jRaXx2mPaGy
px7rb2APAHeN4hBuED5NUwFRIydbAPV8HhHC3m1euCkLy+KmUrNIX/zd6ot84VvE
tD4XkEAuAz8j62pIQ6KbJguZc6fWtxjrHMo6XkxzwTJ2KEqphXdtjqcXoSXinSmA
VDvrNKp0kbJe3Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:26:19 2026 by rpki-client