Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
File:                     L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json)
Hash identifier:          3u01iCz5JWcyaT+zAdpF7XV9Unf0UVlp8EephEJeUrk=
Subject key identifier:   EF:BB:23:C8:EC:CD:D4:9C:51:05:EA:69:45:49:65:DE:98:FB:13:6B
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Certificate issuer:       /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial:       019EC1EDF98D770B31577F15AB5A19B1AA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
Manifest number:          028C
Signing time:             Sat 13 Jun 2026 17:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:58 +0000
Files and hashes:         1: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: WbOdXa3iPEFMgohtIaw3LjnbDKNRsJ8TzDJy7EqLxt0=)
                          2: Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa (hash: T9UiTSXHZWvGquYOfGokmG8Ee9UykPig78Bt+PH4Uss=)
                          3: elVY3vqQhqwXbGtUDC6eCusDZg4.roa (hash: /YmMz1Uwy7zMCN1Of52sW1YGZKU0QEfD3dwCbGK6wnY=)
                          4: hMXGPmesHafq1ldVlCqzO5jhnK4.roa (hash: atdNH467wE+RBwnetrSvy++hllXan+TQKM5dBpraPhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:f9:8d:77:0b:31:57:7f:15:ab:5a:19:b1:aa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
        Validity
            Not Before: Jun 13 17:00:58 2026 GMT
            Not After : Jun 14 17:00:58 2026 GMT
        Subject: CN=efbb23c8eccdd49c5105ea69454965de98fb136b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:ac:f7:25:a1:c9:51:5c:94:bc:60:73:42:
                    0d:57:39:a2:36:c3:7f:21:56:a2:76:fd:42:bc:6a:
                    60:cf:f6:48:d6:bd:88:49:d1:f4:12:ba:8e:bf:1b:
                    eb:ea:44:99:02:64:ec:e8:59:71:39:96:d5:5f:b5:
                    b3:c6:e4:14:49:46:9f:2e:19:4e:01:67:ae:f4:78:
                    da:eb:51:d9:f5:af:a0:46:a0:1e:ed:75:c9:36:2f:
                    f3:38:2e:54:44:d5:8c:7d:d8:c2:3c:2b:f2:dd:bb:
                    44:15:cb:34:71:e1:ae:45:ff:34:63:ab:e0:65:ff:
                    8e:07:52:6b:73:a9:87:63:71:2f:39:f5:19:d8:24:
                    ad:89:10:df:96:f8:9f:43:b1:31:b7:4d:39:67:ef:
                    c5:7f:1e:7a:bb:ba:dd:54:1f:5d:f4:1f:f5:85:25:
                    f9:1f:19:4f:3e:46:2f:6d:ae:c3:b3:e7:0f:ab:9d:
                    f3:15:d1:3e:9b:3f:30:b9:8e:69:75:51:00:2a:57:
                    bb:27:56:56:28:9d:8f:47:fe:02:bf:9a:63:7b:70:
                    0c:1a:fe:27:02:34:a2:0e:63:90:b1:4c:15:db:7a:
                    62:8d:f8:62:01:a9:6a:c5:11:bc:40:e3:3c:97:60:
                    55:42:83:df:1c:01:f4:15:f9:35:46:ca:f9:b2:76:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BB:23:C8:EC:CD:D4:9C:51:05:EA:69:45:49:65:DE:98:FB:13:6B
            X509v3 Authority Key Identifier:
                keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ea:cf:4b:0d:d7:4a:8e:99:51:7e:25:21:7b:d6:71:2c:6a:
         5c:be:3f:43:e0:11:eb:e4:5a:6a:7a:16:45:86:5a:16:bf:ff:
         8f:ef:3e:2f:ae:e0:73:bc:00:a8:30:ab:3f:93:4f:eb:e0:53:
         b9:27:07:77:ab:3b:2a:3d:99:2c:b4:71:f1:12:7e:9e:80:af:
         64:15:62:f2:8c:64:d6:26:bb:e8:e8:f6:49:da:a4:54:69:ae:
         45:a8:01:ed:b5:a1:d3:57:59:8b:cb:81:71:96:be:bd:23:10:
         22:13:ea:c2:de:60:f5:66:b2:d6:82:36:24:df:06:6e:af:4c:
         0f:7b:4f:a9:e1:fe:74:d9:26:9a:3f:4b:26:bc:49:7e:fd:39:
         8e:35:11:27:21:aa:05:6d:d0:2b:bd:47:07:63:c5:b3:8f:4a:
         51:56:78:3b:77:d0:0a:1d:f6:05:4b:a7:3d:32:3d:da:70:40:
         18:2c:e6:2c:a9:95:cb:f7:0f:3f:a9:05:85:73:3a:21:b9:22:
         ef:68:6a:0c:33:1e:fb:d6:62:3e:d7:32:85:74:ac:d8:34:5d:
         ed:87:31:0d:b1:7f:df:b8:04:bc:63:9c:a3:70:22:dd:82:71:
         99:73:5e:8c:3e:da:ce:c1:f4:ca:8c:c6:23:10:a5:af:95:6f:
         28:75:e0:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7fmNdwsxV38Vq1oZsapqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3
NzgyNjkwHhcNMjYwNjEzMTcwMDU4WhcNMjYwNjE0MTcwMDU4WjAzMTEwLwYDVQQD
EyhlZmJiMjNjOGVjY2RkNDljNTEwNWVhNjk0NTQ5NjVkZTk4ZmIxMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ys9yWhyVFclLxgc0INVzmiNsN/
IVaidv1CvGpgz/ZI1r2ISdH0ErqOvxvr6kSZAmTs6FlxOZbVX7WzxuQUSUafLhlO
AWeu9Hja61HZ9a+gRqAe7XXJNi/zOC5URNWMfdjCPCvy3btEFcs0ceGuRf80Y6vg
Zf+OB1Jrc6mHY3EvOfUZ2CStiRDflvifQ7Ext005Z+/Ffx56u7rdVB9d9B/1hSX5
HxlPPkYvba7Ds+cPq53zFdE+mz8wuY5pdVEAKle7J1ZWKJ2PR/4Cv5pje3AMGv4n
AjSiDmOQsUwV23pijfhiAalqxRG8QOM8l2BVQoPfHAH0Ffk1Rsr5snZkEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+7I8jszdScUQXqaUVJZd6Y+xNrMB8GA1UdIwQY
MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt
YjMxZjI1MmYxOTY5LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5
LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOrPSw3X
So6ZUX4lIXvWcSxqXL4/Q+AR6+RaanoWRYZaFr//j+8+L67gc7wAqDCrP5NP6+BT
uScHd6s7Kj2ZLLRx8RJ+noCvZBVi8oxk1ia76Oj2SdqkVGmuRagB7bWh01dZi8uB
cZa+vSMQIhPqwt5g9Way1oI2JN8Gbq9MD3tPqeH+dNkmmj9LJrxJfv05jjURJyGq
BW3QK71HB2PFs49KUVZ4O3fQCh32BUunPTI92nBAGCzmLKmVy/cPP6kFhXM6Ibki
72hqDDMe+9ZiPtcyhXSs2DRd7YcxDbF/37gEvGOco3Ai3YJxmXNejD7azsH0yozG
IxClr5VvKHXg2g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:14 2026 by rpki-client