Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File:                     bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier:          MRjB669fqEOlW45KP3QrllbLLiF2pDkMWl9lraSOYKI=
Subject key identifier:   E6:EB:30:60:2E:1E:B8:D4:63:DA:5B:02:38:98:54:17:D6:C7:C6:DD
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer:       /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial:       019EC0DB5AA4275F28BC9196F0B57D5441E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number:          173F
Signing time:             Sat 13 Jun 2026 12:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:01 +0000
Files and hashes:         1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: k6T6qZqMpUFN05HzJvMFZmVMPomIHpDfKsTdsKOiLD4=)
                          2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
                          3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:5a:a4:27:5f:28:bc:91:96:f0:b5:7d:54:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
        Validity
            Not Before: Jun 13 12:01:01 2026 GMT
            Not After : Jun 14 12:01:01 2026 GMT
        Subject: CN=e6eb30602e1eb8d463da5b0238985417d6c7c6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:10:fd:a1:0a:de:fd:af:d0:aa:9c:66:f9:
                    ca:cc:ec:ec:1a:3c:3e:3c:06:a3:d0:08:37:2f:98:
                    c5:4d:74:0e:cf:0b:cb:f1:c5:39:99:89:0f:a3:92:
                    69:2e:19:0b:51:c3:85:97:48:bd:9c:4f:e8:a9:17:
                    a9:48:13:06:a0:14:d6:40:22:ad:55:11:9d:ec:b8:
                    a6:f7:3c:2d:e9:aa:70:bb:8d:9d:b9:19:5a:3c:62:
                    70:2a:84:12:ca:9c:09:65:70:c7:9e:80:5b:28:e1:
                    a6:67:c2:6c:bb:ee:85:bd:0b:9d:7b:f5:c7:48:2f:
                    fc:27:c7:b3:61:de:5b:a7:49:ef:ad:e3:99:c1:2e:
                    a7:f2:69:6e:8f:f0:45:76:83:7b:ff:c8:3a:c3:98:
                    b6:61:c2:ce:0b:e3:52:6f:ba:94:46:36:ae:79:83:
                    e8:43:cf:85:aa:ef:1e:1f:58:59:94:84:e4:a3:c3:
                    ba:88:93:e6:e3:cb:3b:d1:23:a9:86:69:bd:ca:f6:
                    63:e2:86:db:5b:76:1b:9c:fc:e0:16:1b:e5:b8:31:
                    e2:d7:d3:ab:ea:14:46:da:72:b6:26:85:19:2e:8e:
                    2d:bc:15:91:58:6a:02:ec:fb:36:23:17:67:13:a5:
                    3c:2f:70:8d:81:39:7f:a0:93:d8:45:14:78:81:5c:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EB:30:60:2E:1E:B8:D4:63:DA:5B:02:38:98:54:17:D6:C7:C6:DD
            X509v3 Authority Key Identifier:
                keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:97:5f:15:54:d8:99:05:ae:8e:20:a1:14:cb:a6:7c:f8:a9:
         ec:dc:2d:73:e6:2d:e6:b8:b7:1a:0a:13:e4:4c:2d:ab:83:c0:
         77:16:de:e9:65:f2:6a:e8:63:8b:5a:aa:60:1c:5f:65:7c:d6:
         10:70:0e:3d:05:2d:59:3f:5a:a9:6b:3c:05:d3:c3:90:8d:d0:
         4a:5a:87:0e:18:cc:80:35:81:58:ec:0d:3d:fe:76:00:64:7e:
         f0:d1:92:43:b1:16:d5:ea:08:e0:6d:39:95:50:5f:5b:fe:f8:
         24:ec:9b:70:d9:86:b5:dd:f3:4b:48:d4:74:4a:a3:8e:ee:1e:
         93:06:4f:9b:02:45:28:bb:be:2d:07:64:c4:16:24:2a:19:e9:
         d5:d5:c7:f4:05:25:fe:32:50:be:39:85:8a:dc:22:91:2b:73:
         55:af:dc:ca:8c:36:84:4d:8d:dd:20:b0:cd:90:fa:a3:73:18:
         75:a2:76:3d:b7:52:d7:fc:c1:e3:99:47:c0:77:24:80:68:6a:
         bc:eb:4f:0a:e0:5f:69:b3:cc:22:ab:35:89:20:a0:c9:ae:62:
         36:bf:10:63:0b:53:12:8b:e9:f4:1c:65:19:f1:11:6f:a5:18:
         57:6f:01:49:67:fe:4d:50:d9:e8:fe:55:a0:f8:2e:40:e6:0b:
         b8:c8:63:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A21qkJ18ovJGW8LV9VEHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjYwNjEzMTIwMTAxWhcNMjYwNjE0MTIwMTAxWjAzMTEwLwYDVQQD
EyhlNmViMzA2MDJlMWViOGQ0NjNkYTViMDIzODk4NTQxN2Q2YzdjNmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lUQ/aEK3v2v0KqcZvnKzOzsGjw+
PAaj0Ag3L5jFTXQOzwvL8cU5mYkPo5JpLhkLUcOFl0i9nE/oqRepSBMGoBTWQCKt
VRGd7Lim9zwt6apwu42duRlaPGJwKoQSypwJZXDHnoBbKOGmZ8Jsu+6FvQude/XH
SC/8J8ezYd5bp0nvreOZwS6n8mluj/BFdoN7/8g6w5i2YcLOC+NSb7qURjaueYPo
Q8+Fqu8eH1hZlITko8O6iJPm48s70SOphmm9yvZj4obbW3YbnPzgFhvluDHi19Or
6hRG2nK2JoUZLo4tvBWRWGoC7Ps2IxdnE6U8L3CNgTl/oJPYRRR4gVyahwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObrMGAuHrjUY9pbAjiYVBfWx8bdMB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJdfFVTY
mQWujiChFMumfPip7Nwtc+Yt5ri3GgoT5Ewtq4PAdxbe6WXyauhji1qqYBxfZXzW
EHAOPQUtWT9aqWs8BdPDkI3QSlqHDhjMgDWBWOwNPf52AGR+8NGSQ7EW1eoI4G05
lVBfW/74JOybcNmGtd3zS0jUdEqjju4ekwZPmwJFKLu+LQdkxBYkKhnp1dXH9AUl
/jJQvjmFitwikStzVa/cyow2hE2N3SCwzZD6o3MYdaJ2PbdS1/zB45lHwHckgGhq
vOtPCuBfabPMIqs1iSCgya5iNr8QYwtTEovp9BxlGfERb6UYV28BSWf+TVDZ6P5V
oPguQOYLuMhjyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:31:50 2026 by rpki-client