Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File:                     Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier:          9KHM3x/pB3yZqtTbCmDy2+qLnV5+JcxenjLZOgqLRaw=
Subject key identifier:   C5:D6:D0:3A:19:65:42:BF:9D:62:6A:8B:E7:07:15:9A:5C:C6:02:B1
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer:       /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial:       019EC1B68F6855172095E98F1509E79C009D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number:          046D
Signing time:             Sat 13 Jun 2026 16:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:27 +0000
Files and hashes:         1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: bmyws4zRM+AFXkCyqc6ztHIxVkCspqeLQhUhNB2S1OE=)
                          2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:8f:68:55:17:20:95:e9:8f:15:09:e7:9c:00:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
        Validity
            Not Before: Jun 13 16:00:27 2026 GMT
            Not After : Jun 14 16:00:27 2026 GMT
        Subject: CN=c5d6d03a196542bf9d626a8be707159a5cc602b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b4:76:f6:70:de:69:c9:6e:8c:43:43:fd:c2:
                    0f:20:e0:64:6e:a9:3f:f5:86:9c:c0:d2:8b:e3:96:
                    f6:b5:76:3d:88:1f:39:b8:c6:ff:e0:a6:65:1c:09:
                    56:57:cb:18:51:07:ac:46:67:5f:a2:5e:17:69:f1:
                    a3:25:96:0a:ce:69:41:72:52:45:fb:6f:96:e1:98:
                    d6:07:92:c5:f7:8f:a8:85:43:b4:fa:07:b5:2e:5f:
                    ff:42:96:b4:79:26:e5:ee:9b:74:76:8a:39:ba:91:
                    98:33:81:46:0e:13:0c:00:b7:26:af:cd:5e:17:c6:
                    e8:4b:3a:97:b3:14:6d:ba:7a:ec:87:24:bd:bd:d1:
                    7b:0b:7c:62:cb:8f:da:28:78:b0:92:32:a1:7c:d6:
                    68:44:00:26:f9:3e:50:d2:d2:47:d5:97:7e:7b:bc:
                    3a:98:5a:1e:b3:02:e7:42:1e:1e:7e:d9:d2:06:46:
                    da:b6:c3:96:8c:57:ae:cd:74:fb:54:14:6e:74:d9:
                    ad:86:08:de:bc:b5:4a:9a:f9:50:29:99:e5:9b:b3:
                    ea:35:d6:d0:c7:4a:76:6c:55:93:46:17:56:eb:3b:
                    f9:31:f9:9e:0d:aa:5d:21:7e:43:08:3c:92:c6:71:
                    6a:05:93:c7:5d:4f:ba:49:85:76:d4:f3:f9:3a:d8:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D6:D0:3A:19:65:42:BF:9D:62:6A:8B:E7:07:15:9A:5C:C6:02:B1
            X509v3 Authority Key Identifier:
                keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:70:37:0a:21:f4:f8:37:e8:96:1b:65:8b:1f:bb:25:83:c8:
         55:28:ab:15:88:a0:2e:e4:98:fe:64:ff:3f:7e:f5:43:20:e4:
         7a:b4:a4:8a:5d:45:d7:54:61:db:34:e6:a2:40:e5:c4:ad:3a:
         83:39:25:c6:11:5a:92:bf:ee:cb:a4:fa:ca:91:20:d3:ce:e4:
         6a:09:aa:1c:5d:d4:77:1f:e5:57:53:56:27:5d:38:de:a0:f6:
         a1:47:63:63:1f:fb:59:db:e7:af:72:33:6c:e5:af:f6:fc:e0:
         ca:a6:be:e0:ac:5c:28:46:19:44:86:85:6a:62:84:84:82:0b:
         7c:a9:62:8d:2c:9a:c5:46:6d:69:06:0e:88:8f:0e:3e:80:0e:
         d4:44:46:80:97:d1:40:45:8d:cd:ce:9a:c4:27:0b:69:c8:c3:
         41:a1:67:02:12:0d:32:c2:a9:9a:66:5a:70:bb:b1:a3:ce:a2:
         3c:32:d7:b1:43:cb:af:6d:ba:cf:3a:55:2e:e3:8f:4d:76:88:
         7d:84:2b:61:9b:da:45:bd:79:12:5f:ec:31:b0:ec:29:d4:ff:
         1e:63:37:9e:12:9a:99:f0:db:64:23:0a:6d:85:2d:03:87:93:
         e8:05:9b:b3:2c:49:bf:9e:93:d2:94:36:87:5a:61:fd:e4:6a:
         f6:38:ad:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bto9oVRcglemPFQnnnACdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw
MDViNDgwHhcNMjYwNjEzMTYwMDI3WhcNMjYwNjE0MTYwMDI3WjAzMTEwLwYDVQQD
EyhjNWQ2ZDAzYTE5NjU0MmJmOWQ2MjZhOGJlNzA3MTU5YTVjYzYwMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rR29nDeaclujEND/cIPIOBkbqk/
9YacwNKL45b2tXY9iB85uMb/4KZlHAlWV8sYUQesRmdfol4XafGjJZYKzmlBclJF
+2+W4ZjWB5LF94+ohUO0+ge1Ll//Qpa0eSbl7pt0doo5upGYM4FGDhMMALcmr81e
F8boSzqXsxRtunrshyS9vdF7C3xiy4/aKHiwkjKhfNZoRAAm+T5Q0tJH1Zd+e7w6
mFoeswLnQh4eftnSBkbatsOWjFeuzXT7VBRudNmthgjevLVKmvlQKZnlm7PqNdbQ
x0p2bFWTRhdW6zv5MfmeDapdIX5DCDySxnFqBZPHXU+6SYV21PP5Oth8iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXW0DoZZUK/nWJqi+cHFZpcxgKxMB8GA1UdIwQY
MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt
MmY2M2FiNDZmMzFjLzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj
LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3A3CiH0
+Dfolhtlix+7JYPIVSirFYigLuSY/mT/P371QyDkerSkil1F11Rh2zTmokDlxK06
gzklxhFakr/uy6T6ypEg087kagmqHF3Udx/lV1NWJ1043qD2oUdjYx/7Wdvnr3Iz
bOWv9vzgyqa+4KxcKEYZRIaFamKEhIILfKlijSyaxUZtaQYOiI8OPoAO1ERGgJfR
QEWNzc6axCcLacjDQaFnAhINMsKpmmZacLuxo86iPDLXsUPLr226zzpVLuOPTXaI
fYQrYZvaRb15El/sMbDsKdT/HmM3nhKamfDbZCMKbYUtA4eT6AWbsyxJv56T0pQ2
h1ph/eRq9jitbA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:43 2026 by rpki-client