Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
File:                     fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft (raw, json)
Hash identifier:          Vs989lFNRkCBlfSitRKN9GbP/6LbvzQ9vvuIRFU77Pw=
Subject key identifier:   96:1D:5E:99:1B:91:59:FA:E7:FD:82:EE:52:71:E7:AD:93:7E:97:CA
Authority key identifier: 7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA
Certificate issuer:       /CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
Certificate serial:       019EBF911512E5A4577933C6ED1343D0EC01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
Manifest number:          97
Signing time:             Sat 13 Jun 2026 06:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:16 +0000
Files and hashes:         1: fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl (hash: nJ7NAjg5zahvtfyKH2COrfv1MSSZcAj77nqEOL+cpzY=)
                          2: qNO-vqMo6CUKbBad3Z7RIqx2J8c.asa (hash: BRtlygNOpn1uRvLhqR+yBcBHhopuo/nmc11EsjchCV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:15:12:e5:a4:57:79:33:c6:ed:13:43:d0:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
        Validity
            Not Before: Jun 13 06:00:16 2026 GMT
            Not After : Jun 14 06:00:16 2026 GMT
        Subject: CN=961d5e991b9159fae7fd82ee5271e7ad937e97ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:5e:db:be:16:5d:c4:41:8f:9d:2e:f1:19:
                    bc:6d:9f:ed:26:47:75:b1:42:68:02:f7:aa:9b:14:
                    16:82:aa:68:94:f2:1f:4b:38:e2:cf:4f:04:b5:0f:
                    c8:30:fb:52:a0:cc:da:c0:cd:38:27:cf:53:c1:71:
                    38:93:00:a1:e1:7f:3f:ca:03:a0:e6:73:de:94:f3:
                    c0:39:bb:f0:58:53:7e:8f:04:64:de:cc:46:0e:6d:
                    e4:b0:aa:37:fc:e6:b2:4c:be:d2:c8:a3:67:db:a8:
                    f7:bd:3a:f5:39:6e:78:82:d4:f3:d4:41:cf:3d:55:
                    90:21:e4:09:3c:6c:8f:c3:a9:10:f3:9c:ba:ee:d3:
                    6a:60:28:a4:91:2c:f8:a7:ae:86:e5:d5:be:90:90:
                    11:97:69:2c:1f:1c:3c:b0:b3:72:22:13:6d:2c:9c:
                    54:73:4c:40:e7:7d:5e:58:4e:cb:01:7b:05:75:19:
                    8c:73:55:6c:52:b7:7c:00:f8:52:db:fb:87:7d:cf:
                    d8:65:04:b8:99:cd:3c:e2:6b:77:3a:31:b2:5b:b0:
                    e7:16:d0:ec:a5:d7:ee:e3:dd:05:75:79:80:da:72:
                    8d:a0:5a:d7:18:83:2a:db:c0:1a:4b:80:02:9e:1f:
                    e2:b6:fb:87:96:53:da:c6:2a:5d:c7:0e:a6:8a:04:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1D:5E:99:1B:91:59:FA:E7:FD:82:EE:52:71:E7:AD:93:7E:97:CA
            X509v3 Authority Key Identifier:
                keyid:7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:e1:28:05:37:ce:65:e1:56:aa:3a:86:06:4c:ed:78:74:ec:
         01:a2:df:74:08:05:43:60:89:91:98:6a:9e:94:8b:88:41:44:
         dd:d1:2e:5c:9f:26:c7:d8:de:4a:5d:7f:e7:60:9a:26:e1:f8:
         3e:6f:7e:8d:32:84:03:f6:c9:9b:06:65:2d:84:05:f6:c8:68:
         69:2d:43:6a:ce:5e:a2:0b:0b:74:f2:1f:fa:76:4a:df:c2:ad:
         c4:8e:f0:2b:df:f6:dd:d6:55:1d:e4:cb:a1:1a:df:3f:9c:32:
         08:83:dc:21:db:29:22:a9:1a:54:00:58:4d:63:84:3a:36:1c:
         7b:61:1f:a4:c2:90:64:9e:68:e9:17:c5:d2:fb:19:6d:24:3e:
         a6:27:27:90:a7:09:54:f3:19:30:94:e8:4d:43:34:2e:4a:dd:
         e2:01:bb:a3:c3:77:71:88:e6:34:4d:28:d3:74:b1:a3:b5:51:
         fb:4c:b3:cf:fc:a4:68:fd:b0:d3:43:e9:2e:9c:71:e4:a4:9b:
         14:a3:d4:95:4e:7a:d6:27:75:b0:48:a3:6a:78:12:25:a3:c5:
         8b:da:5a:b6:af:e9:f6:fe:26:17:2c:71:42:98:23:62:d9:54:
         43:5c:a5:db:bd:6e:90:a0:a7:6b:ec:81:d2:e0:06:f2:c7:21:
         03:0f:28:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kRUS5aRXeTPG7RND0OwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTBiNGI2MmYxNGU2MTZlZjZmZTU3ZWNjZDFiOGY4MTgy
NDhiYWEwHhcNMjYwNjEzMDYwMDE2WhcNMjYwNjE0MDYwMDE2WjAzMTEwLwYDVQQD
Eyg5NjFkNWU5OTFiOTE1OWZhZTdmZDgyZWU1MjcxZTdhZDkzN2U5N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvexe274WXcRBj50u8Rm8bZ/tJkd1
sUJoAveqmxQWgqpolPIfSzjiz08EtQ/IMPtSoMzawM04J89TwXE4kwCh4X8/ygOg
5nPelPPAObvwWFN+jwRk3sxGDm3ksKo3/OayTL7SyKNn26j3vTr1OW54gtTz1EHP
PVWQIeQJPGyPw6kQ85y67tNqYCikkSz4p66G5dW+kJARl2ksHxw8sLNyIhNtLJxU
c0xA531eWE7LAXsFdRmMc1VsUrd8APhS2/uHfc/YZQS4mc084mt3OjGyW7DnFtDs
pdfu490FdXmA2nKNoFrXGIMq28AaS4ACnh/itvuHllPaxipdxw6migRGxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYdXpkbkVn65/2C7lJx562TfpfKMB8GA1UdIwQY
MBaAFH8QtLYvFOYW72/lfszRuPgYJIuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhDMHRpOFU1aGJ2Yi1WLXpORzQtQmdraTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wYTExM2MtZTlmMC00OTU3LWI2ZWYt
OTBmNmM0M2M5ODYxLzEvZnhDMHRpOFU1aGJ2Yi1WLXpORzQtQmdraTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8wYTExM2MtZTlmMC00OTU3LWI2ZWYtOTBmNmM0M2M5ODYx
LzEvZnhDMHRpOFU1aGJ2Yi1WLXpORzQtQmdraTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyuEoBTfO
ZeFWqjqGBkzteHTsAaLfdAgFQ2CJkZhqnpSLiEFE3dEuXJ8mx9jeSl1/52CaJuH4
Pm9+jTKEA/bJmwZlLYQF9shoaS1Das5eogsLdPIf+nZK38KtxI7wK9/23dZVHeTL
oRrfP5wyCIPcIdspIqkaVABYTWOEOjYce2EfpMKQZJ5o6RfF0vsZbSQ+picnkKcJ
VPMZMJToTUM0Lkrd4gG7o8N3cYjmNE0o03Sxo7VR+0yzz/ykaP2w00PpLpxx5KSb
FKPUlU561id1sEijangSJaPFi9patq/p9v4mFyxxQpgjYtlUQ1yl271ukKCna+yB
0uAG8schAw8opQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:25 2026 by rpki-client