Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File:                     SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier:          +H8m/771RzUR1KG6WTWLqw+7h19fkYhhEuY82yXdVrE=
Subject key identifier:   A9:A0:B6:81:49:5D:5D:49:7A:4A:50:95:AE:26:60:82:7C:80:B1:05
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer:       /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial:       019EC2CA045BEE6DC1509934C8BFBD2239D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number:          0124
Signing time:             Sat 13 Jun 2026 21:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:19 +0000
Files and hashes:         1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: u4dZUeMdv+nggU5PeGpUTMTLxy8h+27vtAcXT2GkB+0=)
                          2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:04:5b:ee:6d:c1:50:99:34:c8:bf:bd:22:39:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
        Validity
            Not Before: Jun 13 21:01:19 2026 GMT
            Not After : Jun 14 21:01:19 2026 GMT
        Subject: CN=a9a0b681495d5d497a4a5095ae2660827c80b105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:8d:2c:88:b9:14:5d:17:35:82:a8:ae:bf:
                    22:b4:ac:5d:ff:10:d5:78:94:39:b8:0a:f8:df:2a:
                    f0:86:de:8d:78:f5:41:28:97:92:6d:b3:54:9e:0f:
                    86:32:d8:3e:4d:70:96:e4:eb:9d:de:78:e3:40:af:
                    d9:ce:d5:b7:50:66:a5:91:7c:cc:e2:3d:77:70:19:
                    f2:26:b5:e0:df:4c:3c:ad:4b:04:5e:dc:28:ac:6b:
                    07:97:48:a7:5c:92:f5:32:5b:8b:90:a9:b9:f4:a2:
                    57:1b:27:d4:ba:be:8d:ba:6f:95:0a:cb:83:d1:da:
                    8d:de:3e:db:7f:71:21:e1:5d:d4:89:0d:96:fc:59:
                    9f:2a:1c:68:af:78:1e:1a:03:1c:94:87:37:c9:9d:
                    45:5c:71:3b:d4:0d:29:e0:c6:bf:3e:ae:9c:7c:95:
                    9b:22:32:e0:56:56:13:5f:e2:ce:6a:c9:92:6c:95:
                    6d:26:85:8c:5a:38:0e:0d:7b:b5:2e:9e:98:b5:24:
                    c0:30:ed:0e:c2:79:5b:6e:ef:0a:f3:32:01:45:46:
                    65:46:63:d9:1c:63:95:c5:79:1a:fd:72:3d:0c:40:
                    9e:26:40:8c:f9:a9:89:dc:22:99:bd:85:d3:1d:9e:
                    8c:08:e3:e7:c5:1e:2d:05:65:d7:ef:6b:e1:0a:91:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:B6:81:49:5D:5D:49:7A:4A:50:95:AE:26:60:82:7C:80:B1:05
            X509v3 Authority Key Identifier:
                keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:7b:b4:bd:dd:78:a7:27:c7:37:f3:83:8c:08:05:96:d0:
         4f:fc:39:78:f4:b1:9c:e8:ee:73:79:7e:24:f9:f3:1f:8b:1d:
         24:77:ea:b4:51:be:c1:04:94:2e:9a:85:39:52:ce:3a:80:3b:
         7d:36:f0:bb:d5:87:d9:64:66:ae:b9:6f:9a:33:4b:1b:19:4e:
         ff:13:03:e8:4f:84:e3:fe:5b:44:5d:14:b4:04:3a:cb:39:f7:
         e7:9c:e3:93:7c:5c:bc:c0:4d:b6:70:14:ee:25:8e:33:76:5a:
         e6:55:85:ee:85:23:42:8a:de:4f:ee:18:25:b4:d8:4b:d3:0a:
         a1:75:9c:b7:f8:a0:29:f6:e6:3d:87:0e:6e:45:1d:91:dc:9e:
         05:9f:37:c6:a9:05:97:9e:0a:d8:ec:9f:35:eb:96:b0:8b:3f:
         a5:3d:53:6d:e9:21:5f:b9:a3:d8:a0:c8:d8:6e:fd:76:30:ac:
         95:58:d1:33:55:72:a1:f6:3e:c9:64:90:ac:07:16:c6:38:22:
         62:eb:7b:62:85:9c:fb:ad:70:41:98:e8:ff:46:2f:39:ce:11:
         0b:35:9c:c1:1c:60:55:cf:5f:06:fe:16:b7:2a:15:3e:f5:2b:
         24:13:70:51:ec:54:0a:09:e9:bb:f1:8b:49:d8:75:87:50:84:
         fe:65:03:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CygRb7m3BUJk0yL+9IjnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzBlMWJjOGVlZGQ5NDc4NjEwYjFhZmYwOTMwZjQwMzQ3
NTI2ZTUwHhcNMjYwNjEzMjEwMTE5WhcNMjYwNjE0MjEwMTE5WjAzMTEwLwYDVQQD
EyhhOWEwYjY4MTQ5NWQ1ZDQ5N2E0YTUwOTVhZTI2NjA4MjdjODBiMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvqNLIi5FF0XNYKorr8itKxd/xDV
eJQ5uAr43yrwht6NePVBKJeSbbNUng+GMtg+TXCW5Oud3njjQK/ZztW3UGalkXzM
4j13cBnyJrXg30w8rUsEXtworGsHl0inXJL1MluLkKm59KJXGyfUur6Num+VCsuD
0dqN3j7bf3Eh4V3UiQ2W/FmfKhxor3geGgMclIc3yZ1FXHE71A0p4Ma/Pq6cfJWb
IjLgVlYTX+LOasmSbJVtJoWMWjgODXu1Lp6YtSTAMO0Ownlbbu8K8zIBRUZlRmPZ
HGOVxXka/XI9DECeJkCM+amJ3CKZvYXTHZ6MCOPnxR4tBWXX72vhCpEZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmgtoFJXV1JekpQla4mYIJ8gLEFMB8GA1UdIwQY
MBaAFEpw4byO7dlHhhCxr/CTD0A0dSblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUt
YWE5Yjg3M2Q3Zjk2LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUtYWE5Yjg3M2Q3Zjk2
LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdZ7tL3d
eKcnxzfzg4wIBZbQT/w5ePSxnOjuc3l+JPnzH4sdJHfqtFG+wQSULpqFOVLOOoA7
fTbwu9WH2WRmrrlvmjNLGxlO/xMD6E+E4/5bRF0UtAQ6yzn355zjk3xcvMBNtnAU
7iWOM3Za5lWF7oUjQoreT+4YJbTYS9MKoXWct/igKfbmPYcObkUdkdyeBZ83xqkF
l54K2OyfNeuWsIs/pT1TbekhX7mj2KDI2G79djCslVjRM1VyofY+yWSQrAcWxjgi
Yut7YoWc+61wQZjo/0YvOc4RCzWcwRxgVc9fBv4WtyoVPvUrJBNwUexUCgnpu/GL
Sdh1h1CE/mUDeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:30:55 2026 by rpki-client