Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File:                     K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier:          Q7g5D97WI+/eGFCfZprXq6AogsbLc3f5tyBrJfWEXzk=
Subject key identifier:   24:45:39:01:5F:71:8A:CE:26:69:D1:D0:00:74:6C:84:DE:FE:57:58
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer:       /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial:       019ED46205F74D189BECC38787D12A0CB01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number:          06CB
Signing time:             Wed 17 Jun 2026 07:00:54 +0000
Manifest this update:     Wed 17 Jun 2026 07:00:54 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:54 +0000
Files and hashes:         1: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: asUInprDVscL18U3d/MQhuMWm2EGo5nFl1mlWHoE4lM=)
                          2: iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa (hash: X1eh/qobiG09DJ7YvAOhgY6UujJecU+Lh8+lJTDAajg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:62:05:f7:4d:18:9b:ec:c3:87:87:d1:2a:0c:b0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
        Validity
            Not Before: Jun 17 07:00:54 2026 GMT
            Not After : Jun 18 07:00:54 2026 GMT
        Subject: CN=244539015f718ace2669d1d000746c84defe5758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:b1:68:99:8a:1d:a5:0e:e0:65:99:bf:cc:
                    47:92:ee:42:af:c7:52:74:15:da:af:0d:ad:51:16:
                    89:4e:85:89:6e:f1:ca:95:fb:bd:5b:51:b1:4c:89:
                    5d:08:df:c5:96:ae:47:6e:ed:06:0a:21:f8:96:3f:
                    c3:96:86:49:d7:37:1c:41:87:88:7a:aa:ae:50:16:
                    2c:c7:5f:9c:7f:85:74:05:e4:cd:f0:68:d3:53:f5:
                    e1:d8:d6:50:03:cc:07:e7:76:c2:6f:43:d3:33:c3:
                    2d:4d:06:fa:c5:bb:74:2b:ab:8b:2b:da:86:27:be:
                    49:af:aa:ac:d2:79:9e:b1:5c:e6:83:7b:e5:c4:e8:
                    7c:02:d5:ec:df:85:4e:8e:10:c4:30:2c:d0:f1:41:
                    4d:b9:01:5a:b5:db:7c:7d:9e:7e:73:38:4e:32:cb:
                    71:9b:cb:3f:f4:07:3f:28:84:9c:98:3b:b6:e9:18:
                    27:d0:b7:c8:13:80:3f:5a:67:e3:f2:75:5c:23:a0:
                    5e:6d:7b:83:58:7b:45:ed:9b:d7:fe:27:a1:3e:92:
                    e2:7b:55:91:28:ec:64:d2:e0:5a:e0:a4:cc:4a:7a:
                    4c:40:1e:1f:6e:f4:2a:ee:27:73:4e:78:e5:bc:65:
                    f5:c3:fd:55:f4:b5:0f:d3:5c:a0:78:94:74:3a:34:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:45:39:01:5F:71:8A:CE:26:69:D1:D0:00:74:6C:84:DE:FE:57:58
            X509v3 Authority Key Identifier:
                keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a0:c9:08:db:40:20:46:fd:c5:50:f1:b6:69:95:86:9b:d6:
         c0:ef:3f:19:c0:ad:93:40:2c:74:b0:cd:c7:1f:99:a2:2c:83:
         81:15:ff:01:af:12:9c:2c:61:13:40:5b:24:50:ee:d0:cd:86:
         66:f3:d5:86:f9:5f:b1:68:e4:12:df:4e:fe:bc:97:5f:ad:c9:
         e6:74:83:15:db:12:5d:db:78:88:98:f3:94:d8:40:54:ea:6b:
         c6:9c:b6:cb:a5:92:01:7b:a5:f9:9d:3f:21:9f:e4:1e:fe:2f:
         3b:69:d1:d2:8f:55:ca:61:58:57:91:58:5b:01:08:fc:d1:55:
         7e:4e:89:d2:80:aa:f8:f0:3a:47:17:9e:2c:91:31:0c:b6:c3:
         b8:02:c9:be:89:8c:27:22:09:8e:2b:c5:1f:00:8d:27:ed:4b:
         84:67:20:2c:54:47:b2:c5:6d:8d:26:4d:61:01:ea:8b:95:47:
         ae:2e:b7:bb:db:3b:f9:2a:3b:bf:e3:22:16:e1:b6:5f:7c:14:
         ef:d9:d9:a2:99:18:7f:f1:e9:f5:ea:4b:d4:44:6e:5f:2a:07:
         fa:59:0c:fd:ed:0d:aa:63:a3:7c:41:5d:0e:8e:db:b5:26:66:
         e3:44:b0:e8:03:dd:8a:28:7f:6a:82:f1:8b:82:9f:bc:04:bd:
         23:11:3b:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UYgX3TRib7MOHh9EqDLAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3
NThkZTcwHhcNMjYwNjE3MDcwMDU0WhcNMjYwNjE4MDcwMDU0WjAzMTEwLwYDVQQD
EygyNDQ1MzkwMTVmNzE4YWNlMjY2OWQxZDAwMDc0NmM4NGRlZmU1NzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwGxaJmKHaUO4GWZv8xHku5Cr8dS
dBXarw2tURaJToWJbvHKlfu9W1GxTIldCN/Flq5Hbu0GCiH4lj/DloZJ1zccQYeI
eqquUBYsx1+cf4V0BeTN8GjTU/Xh2NZQA8wH53bCb0PTM8MtTQb6xbt0K6uLK9qG
J75Jr6qs0nmesVzmg3vlxOh8AtXs34VOjhDEMCzQ8UFNuQFatdt8fZ5+czhOMstx
m8s/9Ac/KIScmDu26Rgn0LfIE4A/Wmfj8nVcI6BebXuDWHtF7ZvX/iehPpLie1WR
KOxk0uBa4KTMSnpMQB4fbvQq7idzTnjlvGX1w/1V9LUP01ygeJR0OjTt+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRFOQFfcYrOJmnR0AB0bITe/ldYMB8GA1UdIwQY
MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt
MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx
LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6DJCNtA
IEb9xVDxtmmVhpvWwO8/GcCtk0AsdLDNxx+ZoiyDgRX/Aa8SnCxhE0BbJFDu0M2G
ZvPVhvlfsWjkEt9O/ryXX63J5nSDFdsSXdt4iJjzlNhAVOprxpy2y6WSAXul+Z0/
IZ/kHv4vO2nR0o9VymFYV5FYWwEI/NFVfk6J0oCq+PA6RxeeLJExDLbDuALJvomM
JyIJjivFHwCNJ+1LhGcgLFRHssVtjSZNYQHqi5VHri63u9s7+So7v+MiFuG2X3wU
79nZopkYf/Hp9epL1ERuXyoH+lkM/e0NqmOjfEFdDo7btSZm40Sw6APdiih/aoLx
i4KfvAS9IxE7nQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:35:56 2026 by rpki-client