Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File:                     L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier:          Uesm4khYTqDw9T6SY1JmTHrsOgLBWREfxEEy61pkyAs=
Subject key identifier:   20:80:73:19:30:B2:0B:82:FB:10:F7:6E:9D:60:AB:E4:69:EA:CD:79
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer:       /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial:       019EC1802579AAE665B281E821B83BDC7015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number:          0A70
Signing time:             Sat 13 Jun 2026 15:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 15:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 15:01:01 +0000
Files and hashes:         1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
                          2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: Z/96hUuC93k91WZWv8iqjZ8JH4DGU79abmvTakzL7r4=)
                          3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
                          4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:25:79:aa:e6:65:b2:81:e8:21:b8:3b:dc:70:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
        Validity
            Not Before: Jun 13 15:01:01 2026 GMT
            Not After : Jun 14 15:01:01 2026 GMT
        Subject: CN=2080731930b20b82fb10f76e9d60abe469eacd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:30:df:65:36:21:78:1f:e4:19:3a:90:af:
                    df:7c:c6:74:35:ca:16:74:18:3e:10:78:94:7d:72:
                    54:95:d2:5a:18:57:c8:02:29:c2:95:72:fc:38:5e:
                    79:4f:53:3e:d0:47:48:a3:8e:7d:6f:6f:89:5e:2c:
                    5c:c9:97:08:86:96:e3:ad:47:f5:e0:36:3b:98:ad:
                    f6:75:65:be:70:f8:b2:a2:1e:20:47:5a:d2:3b:d0:
                    ac:80:00:ca:4a:58:c2:a1:51:a5:9d:ec:81:47:d5:
                    14:56:2e:23:5b:7e:66:c5:23:21:74:c7:98:79:13:
                    87:85:50:7b:15:4c:03:0c:ea:33:56:2e:1b:8a:ac:
                    45:19:d7:ca:71:bf:66:b4:47:fa:6a:90:12:dd:3e:
                    d7:35:45:1d:3e:84:b5:67:3e:b7:33:bb:2b:b7:ec:
                    ae:35:de:0e:03:92:65:bd:f5:b9:43:93:ba:4b:15:
                    48:ee:a8:e4:4c:45:ef:fc:2c:5a:43:7c:3c:45:d2:
                    fc:d3:3c:58:c5:ed:e3:48:f8:ab:7b:34:71:a7:c8:
                    9d:84:cb:5e:f4:3f:02:07:9b:36:53:53:d1:e2:da:
                    e4:d3:7a:f8:29:c1:ba:d7:6d:27:ec:68:f1:d0:cf:
                    10:99:68:86:e0:22:10:94:36:56:92:c1:aa:48:45:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:80:73:19:30:B2:0B:82:FB:10:F7:6E:9D:60:AB:E4:69:EA:CD:79
            X509v3 Authority Key Identifier:
                keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:d4:03:9b:f4:82:f5:81:cd:c7:e4:34:df:94:bc:0f:0b:
         8e:55:2f:18:80:26:10:15:f4:18:df:2e:c2:b8:5e:63:e6:c1:
         fd:ca:15:2a:35:b2:cd:6f:22:f1:28:a2:3a:ca:8e:c2:79:72:
         70:b5:81:e3:b3:ec:55:5d:1c:80:e3:a8:3f:bb:28:49:e9:f4:
         4e:c3:84:15:e5:5f:e3:14:4e:aa:d3:87:52:b1:8f:6a:79:df:
         96:d9:02:c4:f5:9f:9c:a1:f7:57:d5:59:36:f4:9b:92:01:21:
         b7:90:71:2a:61:6b:af:9a:5b:06:a2:fa:0d:38:f3:05:06:a6:
         d6:c3:6c:b2:f1:0c:38:c8:02:01:c8:6b:f1:8d:d1:fa:65:33:
         2d:0b:09:97:98:a0:85:a6:7f:bf:02:06:87:01:64:c0:fc:3b:
         56:ab:59:15:b0:42:de:84:ea:e3:83:5c:df:ec:52:17:b0:df:
         ba:6f:09:a3:4c:01:ec:2e:cf:81:a7:2a:24:97:dd:97:22:81:
         c8:47:33:df:c9:15:f1:23:f4:94:4f:ff:bc:0f:7d:12:a8:e6:
         9c:05:3b:27:95:86:d6:3c:8a:8c:78:6b:77:1f:a3:f2:5f:40:
         03:44:04:40:08:98:1c:52:69:b6:b2:10:1e:9c:98:a7:ae:69:
         da:83:1e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgCV5quZlsoHoIbg73HAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw
NDAyZjkwHhcNMjYwNjEzMTUwMTAxWhcNMjYwNjE0MTUwMTAxWjAzMTEwLwYDVQQD
EygyMDgwNzMxOTMwYjIwYjgyZmIxMGY3NmU5ZDYwYWJlNDY5ZWFjZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR4w32U2IXgf5Bk6kK/ffMZ0NcoW
dBg+EHiUfXJUldJaGFfIAinClXL8OF55T1M+0EdIo459b2+JXixcyZcIhpbjrUf1
4DY7mK32dWW+cPiyoh4gR1rSO9CsgADKSljCoVGlneyBR9UUVi4jW35mxSMhdMeY
eROHhVB7FUwDDOozVi4biqxFGdfKcb9mtEf6apAS3T7XNUUdPoS1Zz63M7srt+yu
Nd4OA5JlvfW5Q5O6SxVI7qjkTEXv/CxaQ3w8RdL80zxYxe3jSPirezRxp8idhMte
9D8CB5s2U1PR4trk03r4KcG6120n7Gjx0M8QmWiG4CIQlDZWksGqSEWhkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCAcxkwsguC+xD3bp1gq+Rp6s15MB8GA1UdIwQY
MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt
NGIzNTBlYWNjODZiLzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi
LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGovUA5v0
gvWBzcfkNN+UvA8LjlUvGIAmEBX0GN8uwrheY+bB/coVKjWyzW8i8SiiOsqOwnly
cLWB47PsVV0cgOOoP7soSen0TsOEFeVf4xROqtOHUrGPannfltkCxPWfnKH3V9VZ
NvSbkgEht5BxKmFrr5pbBqL6DTjzBQam1sNssvEMOMgCAchr8Y3R+mUzLQsJl5ig
haZ/vwIGhwFkwPw7VqtZFbBC3oTq44Nc3+xSF7Dfum8Jo0wB7C7PgacqJJfdlyKB
yEcz38kV8SP0lE//vA99EqjmnAU7J5WG1jyKjHhrdx+j8l9AA0QEQAiYHFJptrIQ
HpyYp65p2oMeZg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:13:52 2026 by rpki-client