Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File:                     dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier:          uS546vqM2ONQiUrzidlsGkcIa0kN/oY7o+tchN4q6Dw=
Subject key identifier:   AE:C6:54:19:69:E9:53:84:D3:CD:7E:6C:CE:70:F8:90:34:9A:7E:7A
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer:       /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial:       019EBF233501AF1F821E15274DD321504BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number:          0CB5
Signing time:             Sat 13 Jun 2026 04:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:15 +0000
Files and hashes:         1: Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa (hash: WNChQ5FZcNT+Uy6r/VXAfEff5h4yB9HjomF668ERFPs=)
                          2: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: ZhlEULb4PeVW8AGH/TJht0s5NXlqo2pGDWPzn0DbkdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:35:01:af:1f:82:1e:15:27:4d:d3:21:50:4b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
        Validity
            Not Before: Jun 13 04:00:15 2026 GMT
            Not After : Jun 14 04:00:15 2026 GMT
        Subject: CN=aec6541969e95384d3cd7e6cce70f890349a7e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:c1:9f:ec:fe:96:59:e3:5f:7b:b5:de:4c:
                    1d:d7:9a:9b:00:59:21:f5:21:0f:61:93:e4:e0:8a:
                    3e:7c:4f:8b:b6:d1:9b:d5:3b:df:94:6c:c5:00:55:
                    9f:89:94:33:ea:07:cd:21:ec:81:c5:25:c2:a4:10:
                    42:8d:0d:49:49:43:2c:de:e9:f9:a3:9e:05:b4:8d:
                    40:cb:a6:ba:73:47:1c:ea:fe:aa:00:14:cd:35:71:
                    f2:94:d6:68:7e:b7:f9:b6:60:63:a3:9a:e0:47:d1:
                    11:2f:58:b1:38:3a:13:e1:3c:a6:4a:78:77:4b:ad:
                    f1:53:42:05:d9:ba:5d:79:43:4a:72:50:b9:1f:5c:
                    25:90:52:e9:b3:64:dc:74:44:b6:27:3e:55:fa:f8:
                    72:8e:2c:5b:a6:40:66:bf:46:aa:65:61:d1:67:81:
                    d1:15:73:4f:d1:9f:64:8c:22:21:4a:b2:19:f4:4e:
                    c2:fb:c6:a2:60:35:48:bb:11:4d:11:a8:aa:0c:b6:
                    69:6e:a8:24:39:3a:fd:b8:eb:66:78:ce:f7:e4:85:
                    aa:b9:96:f1:b1:f9:93:27:f4:48:94:f4:53:3b:a2:
                    0f:c9:d7:bb:85:e9:39:b6:cd:c7:ed:5e:e9:11:e2:
                    6d:f4:fd:07:fa:d1:3a:8c:c3:21:5d:7b:8c:98:2d:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C6:54:19:69:E9:53:84:D3:CD:7E:6C:CE:70:F8:90:34:9A:7E:7A
            X509v3 Authority Key Identifier:
                keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:69:d9:c7:d1:20:c7:59:27:99:16:1a:4a:74:0e:fd:75:60:
         fa:fd:2a:08:3f:57:69:af:1b:43:86:4c:01:c9:f2:12:75:1e:
         cb:7f:1f:4d:92:cb:34:00:4a:be:f9:ae:48:1c:84:af:fe:35:
         3c:15:41:24:3a:a0:a3:3c:17:03:36:b8:07:69:c3:a1:23:fe:
         05:f7:02:d1:3c:05:eb:b8:69:f0:2f:6f:77:85:de:5e:84:ec:
         b3:96:94:3d:1e:72:4b:3d:61:d1:9c:7d:2d:1c:f7:3d:f9:a0:
         9c:e3:c6:69:5f:ad:74:8a:64:b7:02:e4:67:97:10:90:7e:0e:
         64:bd:24:b4:d6:17:5a:f3:03:2b:18:b7:65:59:fb:c8:f5:68:
         b7:9a:a4:78:63:67:4e:8d:b2:55:1c:8d:15:28:33:db:b6:4b:
         41:7c:d7:47:cd:10:96:51:4b:63:e7:50:33:8a:8f:b3:3a:34:
         0f:8c:50:cb:ee:04:18:08:f0:1b:62:1c:dd:7c:69:f5:89:02:
         eb:ac:6a:38:74:a2:b1:0a:81:c5:c1:0a:5d:09:61:2e:0a:7c:
         af:9f:66:80:05:d6:76:b1:37:f4:58:a7:ad:ab:e9:d2:44:0d:
         58:26:df:a9:9a:bd:cb:8a:29:d0:dc:9b:c0:90:88:92:e4:16:
         b4:39:03:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/IzUBrx+CHhUnTdMhUEu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MDAxYmNjNjlhMTY1MDM0MjFiODg4NTFmNDdhYTE2YzVj
ZjJkYmMwHhcNMjYwNjEzMDQwMDE1WhcNMjYwNjE0MDQwMDE1WjAzMTEwLwYDVQQD
EyhhZWM2NTQxOTY5ZTk1Mzg0ZDNjZDdlNmNjZTcwZjg5MDM0OWE3ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsrBn+z+llnjX3u13kwd15qbAFkh
9SEPYZPk4Io+fE+LttGb1TvflGzFAFWfiZQz6gfNIeyBxSXCpBBCjQ1JSUMs3un5
o54FtI1Ay6a6c0cc6v6qABTNNXHylNZofrf5tmBjo5rgR9ERL1ixODoT4TymSnh3
S63xU0IF2bpdeUNKclC5H1wlkFLps2TcdES2Jz5V+vhyjixbpkBmv0aqZWHRZ4HR
FXNP0Z9kjCIhSrIZ9E7C+8aiYDVIuxFNEaiqDLZpbqgkOTr9uOtmeM735IWquZbx
sfmTJ/RIlPRTO6IPyde7hek5ts3H7V7pEeJt9P0H+tE6jMMhXXuMmC0ZUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7GVBlp6VOE081+bM5w+JA0mn56MB8GA1UdIwQY
MBaAFHcAG8xpoWUDQhuIhR9HqhbFzy28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMt
MGE4YmQyZjM2YzcyLzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMtMGE4YmQyZjM2Yzcy
LzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2nZx9Eg
x1knmRYaSnQO/XVg+v0qCD9Xaa8bQ4ZMAcnyEnUey38fTZLLNABKvvmuSByEr/41
PBVBJDqgozwXAza4B2nDoSP+BfcC0TwF67hp8C9vd4XeXoTss5aUPR5ySz1h0Zx9
LRz3PfmgnOPGaV+tdIpktwLkZ5cQkH4OZL0ktNYXWvMDKxi3ZVn7yPVot5qkeGNn
To2yVRyNFSgz27ZLQXzXR80QllFLY+dQM4qPszo0D4xQy+4EGAjwG2Ic3Xxp9YkC
66xqOHSisQqBxcEKXQlhLgp8r59mgAXWdrE39Finravp0kQNWCbfqZq9y4op0Nyb
wJCIkuQWtDkDJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:53 2026 by rpki-client