Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File:                     RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier:          ub2BXsqy24UvfnzbB3v8s9EVVSv4tA2s1OjABaS3xb8=
Subject key identifier:   88:33:02:2E:FA:BE:19:38:C2:B3:1A:E7:75:74:F6:C3:DD:1F:E7:FB
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer:       /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial:       019EC1B6AC7EE070DA77E39C090DEC790CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number:          0723
Signing time:             Sat 13 Jun 2026 16:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:34 +0000
Files and hashes:         1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
                          2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: uQQFi3I17i0NF0BZQvNYCwKpgo4LTJ6Gi/dIiy9r8ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:ac:7e:e0:70:da:77:e3:9c:09:0d:ec:79:0c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
        Validity
            Not Before: Jun 13 16:00:34 2026 GMT
            Not After : Jun 14 16:00:34 2026 GMT
        Subject: CN=8833022efabe1938c2b31ae77574f6c3dd1fe7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:30:cc:95:af:e2:ed:e5:e5:4a:f3:71:19:
                    09:4a:db:b9:b7:90:fa:68:56:d4:41:90:64:40:52:
                    5f:65:ea:5a:39:d1:9d:0d:34:1e:29:e0:2d:66:cf:
                    c5:43:2c:1b:29:a8:06:70:2f:58:ea:53:06:50:58:
                    10:76:05:a6:6a:56:68:dc:45:35:2b:5e:78:b3:db:
                    ea:62:c3:5c:ce:99:c9:89:fc:3f:51:58:9c:ff:ff:
                    01:68:68:b8:8b:61:cd:9a:10:2b:c9:08:a5:a5:ce:
                    f4:bc:e8:af:bc:75:12:45:17:99:b2:3d:92:3b:47:
                    4d:98:2b:7a:c0:f6:be:31:38:7e:6e:ae:2c:e4:d5:
                    96:dc:9e:90:06:2f:58:a6:e8:74:28:ed:34:3e:a8:
                    22:ff:1a:5d:e0:5d:96:e5:d7:35:52:52:8e:99:d0:
                    b2:11:b6:b0:14:b4:44:5d:b9:af:be:1e:bc:ce:2c:
                    f2:19:ca:67:9a:6e:f6:22:54:8d:b3:80:92:0d:e8:
                    44:78:82:bd:fd:6b:b1:5c:6b:fc:7b:2d:72:25:36:
                    03:9b:11:76:ae:3c:6b:18:f1:7a:7a:2f:5e:e8:2a:
                    2e:19:2f:87:2d:9b:01:aa:63:6a:0f:eb:1f:24:2d:
                    52:bf:15:2b:73:c5:06:30:f3:e2:be:a7:e7:56:89:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:02:2E:FA:BE:19:38:C2:B3:1A:E7:75:74:F6:C3:DD:1F:E7:FB
            X509v3 Authority Key Identifier:
                keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:50:8b:b9:cf:2e:be:a0:cf:6e:d4:9a:6d:5c:7c:73:16:66:
         ed:9c:dc:11:88:86:d4:b8:e6:f7:69:b0:50:81:08:e6:b6:a5:
         14:81:58:4b:f0:e4:d3:90:25:f5:cb:07:3d:1e:f3:f4:0f:03:
         b8:ff:ce:86:a0:64:20:ca:29:fe:7e:c6:67:e6:b3:48:ae:76:
         8a:34:f1:b8:9f:21:99:dc:8b:94:ba:6b:41:86:00:7b:46:59:
         5c:81:33:ff:b8:a7:9c:8d:40:74:8f:55:36:fa:0c:be:fc:3a:
         30:91:ab:ed:0a:22:e5:d0:23:1f:43:1d:1f:f1:c1:3b:94:32:
         68:ff:2a:fa:29:f7:97:87:24:27:77:3f:c8:68:65:14:fb:45:
         39:3c:24:c6:92:18:8b:73:dc:59:92:da:e8:33:2d:6b:9c:9f:
         8e:6b:5c:34:31:9c:29:76:68:09:3c:3f:50:5c:43:98:8a:fb:
         74:e6:66:1d:30:06:af:b1:ed:0c:fa:2b:cb:17:4e:18:b5:64:
         88:2b:3a:fd:5c:c2:7a:2f:f8:8e:90:61:fb:21:17:7a:e9:42:
         66:b7:63:d9:3b:8d:8c:3d:c5:c3:ed:03:bb:12:1d:ee:51:f4:
         0d:0d:a5:b3:07:88:b5:cf:e3:bf:e8:ed:7f:f8:96:85:86:8f:
         77:eb:ab:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btqx+4HDad+OcCQ3seQzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjYwNjEzMTYwMDM0WhcNMjYwNjE0MTYwMDM0WjAzMTEwLwYDVQQD
Eyg4ODMzMDIyZWZhYmUxOTM4YzJiMzFhZTc3NTc0ZjZjM2RkMWZlN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNcwzJWv4u3l5UrzcRkJStu5t5D6
aFbUQZBkQFJfZepaOdGdDTQeKeAtZs/FQywbKagGcC9Y6lMGUFgQdgWmalZo3EU1
K154s9vqYsNczpnJifw/UVic//8BaGi4i2HNmhAryQilpc70vOivvHUSRReZsj2S
O0dNmCt6wPa+MTh+bq4s5NWW3J6QBi9Ypuh0KO00Pqgi/xpd4F2W5dc1UlKOmdCy
EbawFLREXbmvvh68zizyGcpnmm72IlSNs4CSDehEeIK9/WuxXGv8ey1yJTYDmxF2
rjxrGPF6ei9e6CouGS+HLZsBqmNqD+sfJC1SvxUrc8UGMPPivqfnVomNPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgzAi76vhk4wrMa53V09sPdH+f7MB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1CLuc8u
vqDPbtSabVx8cxZm7ZzcEYiG1Ljm92mwUIEI5ralFIFYS/Dk05Al9csHPR7z9A8D
uP/OhqBkIMop/n7GZ+azSK52ijTxuJ8hmdyLlLprQYYAe0ZZXIEz/7innI1AdI9V
NvoMvvw6MJGr7Qoi5dAjH0MdH/HBO5QyaP8q+in3l4ckJ3c/yGhlFPtFOTwkxpIY
i3PcWZLa6DMta5yfjmtcNDGcKXZoCTw/UFxDmIr7dOZmHTAGr7HtDPoryxdOGLVk
iCs6/VzCei/4jpBh+yEXeulCZrdj2TuNjD3Fw+0DuxId7lH0DQ2lsweItc/jv+jt
f/iWhYaPd+urHw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:33:56 2026 by rpki-client