Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          Gb1zLIfxRTELxLUI7bD7gT61OsFT1uhPF8kCqWjqlWk=
Subject key identifier:   98:95:F6:96:B3:53:70:C6:27:37:1C:F2:A8:C9:71:93:72:FF:47:3E
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       019EBF91528A9CC1C75D840C6164657F19A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          168D
Signing time:             Sat 13 Jun 2026 06:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:32 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: OEUrNy0PTDQBhPB1jM6LW/3upNAZv8NGjTpLWME/TuQ=)
                          2: ng9Xwpw4kTndq_afGB7nkkVST_Q.roa (hash: EnVisylVrMLRpq23iMqP/krYezkyFTHOer8sFdAaBdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:52:8a:9c:c1:c7:5d:84:0c:61:64:65:7f:19:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Jun 13 06:00:32 2026 GMT
            Not After : Jun 14 06:00:32 2026 GMT
        Subject: CN=9895f696b35370c627371cf2a8c9719372ff473e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:a2:e6:34:72:46:47:ed:5e:b2:b1:d9:e2:
                    b4:86:2e:36:21:2c:cf:db:f8:09:5c:0e:81:ac:96:
                    07:7a:39:6f:32:0f:92:ec:d9:eb:05:e3:20:94:fc:
                    60:72:52:5e:c7:3e:c6:4e:65:50:1f:5a:7a:85:19:
                    c0:a7:ff:56:96:62:89:ae:63:03:80:a4:99:04:6b:
                    14:bf:95:07:b5:ee:fd:e3:ab:6e:57:3c:7a:51:7c:
                    22:c3:85:79:bc:26:ff:51:8b:48:cf:88:0b:95:08:
                    5e:93:78:4b:99:c1:68:e3:f7:83:24:f2:c9:4e:f6:
                    f5:d3:28:03:21:81:56:71:b3:d7:72:e7:91:18:a8:
                    8d:4e:c8:b4:8f:98:d9:50:aa:70:39:bb:58:0a:a3:
                    f2:cc:2e:f1:4c:ec:35:71:23:9e:bd:e3:d1:24:19:
                    a2:27:e9:84:36:7b:a7:13:a9:7e:9c:96:32:46:1e:
                    3e:44:36:fa:d9:39:1d:79:3c:dc:d8:8f:88:1b:2f:
                    61:31:62:c4:3b:a2:e6:51:4e:25:74:6b:a3:66:65:
                    69:9e:60:82:21:9b:eb:90:b5:67:c3:64:85:06:ad:
                    18:39:b5:67:5f:16:6c:6e:80:79:56:1e:89:8f:d8:
                    75:2a:03:68:37:20:d0:9b:ab:ea:19:c8:3e:00:d3:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:95:F6:96:B3:53:70:C6:27:37:1C:F2:A8:C9:71:93:72:FF:47:3E
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:eb:a9:51:3f:88:15:eb:28:c9:80:a4:5f:39:71:b9:69:
         3a:19:31:dc:8f:62:94:7f:b8:10:8c:7b:85:4e:cc:d0:13:54:
         2d:cd:9f:16:03:da:d7:c1:89:96:a0:6e:d1:55:e1:25:89:5b:
         ef:87:75:35:b5:0d:7f:b2:95:a5:ec:5e:98:5b:92:38:8f:71:
         bd:aa:f2:a4:cc:cb:04:b4:52:93:64:82:90:58:d1:b1:2a:f8:
         15:41:8d:13:c5:c4:fc:6a:8f:17:3a:72:c5:f8:83:00:f6:16:
         d2:fb:43:1c:40:f9:eb:28:2a:e3:b9:4e:b8:16:92:2c:0f:9c:
         03:39:c0:0d:8d:d5:a2:16:64:c4:64:20:f6:a6:99:d6:77:b4:
         bb:db:e9:18:43:f5:91:4f:06:1c:ec:44:78:f0:a6:00:82:b9:
         80:56:61:54:a7:fb:a7:66:fb:33:3c:4d:9d:a3:fc:67:1f:c5:
         d0:00:1e:59:ff:8a:f3:a6:d8:a7:83:f0:83:f1:45:ce:b4:6e:
         15:47:f0:e7:5c:63:9c:27:5d:bf:f4:78:33:af:77:e3:b8:e0:
         01:92:1b:14:90:9d:b2:4f:ae:a9:4b:1e:c6:69:a0:01:05:04:
         95:55:1a:15:3e:c1:9b:85:79:00:40:aa:4e:e8:f8:45:07:e8:
         a2:cd:39:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kVKKnMHHXYQMYWRlfxmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjg5YjgwMTg2MzMyZDQ0MWJiMDUxNWM0NzI2MWM1ZmZh
MDYxNmIwHhcNMjYwNjEzMDYwMDMyWhcNMjYwNjE0MDYwMDMyWjAzMTEwLwYDVQQD
Eyg5ODk1ZjY5NmIzNTM3MGM2MjczNzFjZjJhOGM5NzE5MzcyZmY0NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhmi5jRyRkftXrKx2eK0hi42ISzP
2/gJXA6BrJYHejlvMg+S7NnrBeMglPxgclJexz7GTmVQH1p6hRnAp/9WlmKJrmMD
gKSZBGsUv5UHte7946tuVzx6UXwiw4V5vCb/UYtIz4gLlQhek3hLmcFo4/eDJPLJ
Tvb10ygDIYFWcbPXcueRGKiNTsi0j5jZUKpwObtYCqPyzC7xTOw1cSOevePRJBmi
J+mENnunE6l+nJYyRh4+RDb62TkdeTzc2I+IGy9hMWLEO6LmUU4ldGujZmVpnmCC
IZvrkLVnw2SFBq0YObVnXxZsboB5Vh6Jj9h1KgNoNyDQm6vqGcg+ANP0gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiV9pazU3DGJzcc8qjJcZNy/0c+MB8GA1UdIwQY
MBaAFBO4m4AYYzLUQbsFFcRyYcX/oGFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUt
YzE5MjMyYmRhNDMwLzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82ZTVkYzMtYzdmYS00ZDM2LTkwOTUtYzE5MjMyYmRhNDMw
LzEvRTdpYmdCaGpNdFJCdXdVVnhISmh4Zi1nWVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZ7rqVE/
iBXrKMmApF85cblpOhkx3I9ilH+4EIx7hU7M0BNULc2fFgPa18GJlqBu0VXhJYlb
74d1NbUNf7KVpexemFuSOI9xvarypMzLBLRSk2SCkFjRsSr4FUGNE8XE/GqPFzpy
xfiDAPYW0vtDHED56ygq47lOuBaSLA+cAznADY3VohZkxGQg9qaZ1ne0u9vpGEP1
kU8GHOxEePCmAIK5gFZhVKf7p2b7MzxNnaP8Zx/F0AAeWf+K86bYp4Pwg/FFzrRu
FUfw51xjnCddv/R4M69347jgAZIbFJCdsk+uqUsexmmgAQUElVUaFT7Bm4V5AECq
Tuj4RQfoos05eQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:13 2026 by rpki-client