Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
File:                     5jAbF0RrPssIF-QA6YL3Km2AHTE.mft (raw, json)
Hash identifier:          v2sdHP/6t6M/F7F8RZrmaimx6rAFRd7Ln0FFkW2gUp4=
Subject key identifier:   FF:34:02:3E:74:B1:0A:2C:75:A6:1E:7F:E7:C5:40:FE:1A:DD:E8:19
Authority key identifier: E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
Certificate issuer:       /CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Certificate serial:       019EC1EDEF79B6A47E5840EF8028982864F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
Manifest number:          0B
Signing time:             Sat 13 Jun 2026 17:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:56 +0000
Files and hashes:         1: 5jAbF0RrPssIF-QA6YL3Km2AHTE.crl (hash: Hdu+14oBw1HRF8J+V0WdMXNecCa6iNCyVJN4qWIVr3M=)
                          2: y8-zYgb68sCKmok28fSORVZTV7k.roa (hash: kb393sHwSxydXSQ1l80qzXOkKVqcGzDmY/nU6zerbuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:ef:79:b6:a4:7e:58:40:ef:80:28:98:28:64:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6301b17446b3ecb0817e400e982f72a6d801d31
        Validity
            Not Before: Jun 13 17:00:56 2026 GMT
            Not After : Jun 14 17:00:56 2026 GMT
        Subject: CN=ff34023e74b10a2c75a61e7fe7c540fe1adde819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:51:54:8c:6f:44:68:15:83:fc:6b:25:90:
                    f1:e0:2e:27:60:47:0b:19:84:c0:67:4c:4d:32:69:
                    2d:85:7b:c7:47:ed:37:19:a4:ff:5b:6f:57:1a:a1:
                    f3:0a:d1:97:74:2c:fd:3a:d2:f4:a7:f1:95:d1:6f:
                    8e:ad:0a:d7:78:f2:04:60:6b:44:24:9c:d0:b4:d3:
                    6d:36:ca:91:27:1f:df:bf:41:05:bc:47:18:58:24:
                    a2:4e:da:4f:84:f4:76:19:c4:04:7e:84:4e:f7:92:
                    c9:70:52:9c:06:16:03:84:fd:19:73:28:9a:83:19:
                    73:3a:bd:40:93:67:32:76:98:86:6f:cc:2f:80:d0:
                    25:f2:9b:fa:67:c8:b6:90:f1:89:cc:3c:f1:12:c2:
                    36:76:42:fd:73:08:dc:b5:aa:3b:9f:1e:e9:28:19:
                    c8:2c:0a:43:d5:c4:4b:0c:df:0d:56:aa:78:0c:13:
                    5d:b9:31:e8:b1:d8:98:31:0a:49:5d:6b:48:da:ed:
                    2a:74:c6:7c:75:22:0b:e5:6d:8c:32:94:72:08:b1:
                    94:ff:7a:b7:1c:4e:4b:34:9f:02:cb:5c:c4:6f:65:
                    d1:4b:76:58:bb:2d:ac:84:a3:3e:bf:33:12:93:72:
                    e7:ef:ef:97:8a:ae:ae:a1:4e:9d:ec:c6:9b:6f:56:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:34:02:3E:74:B1:0A:2C:75:A6:1E:7F:E7:C5:40:FE:1A:DD:E8:19
            X509v3 Authority Key Identifier:
                keyid:E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:74:06:76:07:dc:cf:2f:e5:66:65:ed:e4:26:64:38:d7:99:
         33:5c:23:d2:be:e3:b6:ba:f3:24:89:75:5b:2e:d4:9d:5e:5d:
         3c:0c:40:46:3a:37:f4:dc:f5:a7:6d:6d:6f:94:b9:ec:4b:38:
         32:c9:c4:50:d1:99:0d:e2:98:47:64:85:0d:64:c9:39:35:1c:
         22:fc:74:a2:b0:d8:23:e5:a8:54:1b:07:cc:5e:37:45:7a:dd:
         ee:a2:90:ee:cc:68:54:9a:ac:63:9f:89:91:04:ed:6e:f4:92:
         4e:dc:e0:7e:b9:38:0b:c0:70:8a:61:a2:11:15:09:ee:6f:ad:
         f1:2c:c7:79:d6:3a:4a:d2:80:b8:2f:a5:6d:15:99:bb:14:ca:
         7b:25:2d:74:8e:1a:76:4c:0a:34:d1:4b:78:f6:5f:03:6f:1f:
         86:c4:35:82:9e:3b:09:ae:96:e2:ed:d6:1c:76:76:88:f8:ec:
         ed:c9:0e:8a:17:13:e4:5c:2c:07:97:7f:c2:90:84:ed:c8:c3:
         58:cc:4d:e8:5d:d6:fd:de:3b:2d:4e:71:44:6d:a7:87:6b:b2:
         22:64:ef:a0:2b:f4:20:9e:cf:19:00:11:fc:e4:d5:66:df:59:
         7d:b9:d7:3e:c3:ec:ea:0c:d8:68:93:dd:1e:d2:a9:0f:d9:1d:
         86:cb:d2:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7e95tqR+WEDvgCiYKGT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzAxYjE3NDQ2YjNlY2IwODE3ZTQwMGU5ODJmNzJhNmQ4
MDFkMzEwHhcNMjYwNjEzMTcwMDU2WhcNMjYwNjE0MTcwMDU2WjAzMTEwLwYDVQQD
EyhmZjM0MDIzZTc0YjEwYTJjNzVhNjFlN2ZlN2M1NDBmZTFhZGRlODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dZRVIxvRGgVg/xrJZDx4C4nYEcL
GYTAZ0xNMmkthXvHR+03GaT/W29XGqHzCtGXdCz9OtL0p/GV0W+OrQrXePIEYGtE
JJzQtNNtNsqRJx/fv0EFvEcYWCSiTtpPhPR2GcQEfoRO95LJcFKcBhYDhP0Zcyia
gxlzOr1Ak2cydpiGb8wvgNAl8pv6Z8i2kPGJzDzxEsI2dkL9cwjctao7nx7pKBnI
LApD1cRLDN8NVqp4DBNduTHosdiYMQpJXWtI2u0qdMZ8dSIL5W2MMpRyCLGU/3q3
HE5LNJ8Cy1zEb2XRS3ZYuy2shKM+vzMSk3Ln7++Xiq6uoU6d7Mabb1YnNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP80Aj50sQosdaYef+fFQP4a3egZMB8GA1UdIwQY
MBaAFOYwGxdEaz7LCBfkAOmC9yptgB0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zZDNiOTMtMDNkNy00OGFmLTllOTYt
ZDcyMDNjNTZkZmVmLzEvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zZDNiOTMtMDNkNy00OGFmLTllOTYtZDcyMDNjNTZkZmVm
LzEvNWpBYkYwUnJQc3NJRi1RQTZZTDNLbTJBSFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHQGdgfc
zy/lZmXt5CZkONeZM1wj0r7jtrrzJIl1Wy7UnV5dPAxARjo39Nz1p21tb5S57Es4
MsnEUNGZDeKYR2SFDWTJOTUcIvx0orDYI+WoVBsHzF43RXrd7qKQ7sxoVJqsY5+J
kQTtbvSSTtzgfrk4C8BwimGiERUJ7m+t8SzHedY6StKAuC+lbRWZuxTKeyUtdI4a
dkwKNNFLePZfA28fhsQ1gp47Ca6W4u3WHHZ2iPjs7ckOihcT5FwsB5d/wpCE7cjD
WMxN6F3W/d47LU5xRG2nh2uyImTvoCv0IJ7PGQAR/OTVZt9ZfbnXPsPs6gzYaJPd
HtKpD9kdhsvSVw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:15 2026 by rpki-client