Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File:                     c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier:          ZOn5yEjTu5tN2U8IYbN+Hi/7Djr45Ioqn4kCDoYlIZI=
Subject key identifier:   8A:F6:0C:FA:42:90:98:85:02:47:54:FB:8B:9E:37:B2:62:70:2E:7C
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer:       /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial:       019EC06D282DB8E1E008DCDEB876D4726DED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number:          01EE
Signing time:             Sat 13 Jun 2026 10:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:39 +0000
Files and hashes:         1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
                          2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: bQ1Ra8vSWyyDw8bhFCJv7rfc7a6yyH1pgC93YDFLk1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:28:2d:b8:e1:e0:08:dc:de:b8:76:d4:72:6d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
        Validity
            Not Before: Jun 13 10:00:39 2026 GMT
            Not After : Jun 14 10:00:39 2026 GMT
        Subject: CN=8af60cfa42909885024754fb8b9e37b262702e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:c3:26:22:50:3e:02:ba:14:16:e1:12:40:
                    b6:de:c6:19:ec:c4:93:45:24:2c:08:7c:e0:5f:a6:
                    ab:8f:30:a4:44:1e:7a:9d:73:d9:5e:44:e0:ed:ed:
                    86:54:8a:f3:58:02:71:91:f5:36:70:a6:cf:14:26:
                    7c:00:4a:26:11:4b:98:f7:fc:ce:d4:cb:ca:14:f3:
                    4f:3a:f4:d1:0e:aa:a9:7b:7b:94:ef:3a:75:9a:0a:
                    9b:83:e1:48:05:a3:79:c3:8b:f5:0d:c7:70:cf:15:
                    73:e2:33:ea:75:07:2b:8a:67:0b:f4:8f:a1:55:41:
                    38:f1:b7:1a:45:1a:59:5f:34:7a:86:6d:5c:48:6f:
                    76:eb:d1:1f:9f:60:bf:59:56:11:39:1c:2a:9c:ef:
                    5f:f1:03:86:80:d2:17:82:e0:c3:82:5a:63:09:58:
                    7a:e1:03:03:c0:e5:bb:60:2c:36:ce:9b:e3:5e:2c:
                    c6:97:e5:37:a8:63:4c:92:bb:38:98:bb:20:a7:86:
                    32:80:b7:27:ab:3a:77:db:2d:ed:df:d0:15:ca:cf:
                    46:70:41:00:a6:bd:04:45:85:f8:43:f3:c1:57:a9:
                    01:29:dd:7e:41:7d:c9:47:a7:43:4b:ff:cf:d8:40:
                    7c:4d:d4:3f:b1:8a:e2:d9:ca:1a:fd:8c:8b:3f:d3:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F6:0C:FA:42:90:98:85:02:47:54:FB:8B:9E:37:B2:62:70:2E:7C
            X509v3 Authority Key Identifier:
                keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d1:e2:c1:46:4d:a6:aa:1f:35:7e:92:05:95:cc:e0:0d:46:
         ca:e6:c0:37:29:82:86:d7:ef:e9:20:f1:09:87:dc:fd:72:d8:
         53:14:17:e7:40:6c:89:37:8d:b4:8e:06:41:91:01:79:11:ed:
         d8:22:04:22:30:75:b6:13:ad:27:69:3e:4d:c1:b0:26:24:be:
         7b:d0:74:85:ad:be:23:94:ae:ec:c8:e0:13:aa:ed:0a:ef:e4:
         e0:e3:14:ef:1a:6c:41:ee:8c:cc:68:74:f6:5f:81:27:56:ed:
         6a:27:bc:46:d8:a0:72:21:67:c3:d6:8e:46:77:97:e3:d4:65:
         23:e6:76:46:8b:f8:e6:8c:8f:c2:43:1d:af:32:c4:38:99:57:
         b8:19:6a:47:33:fa:ae:a6:99:2c:46:eb:96:18:60:4e:1e:12:
         da:73:7a:56:77:25:80:53:9a:d5:8f:7d:66:9c:52:e2:9c:71:
         43:19:9f:85:bc:91:e7:75:1c:83:b3:c0:52:0b:08:de:67:96:
         2e:cb:93:30:ec:bf:66:67:ab:66:2c:0c:0a:05:95:f7:a1:11:
         47:78:95:2d:33:4b:c6:78:d6:33:59:15:d5:02:f9:65:47:30:
         3b:c0:1e:17:ed:3d:69:1c:b3:9f:21:45:75:94:f9:65:12:81:
         fb:e9:ab:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbSgtuOHgCNzeuHbUcm3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1
YWQwMTgwHhcNMjYwNjEzMTAwMDM5WhcNMjYwNjE0MTAwMDM5WjAzMTEwLwYDVQQD
Eyg4YWY2MGNmYTQyOTA5ODg1MDI0NzU0ZmI4YjllMzdiMjYyNzAyZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnorDJiJQPgK6FBbhEkC23sYZ7MST
RSQsCHzgX6arjzCkRB56nXPZXkTg7e2GVIrzWAJxkfU2cKbPFCZ8AEomEUuY9/zO
1MvKFPNPOvTRDqqpe3uU7zp1mgqbg+FIBaN5w4v1DcdwzxVz4jPqdQcrimcL9I+h
VUE48bcaRRpZXzR6hm1cSG9269Efn2C/WVYRORwqnO9f8QOGgNIXguDDglpjCVh6
4QMDwOW7YCw2zpvjXizGl+U3qGNMkrs4mLsgp4YygLcnqzp32y3t39AVys9GcEEA
pr0ERYX4Q/PBV6kBKd1+QX3JR6dDS//P2EB8TdQ/sYri2coa/YyLP9Ot4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr2DPpCkJiFAkdU+4ueN7JicC58MB8GA1UdIwQY
MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt
NTViNjc3MjM1ZWIzLzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz
LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktHiwUZN
pqofNX6SBZXM4A1GyubANymChtfv6SDxCYfc/XLYUxQX50BsiTeNtI4GQZEBeRHt
2CIEIjB1thOtJ2k+TcGwJiS+e9B0ha2+I5Su7MjgE6rtCu/k4OMU7xpsQe6MzGh0
9l+BJ1btaie8RtigciFnw9aORneX49RlI+Z2Rov45oyPwkMdrzLEOJlXuBlqRzP6
rqaZLEbrlhhgTh4S2nN6VnclgFOa1Y99ZpxS4pxxQxmfhbyR53Ucg7PAUgsI3meW
LsuTMOy/ZmerZiwMCgWV96ERR3iVLTNLxnjWM1kV1QL5ZUcwO8AeF+09aRyznyFF
dZT5ZRKB++mrkA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:31:38 2026 by rpki-client