Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          hphryC6aP0FkJnfAlbxD76QAaRvPH1TVujUQUAID5ZM=
Subject key identifier:   94:4F:D3:66:86:CF:7C:DE:E1:A3:58:6D:C4:C9:3E:19:3B:03:2F:BD
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       019EBEB65153A866ABBD9E360FCC82B2E5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          0615
Signing time:             Sat 13 Jun 2026 02:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:19 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: sFvOqOTJqS6cKv82wUXw6wd8YtJVstKswWzujCL7OGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:51:53:a8:66:ab:bd:9e:36:0f:cc:82:b2:e5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Jun 13 02:01:19 2026 GMT
            Not After : Jun 14 02:01:19 2026 GMT
        Subject: CN=944fd36686cf7cdee1a3586dc4c93e193b032fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:5f:4b:d1:41:37:8b:4d:0a:d3:72:ba:02:
                    2f:3e:9c:f6:9a:21:8c:7c:79:4b:b3:23:89:f0:30:
                    ea:d7:96:ad:c8:a9:f3:59:61:7e:9a:c8:6e:d3:49:
                    f8:44:1d:b6:f3:bb:a6:31:14:0f:97:c6:e8:3c:9c:
                    7a:85:7e:73:aa:19:ca:cd:6a:9d:49:51:7b:44:60:
                    85:8f:99:f5:e6:48:ad:c6:7a:8b:6c:f6:66:29:67:
                    56:d0:5b:60:a9:5c:46:14:be:6f:d7:60:7c:3b:51:
                    ca:b6:88:65:57:a6:6e:3a:a8:4f:c6:90:ff:f1:3c:
                    77:34:68:b2:05:b0:c9:ef:f5:7f:54:f6:ab:a1:84:
                    c5:0f:e1:6f:4b:d1:89:f5:e2:72:0a:6b:18:56:4e:
                    12:e1:62:1f:4b:bb:be:0e:a7:9a:6b:94:6f:46:10:
                    a4:0c:86:4e:6e:20:21:91:5a:e8:bc:a4:e3:f3:3d:
                    20:97:c9:35:64:0a:19:b5:74:72:32:f3:fb:ca:9a:
                    b7:5f:9f:59:50:a5:59:26:b3:0a:33:94:de:9e:4c:
                    3e:60:3b:74:d2:0b:04:06:d2:7e:ca:e9:46:5a:ad:
                    2c:36:7d:10:c9:d0:69:d2:ef:c8:b3:44:fe:41:78:
                    43:20:d4:60:c4:90:c8:d4:53:30:17:62:e5:f3:54:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4F:D3:66:86:CF:7C:DE:E1:A3:58:6D:C4:C9:3E:19:3B:03:2F:BD
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:f2:4d:b8:f4:b3:c8:4a:25:ad:ea:d9:60:08:22:aa:d5:
         1e:41:18:68:32:d4:1e:cd:e9:04:21:c1:02:2d:52:19:bf:fd:
         7f:bb:4d:81:88:59:2f:0e:74:7c:4c:84:5e:d3:1e:eb:7d:80:
         10:29:00:f3:55:62:37:85:4a:49:c4:af:7e:b9:9d:60:85:3d:
         74:fc:50:f2:0b:c1:9e:b4:05:99:44:70:13:99:dc:9f:a5:96:
         0a:62:4f:d6:25:05:99:44:d4:44:17:88:90:11:f4:3c:dd:23:
         98:75:c8:db:34:d5:cd:03:8f:ff:a9:f0:fc:0b:32:12:6a:b3:
         c9:50:d0:17:52:6f:71:e6:76:fc:88:7b:53:86:66:6d:b1:a1:
         b0:95:44:83:1b:86:99:30:6b:87:eb:f4:a0:79:a5:18:92:47:
         c9:ed:c8:87:d5:08:48:bf:74:fb:2a:01:fd:10:c3:04:dc:b6:
         db:86:f7:31:ea:70:b0:c8:2a:57:dd:56:ba:f2:c8:41:d4:cf:
         11:4a:05:af:f3:b6:ff:5b:51:f7:a9:37:b8:19:63:4a:b1:96:
         79:4f:c3:29:47:ce:df:cd:f8:f8:f6:af:4b:92:d7:32:14:14:
         99:89:34:61:fb:2c:6a:22:d5:80:33:a3:ec:cc:a2:14:e9:ab:
         07:ab:eb:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tlFTqGarvZ42D8yCsuWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWVlMjdkZGI0OTBiYjk2NjllZWJhMGUxMTY5NDE2NGNh
MmU4ZTgwHhcNMjYwNjEzMDIwMTE5WhcNMjYwNjE0MDIwMTE5WjAzMTEwLwYDVQQD
Eyg5NDRmZDM2Njg2Y2Y3Y2RlZTFhMzU4NmRjNGM5M2UxOTNiMDMyZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBhfS9FBN4tNCtNyugIvPpz2miGM
fHlLsyOJ8DDq15atyKnzWWF+mshu00n4RB2287umMRQPl8boPJx6hX5zqhnKzWqd
SVF7RGCFj5n15kitxnqLbPZmKWdW0FtgqVxGFL5v12B8O1HKtohlV6ZuOqhPxpD/
8Tx3NGiyBbDJ7/V/VParoYTFD+FvS9GJ9eJyCmsYVk4S4WIfS7u+Dqeaa5RvRhCk
DIZObiAhkVrovKTj8z0gl8k1ZAoZtXRyMvP7ypq3X59ZUKVZJrMKM5Tenkw+YDt0
0gsEBtJ+yulGWq0sNn0QydBp0u/Is0T+QXhDINRgxJDI1FMwF2Ll81TQTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRP02aGz3ze4aNYbcTJPhk7Ay+9MB8GA1UdIwQY
MBaAFAPu4n3bSQu5Zp7roOEWlBZMoujoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUt
OGQ4YzU5MmRhNDIwLzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUtOGQ4YzU5MmRhNDIw
LzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+jyTbj0
s8hKJa3q2WAIIqrVHkEYaDLUHs3pBCHBAi1SGb/9f7tNgYhZLw50fEyEXtMe632A
ECkA81ViN4VKScSvfrmdYIU9dPxQ8gvBnrQFmURwE5ncn6WWCmJP1iUFmUTURBeI
kBH0PN0jmHXI2zTVzQOP/6nw/AsyEmqzyVDQF1JvceZ2/Ih7U4ZmbbGhsJVEgxuG
mTBrh+v0oHmlGJJHye3Ih9UISL90+yoB/RDDBNy224b3MepwsMgqV91WuvLIQdTP
EUoFr/O2/1tR96k3uBljSrGWeU/DKUfO3834+PavS5LXMhQUmYk0YfssaiLVgDOj
7MyiFOmrB6vrIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:55 2026 by rpki-client