Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File:                     0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier:          zf+xAZ32awZ2/v4C0G+KJX6fePRaZc5DaT7NSAPnTW0=
Subject key identifier:   2E:94:18:4C:F3:DB:8F:DE:85:AA:2A:7E:F3:17:91:9A:CF:8E:E1:09
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer:       /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial:       019EC06D631513F49CF3618C202E63241902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number:          110C
Signing time:             Sat 13 Jun 2026 10:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:54 +0000
Files and hashes:         1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: QEOLXokwdiCq6enAwLdPDJeduweq8nQ6xtqkASNDFzk=)
                          2: 2JYWg4gqZMghUwSsH_cELClo_DE.roa (hash: XmfRPL/CjIz58Jli7M5Cw1QTYVH2xAtyBdeQbzz9+4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:63:15:13:f4:9c:f3:61:8c:20:2e:63:24:19:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
        Validity
            Not Before: Jun 13 10:00:54 2026 GMT
            Not After : Jun 14 10:00:54 2026 GMT
        Subject: CN=2e94184cf3db8fde85aa2a7ef317919acf8ee109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:da:bb:0f:0b:9d:70:3d:04:dc:9d:0a:66:
                    9a:24:73:86:dd:d0:52:46:99:b0:b4:90:bd:39:d7:
                    9d:70:d9:21:d9:50:1d:82:7c:97:d0:f1:35:d0:81:
                    a9:e4:09:dc:16:49:7c:17:f8:5e:9f:28:e6:46:d4:
                    45:0a:73:ac:1a:67:d3:66:28:3c:6b:2a:ef:aa:1e:
                    c6:b9:1f:3a:74:91:1f:fd:44:8d:ed:03:fa:8d:25:
                    77:1e:72:41:78:13:96:7f:6a:be:b4:41:ce:37:09:
                    48:15:6f:66:36:87:db:41:74:fe:ff:6f:19:f6:d9:
                    22:77:cb:ef:b1:74:95:e2:7b:78:b9:a7:b8:81:2f:
                    2e:2f:95:44:38:90:6d:1b:8a:0e:d2:78:3b:4b:f2:
                    04:ee:f9:42:0f:c5:7c:52:8c:f1:09:ab:61:71:0a:
                    4c:ef:59:0f:c3:f4:8c:8e:a8:a3:98:ce:18:9c:27:
                    45:c7:75:ab:b3:9c:5c:48:ba:d9:c2:b8:28:fd:15:
                    ac:86:50:4b:2e:01:d4:a5:2d:f8:82:35:cb:d2:3d:
                    67:1f:b7:b5:ce:ac:01:9e:12:83:91:54:49:9f:d6:
                    04:33:44:94:83:3d:c0:41:e9:55:08:d4:3c:92:b7:
                    db:35:ec:6a:12:27:50:4d:61:0f:4c:06:28:2e:17:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:18:4C:F3:DB:8F:DE:85:AA:2A:7E:F3:17:91:9A:CF:8E:E1:09
            X509v3 Authority Key Identifier:
                keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:b3:34:99:f8:10:5a:13:bf:38:c2:6b:10:99:63:b1:46:
         67:d0:60:66:81:56:00:b1:76:f2:aa:93:30:c6:db:02:79:1f:
         a2:cc:0f:08:47:7c:05:ae:a7:ef:cb:53:46:69:35:df:7f:58:
         cb:40:42:ab:1a:ee:ff:bd:30:03:46:f5:4a:17:24:8b:32:1b:
         18:aa:ac:c8:b7:ef:71:7b:aa:6b:77:2a:02:60:19:49:7b:93:
         ed:b9:8c:90:8e:b6:41:3e:f5:bf:c9:cb:f8:04:bb:be:d9:03:
         fe:b5:5a:a7:3c:18:35:9a:a2:23:ed:bf:b9:a0:81:1b:67:c6:
         cf:22:42:2f:68:1a:20:0e:12:21:5b:9a:74:3b:0d:28:7a:a7:
         c5:21:61:35:8a:de:c4:12:c9:93:a4:9a:e9:79:a3:72:40:3b:
         05:e7:45:f8:21:5b:8c:f1:22:b3:1d:cf:85:59:d0:7a:bd:61:
         3e:af:e5:bd:3e:9b:d1:d3:33:f3:b6:f1:76:84:ad:92:61:3c:
         a9:00:47:23:b8:db:73:7c:88:55:e5:45:cd:b6:e8:9a:3b:b7:
         d8:12:09:52:5a:64:4d:44:e8:ab:9b:14:92:42:24:2e:97:f6:
         fc:cd:38:30:0e:6e:67:ba:90:68:a4:8f:74:62:a7:99:46:ce:
         ab:3f:0e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbWMVE/Sc82GMIC5jJBkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmZhZGYyOTIzOWVkOGNmM2Y2YzY5M2Q4YmRiNzlmNDIw
MDBhYmMwHhcNMjYwNjEzMTAwMDU0WhcNMjYwNjE0MTAwMDU0WjAzMTEwLwYDVQQD
EygyZTk0MTg0Y2YzZGI4ZmRlODVhYTJhN2VmMzE3OTE5YWNmOGVlMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4Dauw8LnXA9BNydCmaaJHOG3dBS
RpmwtJC9OdedcNkh2VAdgnyX0PE10IGp5AncFkl8F/henyjmRtRFCnOsGmfTZig8
ayrvqh7GuR86dJEf/USN7QP6jSV3HnJBeBOWf2q+tEHONwlIFW9mNofbQXT+/28Z
9tkid8vvsXSV4nt4uae4gS8uL5VEOJBtG4oO0ng7S/IE7vlCD8V8UozxCathcQpM
71kPw/SMjqijmM4YnCdFx3Wrs5xcSLrZwrgo/RWshlBLLgHUpS34gjXL0j1nH7e1
zqwBnhKDkVRJn9YEM0SUgz3AQelVCNQ8krfbNexqEidQTWEPTAYoLhc/YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6UGEzz24/ehaoqfvMXkZrPjuEJMB8GA1UdIwQY
MBaAFNC/rfKSOe2M8/bGk9i9t59CAAq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAt
N2JiMzY1ZjM0YzZjLzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAtN2JiMzY1ZjM0YzZj
LzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE+zNJn4
EFoTvzjCaxCZY7FGZ9BgZoFWALF28qqTMMbbAnkfoswPCEd8Ba6n78tTRmk1339Y
y0BCqxru/70wA0b1ShckizIbGKqsyLfvcXuqa3cqAmAZSXuT7bmMkI62QT71v8nL
+AS7vtkD/rVapzwYNZqiI+2/uaCBG2fGzyJCL2gaIA4SIVuadDsNKHqnxSFhNYre
xBLJk6Sa6XmjckA7BedF+CFbjPEisx3PhVnQer1hPq/lvT6b0dMz87bxdoStkmE8
qQBHI7jbc3yIVeVFzbbomju32BIJUlpkTUToq5sUkkIkLpf2/M04MA5uZ7qQaKSP
dGKnmUbOqz8Otg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:48 2026 by rpki-client