Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          ofqP7vAzr0umoQBHJwwd5++ZbAw3jLPk9KsJfMmvvZk=
Subject key identifier:   22:04:DC:F2:1C:DC:5A:D3:33:4C:78:FE:50:56:A8:0E:10:98:53:A3
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       019EBE10D51FFF253B70D8F9E2C0013E2462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          05C0
Signing time:             Fri 12 Jun 2026 23:00:34 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:34 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:34 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: CXg64PfZWZEn/4FDh65AKg0dgKdtopNNeT8BZMGSvn8=)
                          2: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (hash: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:d5:1f:ff:25:3b:70:d8:f9:e2:c0:01:3e:24:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Jun 12 23:00:34 2026 GMT
            Not After : Jun 13 23:00:34 2026 GMT
        Subject: CN=2204dcf21cdc5ad3334c78fe5056a80e109853a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ff:58:3b:14:53:3b:5a:ee:d0:02:75:e3:a8:
                    fb:dd:ff:97:b5:75:de:73:25:9f:41:c6:b7:c4:20:
                    29:72:d9:d0:d5:f3:48:10:67:fd:42:23:7a:42:1d:
                    b5:69:a3:c4:f9:b6:54:1b:41:11:ba:cc:ca:02:92:
                    d7:a7:e0:35:84:1e:98:ad:be:85:3a:3d:45:26:cb:
                    3e:a1:15:6a:06:29:ea:4c:ca:4d:74:be:cf:7a:bc:
                    44:81:da:df:fb:2d:52:5d:79:e3:29:8a:70:9e:9b:
                    65:c1:6b:b2:3e:d5:b2:4c:25:a7:e2:3d:f7:0f:cf:
                    12:fa:89:62:d2:1a:cb:c9:da:d5:82:0b:c8:5e:0e:
                    ba:a5:35:d1:49:9f:40:ef:ac:d3:d9:c2:b5:07:31:
                    df:33:a1:41:07:f2:29:87:54:f7:d3:10:c1:b8:de:
                    4d:62:d0:06:5e:74:de:01:34:c5:2e:76:a6:28:6d:
                    5a:4e:b2:d1:8d:15:23:27:f3:ba:23:db:6c:ff:d3:
                    d9:79:42:74:ec:cf:db:31:5c:a0:4e:b7:3c:19:1c:
                    b9:14:64:02:c4:6e:93:93:83:11:93:cd:63:30:8c:
                    43:83:62:e6:a9:99:58:17:7c:9c:dd:98:57:99:6f:
                    d2:54:3b:8b:b5:cb:89:09:fb:a4:e7:c6:fa:60:b4:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:DC:F2:1C:DC:5A:D3:33:4C:78:FE:50:56:A8:0E:10:98:53:A3
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:89:2c:35:ad:41:15:88:01:37:d9:45:2b:35:d0:7d:94:88:
         26:54:8d:a7:24:db:d7:66:65:13:22:fc:1e:a0:d1:42:88:1d:
         e3:7a:87:a8:83:a7:bc:16:db:0f:ae:77:14:e4:07:3e:f0:8f:
         09:37:2d:79:81:a4:f4:59:e8:1b:ff:ac:1b:7d:e9:06:be:bd:
         7f:b3:74:7e:dc:8f:d3:24:1e:11:63:7e:ef:58:a1:2c:0e:94:
         82:f4:5a:36:06:38:3b:e9:56:ce:8d:35:df:a8:cb:45:ef:36:
         d0:12:30:bd:28:ec:0e:32:ce:db:a6:bf:42:2b:b3:21:b5:6e:
         ad:e1:af:fe:62:fd:9f:58:1f:03:6c:83:79:6b:c7:0a:10:28:
         0f:22:b9:a3:ba:09:de:ff:7e:a3:ae:a3:6f:14:aa:54:2f:36:
         44:ba:38:07:93:d4:4c:60:d3:64:e2:4c:43:50:bf:a7:68:78:
         f5:da:5a:8c:4e:86:b6:a5:5d:39:bf:a3:2b:09:ab:97:68:55:
         ff:50:31:8b:7d:fb:5c:9f:c2:67:4e:a4:7e:70:86:28:eb:4a:
         bb:37:3b:c5:ec:6b:76:bd:dc:f0:44:5a:a4:19:1e:13:5f:8b:
         44:ab:af:a6:17:16:e3:51:d9:b1:04:40:60:30:f2:f3:1c:0b:
         20:1b:4c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ENUf/yU7cNj54sABPiRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjQ5YmZiMmEwYjgyNDQ2MDYwYzdmYzkwNzgxMGU1MTg3
MDU5MzYwHhcNMjYwNjEyMjMwMDM0WhcNMjYwNjEzMjMwMDM0WjAzMTEwLwYDVQQD
EygyMjA0ZGNmMjFjZGM1YWQzMzM0Yzc4ZmU1MDU2YTgwZTEwOTg1M2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v9YOxRTO1ru0AJ146j73f+XtXXe
cyWfQca3xCApctnQ1fNIEGf9QiN6Qh21aaPE+bZUG0ERuszKApLXp+A1hB6Yrb6F
Oj1FJss+oRVqBinqTMpNdL7PerxEgdrf+y1SXXnjKYpwnptlwWuyPtWyTCWn4j33
D88S+oli0hrLydrVggvIXg66pTXRSZ9A76zT2cK1BzHfM6FBB/Iph1T30xDBuN5N
YtAGXnTeATTFLnamKG1aTrLRjRUjJ/O6I9ts/9PZeUJ07M/bMVygTrc8GRy5FGQC
xG6Tk4MRk81jMIxDg2LmqZlYF3yc3ZhXmW/SVDuLtcuJCfuk58b6YLTZ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIE3PIc3FrTM0x4/lBWqA4QmFOjMB8GA1UdIwQY
MBaAFPb0m/sqC4JEYGDH/JB4EOUYcFk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTIt
MzNhNTZmNDU5YmMwLzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTItMzNhNTZmNDU5YmMw
LzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYksNa1B
FYgBN9lFKzXQfZSIJlSNpyTb12ZlEyL8HqDRQogd43qHqIOnvBbbD653FOQHPvCP
CTcteYGk9FnoG/+sG33pBr69f7N0ftyP0yQeEWN+71ihLA6UgvRaNgY4O+lWzo01
36jLRe820BIwvSjsDjLO26a/QiuzIbVureGv/mL9n1gfA2yDeWvHChAoDyK5o7oJ
3v9+o66jbxSqVC82RLo4B5PUTGDTZOJMQ1C/p2h49dpajE6GtqVdOb+jKwmrl2hV
/1Axi337XJ/CZ06kfnCGKOtKuzc7xexrdr3c8ERapBkeE1+LRKuvphcW41HZsQRA
YDDy8xwLIBtM8A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:41 2026 by rpki-client