Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File:                     RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier:          9+CI97auV74+5Ry99wSZ/VZoHmeXwdVRMjYKOdoEi/c=
Subject key identifier:   8E:C3:02:02:41:55:77:CF:D6:FD:B4:5E:FE:8B:DE:06:68:7C:71:AD
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer:       /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial:       019EC1B6652BF29FC11E570989BC562E8F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number:          0299
Signing time:             Sat 13 Jun 2026 16:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:16 +0000
Files and hashes:         1: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: 1XcpRLZhTGyV4c2hk8d4PeZmC2p1WOU5HjT4oWE38GM=)
                          2: o-mtc665fbhvSfNUs9vwAj_na4c.roa (hash: CKoVltX9Hmfz+Z2sk8sI92L3m9MX0WVmDaQsoWexPl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:65:2b:f2:9f:c1:1e:57:09:89:bc:56:2e:8f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
        Validity
            Not Before: Jun 13 16:00:16 2026 GMT
            Not After : Jun 14 16:00:16 2026 GMT
        Subject: CN=8ec30202415577cfd6fdb45efe8bde06687c71ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:ee:2b:52:3a:dd:5e:b9:e7:f0:5c:ea:f9:
                    ab:2d:f2:78:0a:9a:56:6b:9c:c0:fa:28:6a:21:ce:
                    91:43:41:af:b7:1f:1b:7b:c0:74:d4:c6:cb:14:4d:
                    6b:59:8c:7e:58:72:75:ab:0c:d8:41:df:fc:f1:d9:
                    1c:29:00:5d:e5:25:53:d4:3d:29:a6:ef:52:99:6d:
                    96:b9:f3:05:c2:b2:88:be:6e:01:0c:42:46:1c:ac:
                    14:ce:36:6b:ad:67:bc:9d:4b:7b:16:1b:5b:24:86:
                    ab:4f:49:41:27:fb:39:09:32:2e:34:5f:9b:40:e7:
                    23:ff:0c:ff:a9:56:fa:95:21:4f:09:ed:3f:5d:07:
                    03:bb:a7:b3:e6:fc:b9:21:56:02:47:93:27:43:6b:
                    b1:22:be:d1:6a:77:16:c4:a7:03:83:54:11:93:8c:
                    4f:18:a5:ae:05:ab:09:97:83:af:52:e6:9b:b3:71:
                    2b:ee:bc:ca:c6:07:1a:cd:8d:8f:e6:69:b9:70:02:
                    32:4d:fd:42:49:36:48:ee:6c:e4:e9:3b:d5:2e:0d:
                    87:d4:bd:25:02:24:80:1a:41:be:8e:06:21:d0:be:
                    11:5d:6d:1c:76:4c:b6:f5:46:2c:33:95:17:9e:53:
                    15:98:fd:1e:58:de:eb:48:72:52:0c:ba:03:29:5b:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C3:02:02:41:55:77:CF:D6:FD:B4:5E:FE:8B:DE:06:68:7C:71:AD
            X509v3 Authority Key Identifier:
                keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:af:5e:af:2e:f2:86:34:99:8f:b4:31:c9:d1:e4:80:d5:e4:
         2c:e1:3a:d8:d9:4b:ed:67:c7:6f:0f:6a:18:20:91:50:09:29:
         2e:a4:bb:17:83:74:6f:d4:fe:63:e3:e2:be:dc:2c:a7:9f:60:
         e8:88:e8:2a:dc:8a:f4:52:a5:30:a3:f4:ea:f1:15:6f:aa:dd:
         3b:09:92:23:5b:f7:64:10:59:5e:ce:66:91:26:88:00:e5:fd:
         16:a6:f6:d5:5f:ef:6c:98:27:d8:73:c5:7b:7f:ce:72:16:c4:
         56:e6:d6:19:34:97:c5:21:39:96:11:83:48:b8:83:3f:2f:5c:
         dd:0a:a5:ca:1b:9a:af:9b:a3:0f:b3:4a:97:3a:61:32:47:c7:
         98:08:d9:e5:97:3e:e5:da:07:c1:14:e8:b2:e0:f6:61:1b:6c:
         2c:58:e5:a8:37:53:40:40:e0:87:d9:b8:16:4a:fe:d0:25:ff:
         af:09:1c:8a:f0:5d:54:96:2f:c7:34:18:75:bc:b7:62:c6:c0:
         6f:0d:16:33:d5:fc:f8:e1:2d:96:ea:c7:ed:9c:0a:ef:c7:3b:
         29:93:3c:d1:46:6a:b0:b4:87:a8:76:ff:ab:c9:d9:1b:36:89:
         5d:18:bf:85:e6:9f:13:aa:7d:34:b0:a7:aa:8c:84:8b:8b:6d:
         46:c7:9a:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtmUr8p/BHlcJibxWLo8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTRiYmY1Mzc4N2FmNGU5MzVkMzBhNDhlODgyNWEyZGEx
NGEwOGIwHhcNMjYwNjEzMTYwMDE2WhcNMjYwNjE0MTYwMDE2WjAzMTEwLwYDVQQD
Eyg4ZWMzMDIwMjQxNTU3N2NmZDZmZGI0NWVmZThiZGUwNjY4N2M3MWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz/uK1I63V655/Bc6vmrLfJ4CppW
a5zA+ihqIc6RQ0Gvtx8be8B01MbLFE1rWYx+WHJ1qwzYQd/88dkcKQBd5SVT1D0p
pu9SmW2WufMFwrKIvm4BDEJGHKwUzjZrrWe8nUt7FhtbJIarT0lBJ/s5CTIuNF+b
QOcj/wz/qVb6lSFPCe0/XQcDu6ez5vy5IVYCR5MnQ2uxIr7RancWxKcDg1QRk4xP
GKWuBasJl4OvUuabs3Er7rzKxgcazY2P5mm5cAIyTf1CSTZI7mzk6TvVLg2H1L0l
AiSAGkG+jgYh0L4RXW0cdky29UYsM5UXnlMVmP0eWN7rSHJSDLoDKVu8JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7DAgJBVXfP1v20Xv6L3gZofHGtMB8GA1UdIwQY
MBaAFEcUu/U3h69Ok10wpI6IJaLaFKCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMt
ZTY5MGVkMjFmOTRmLzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMtZTY5MGVkMjFmOTRm
LzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzK9ery7y
hjSZj7QxydHkgNXkLOE62NlL7WfHbw9qGCCRUAkpLqS7F4N0b9T+Y+Pivtwsp59g
6IjoKtyK9FKlMKP06vEVb6rdOwmSI1v3ZBBZXs5mkSaIAOX9Fqb21V/vbJgn2HPF
e3/OchbEVubWGTSXxSE5lhGDSLiDPy9c3Qqlyhuar5ujD7NKlzphMkfHmAjZ5Zc+
5doHwRTosuD2YRtsLFjlqDdTQEDgh9m4Fkr+0CX/rwkcivBdVJYvxzQYdby3YsbA
bw0WM9X8+OEtlurH7ZwK78c7KZM80UZqsLSHqHb/q8nZGzaJXRi/heafE6p9NLCn
qoyEi4ttRseatg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:20:24 2026 by rpki-client