Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
File:                     0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json)
Hash identifier:          0/q9aWBQ4KujWBgy3U9Dh7CIIgldMStjMLHi05rEOWc=
Subject key identifier:   B4:CA:3A:13:06:8E:C4:D5:81:66:4A:DE:E9:8E:14:98:C8:7D:ED:CD
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Certificate issuer:       /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial:       019EBE10D43DB8E5B9A8CEC686CEF1920E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
Manifest number:          064A
Signing time:             Fri 12 Jun 2026 23:00:34 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:34 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:34 +0000
Files and hashes:         1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: 2LXhAOLFUHj9nQGY0A6f6xxHpN52xtirFDvXCz+n4AQ=)
                          2: z9oIwLOrykWZmEssb3HH9bKNIhM.roa (hash: O9iYnW9d697b/skAbGM77gK2fBX555W4IqsGAkiCCjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:d4:3d:b8:e5:b9:a8:ce:c6:86:ce:f1:92:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
        Validity
            Not Before: Jun 12 23:00:34 2026 GMT
            Not After : Jun 13 23:00:34 2026 GMT
        Subject: CN=b4ca3a13068ec4d581664adee98e1498c87dedcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:08:03:52:f3:c6:41:15:64:70:cb:71:d5:
                    81:56:43:c2:3f:ab:7c:5e:34:bb:95:8a:7a:44:03:
                    89:e0:6d:63:54:53:d0:c7:e0:b1:eb:93:9d:aa:ad:
                    16:a3:0a:f3:ed:eb:b7:92:38:c8:ae:be:6a:81:ee:
                    25:20:4e:66:a2:69:f0:30:a1:b8:74:16:4c:8d:1b:
                    df:ef:f9:09:10:5d:f6:86:f0:bf:ab:2d:8a:0b:f4:
                    cd:69:0f:0e:7d:9a:7c:0e:08:8c:de:17:af:bc:50:
                    c5:c8:8a:aa:df:75:29:2f:a6:fc:89:b3:b3:4e:1b:
                    d7:a4:54:d2:de:8c:ab:e0:ed:3a:4c:68:35:89:97:
                    07:56:43:37:cd:1d:86:ec:29:c6:f6:a2:55:fa:21:
                    40:05:a1:b1:49:f7:c0:7b:8c:a3:fc:c0:63:56:42:
                    61:a5:a0:22:93:a0:79:c0:90:fd:4e:84:ab:58:d0:
                    3a:71:77:46:b3:f2:56:06:77:7b:f2:7c:3f:81:39:
                    e0:20:2d:c2:39:a1:82:5f:5c:ff:05:b2:e9:61:b9:
                    55:cb:d0:06:da:a3:f4:6d:1b:1f:60:19:bc:3b:63:
                    ed:fe:c4:70:d7:79:a7:1f:7d:06:a9:44:20:2c:35:
                    a5:ef:14:2c:b5:b5:39:d8:92:6a:b2:e3:a8:81:fd:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:3A:13:06:8E:C4:D5:81:66:4A:DE:E9:8E:14:98:C8:7D:ED:CD
            X509v3 Authority Key Identifier:
                keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:81:9d:f4:80:ca:f1:6a:33:41:e7:91:9e:01:c4:f6:ba:8e:
         b6:dd:50:4e:82:bb:5e:c5:44:b0:d2:bd:6e:df:e4:27:03:09:
         6d:bd:07:04:f1:de:ad:23:77:8d:b6:2e:8b:4c:d6:86:1f:06:
         7b:f2:70:5f:e9:3c:85:76:2c:07:2a:f6:c9:4e:b8:0e:f6:26:
         fd:6a:ad:03:d8:a1:4a:37:10:d6:62:96:62:b8:46:1c:5d:01:
         a9:87:dc:87:d9:06:62:bb:c9:39:d3:78:10:ea:a0:8d:1d:60:
         39:08:5a:1e:13:41:6a:14:c7:77:0e:c4:21:cf:5f:20:aa:c5:
         2d:13:fe:7b:f4:a2:a8:9a:6e:a5:a4:7f:1b:ea:72:e8:02:61:
         2d:b3:d8:fc:24:06:07:bc:37:af:84:f6:c9:f5:92:2e:75:a1:
         ea:ff:e4:83:fe:7d:d2:23:6c:c5:d5:38:62:f2:2c:99:1f:a7:
         aa:37:6d:f5:f8:14:20:83:d7:d8:50:79:ba:11:15:9e:53:91:
         a7:f0:5a:46:e7:d5:84:83:8e:bc:8c:6c:3e:e2:2f:b4:30:59:
         b6:ce:d0:d3:e7:c0:70:62:83:57:eb:a8:e2:42:5b:55:2f:7e:
         f0:33:49:fc:91:bb:30:57:b9:ae:4c:eb:87:61:e0:87:f8:6f:
         a0:34:e1:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ENQ9uOW5qM7Ghs7xkg44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjYxZDFmMWQ5Y2NkYWI2YjZkOGUxNDUwYzJjOTM2ZDM5
N2U2NzAwHhcNMjYwNjEyMjMwMDM0WhcNMjYwNjEzMjMwMDM0WjAzMTEwLwYDVQQD
EyhiNGNhM2ExMzA2OGVjNGQ1ODE2NjRhZGVlOThlMTQ5OGM4N2RlZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNsIA1LzxkEVZHDLcdWBVkPCP6t8
XjS7lYp6RAOJ4G1jVFPQx+Cx65Odqq0Wowrz7eu3kjjIrr5qge4lIE5momnwMKG4
dBZMjRvf7/kJEF32hvC/qy2KC/TNaQ8OfZp8DgiM3hevvFDFyIqq33UpL6b8ibOz
ThvXpFTS3oyr4O06TGg1iZcHVkM3zR2G7CnG9qJV+iFABaGxSffAe4yj/MBjVkJh
paAik6B5wJD9ToSrWNA6cXdGs/JWBnd78nw/gTngIC3COaGCX1z/BbLpYblVy9AG
2qP0bRsfYBm8O2Pt/sRw13mnH30GqUQgLDWl7xQstbU52JJqsuOogf1ZYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTKOhMGjsTVgWZK3umOFJjIfe3NMB8GA1UdIwQY
MBaAFNC2HR8dnM2ra22OFFDCyTbTl+ZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zMTc2MzUtYTkwYS00NzA0LTk2NzIt
MTVmNjJjODkwYWY4LzEvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zMTc2MzUtYTkwYS00NzA0LTk2NzItMTVmNjJjODkwYWY4
LzEvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoGd9IDK
8WozQeeRngHE9rqOtt1QToK7XsVEsNK9bt/kJwMJbb0HBPHerSN3jbYui0zWhh8G
e/JwX+k8hXYsByr2yU64DvYm/WqtA9ihSjcQ1mKWYrhGHF0BqYfch9kGYrvJOdN4
EOqgjR1gOQhaHhNBahTHdw7EIc9fIKrFLRP+e/SiqJpupaR/G+py6AJhLbPY/CQG
B7w3r4T2yfWSLnWh6v/kg/590iNsxdU4YvIsmR+nqjdt9fgUIIPX2FB5uhEVnlOR
p/BaRufVhIOOvIxsPuIvtDBZts7Q0+fAcGKDV+uo4kJbVS9+8DNJ/JG7MFe5rkzr
h2Hgh/hvoDThqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:59 2026 by rpki-client