Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File:                     7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier:          BeBOAmQzGcoVJitBdDI9xrYybhHo1kxArz5DYaS3hIQ=
Subject key identifier:   98:C7:C0:B2:45:E3:1E:57:4E:57:12:F5:74:3B:25:A8:FF:DA:F5:03
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer:       /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial:       019EBFFF2FFCD41AC6AB8BE2873B4658BB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number:          1042
Signing time:             Sat 13 Jun 2026 08:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:32 +0000
Files and hashes:         1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: UmmBx5RqBMNMFH8/BO8kvjrHZsdRJxbwUlL+6kcV6ug=)
                          2: nl2woE4tEUQD3CSF7qKSvews-N8.roa (hash: L5p+cCQTpEMxnRlqVhomZChKjWD7GqqQzUPRzvLGeYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:2f:fc:d4:1a:c6:ab:8b:e2:87:3b:46:58:bb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
        Validity
            Not Before: Jun 13 08:00:32 2026 GMT
            Not After : Jun 14 08:00:32 2026 GMT
        Subject: CN=98c7c0b245e31e574e5712f5743b25a8ffdaf503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:85:cc:87:a2:a3:ff:83:e0:5b:c4:bd:00:
                    18:5f:c6:78:81:7c:73:b6:42:6a:e7:67:cd:71:87:
                    89:9b:ee:57:2c:90:fe:c3:fc:0c:92:b0:9b:be:18:
                    1f:69:9f:ca:70:5b:04:6c:92:e6:08:ce:35:68:36:
                    07:3a:72:e6:c3:4b:b3:37:8b:86:9f:a1:81:5a:7d:
                    67:81:85:13:7a:1f:71:61:5b:ae:99:2f:f4:f4:6f:
                    6e:f1:33:fa:93:a9:6b:d5:0d:86:3e:aa:39:2e:be:
                    63:69:47:af:5a:db:55:eb:22:a6:0e:f3:91:58:47:
                    01:49:e8:5e:4f:11:6b:b9:58:30:c3:9f:a2:a9:fb:
                    ca:8b:ca:73:75:4d:21:1f:cb:a1:57:9c:0b:a1:b9:
                    49:50:c1:72:f2:eb:7c:3d:81:09:59:b1:44:95:45:
                    5d:98:ee:e8:26:a9:2f:ea:99:e7:c1:03:a2:73:eb:
                    64:40:10:6b:18:a1:f7:b6:f1:7e:97:87:57:c9:51:
                    23:81:ec:d5:55:77:c2:04:db:3c:a5:b9:2b:40:8f:
                    f7:13:62:9c:bc:09:42:e4:ae:da:1e:f5:19:51:83:
                    bf:69:fb:54:64:a1:4f:06:c2:5d:45:ef:6c:1a:fc:
                    a3:e4:0c:14:a4:8a:5c:08:6d:3f:03:87:24:b5:6a:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C7:C0:B2:45:E3:1E:57:4E:57:12:F5:74:3B:25:A8:FF:DA:F5:03
            X509v3 Authority Key Identifier:
                keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:11:23:0f:4f:9f:a7:09:0e:5a:b3:33:41:2b:cd:ea:a1:15:
         14:d1:97:77:91:48:11:50:95:c3:2b:ee:32:0a:c8:71:b8:c9:
         9b:f9:b4:94:a6:11:f7:94:51:86:dc:d7:eb:57:73:d4:e1:76:
         ce:a6:d9:64:f6:91:21:f7:8b:9f:81:52:5d:60:1c:d7:38:65:
         8c:af:d6:1d:be:61:0e:f7:d9:e0:27:e2:ef:e3:8b:f7:12:f1:
         3b:54:e0:99:73:24:a2:6e:1f:19:78:1f:7e:93:7d:76:21:d8:
         a9:c0:a2:f6:56:ce:1b:5e:1b:79:a6:a6:a1:43:ba:d2:34:f9:
         f6:11:75:a9:cf:ac:8e:ca:77:36:c2:71:4e:cd:33:4f:2c:c5:
         97:65:00:e6:94:f7:72:86:78:b0:c4:9f:f1:93:7f:e2:8e:68:
         07:00:15:ee:7f:95:20:ca:8f:4e:45:21:23:b9:8c:d3:e0:ce:
         95:85:d5:c0:d7:9a:04:66:3a:23:ab:28:1a:09:9e:8b:06:92:
         2b:66:e0:1f:c3:e8:6e:3a:ac:b8:78:a8:c4:4b:14:d5:14:1c:
         1e:e0:ff:71:cb:39:ca:52:e5:70:47:32:54:41:d9:9d:98:aa:
         6c:b8:ef:1a:fb:24:bd:26:6b:23:0b:bd:db:5b:b6:a6:26:f0:
         e7:37:d2:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//y/81BrGq4vihztGWLttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmY1YjUxOTk5NjM3YzgwYmY5M2M4YTkwM2QxNmMzYWVj
MjUzNDEwHhcNMjYwNjEzMDgwMDMyWhcNMjYwNjE0MDgwMDMyWjAzMTEwLwYDVQQD
Eyg5OGM3YzBiMjQ1ZTMxZTU3NGU1NzEyZjU3NDNiMjVhOGZmZGFmNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUaFzIeio/+D4FvEvQAYX8Z4gXxz
tkJq52fNcYeJm+5XLJD+w/wMkrCbvhgfaZ/KcFsEbJLmCM41aDYHOnLmw0uzN4uG
n6GBWn1ngYUTeh9xYVuumS/09G9u8TP6k6lr1Q2GPqo5Lr5jaUevWttV6yKmDvOR
WEcBSeheTxFruVgww5+iqfvKi8pzdU0hH8uhV5wLoblJUMFy8ut8PYEJWbFElUVd
mO7oJqkv6pnnwQOic+tkQBBrGKH3tvF+l4dXyVEjgezVVXfCBNs8pbkrQI/3E2Kc
vAlC5K7aHvUZUYO/aftUZKFPBsJdRe9sGvyj5AwUpIpcCG0/A4cktWprDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjHwLJF4x5XTlcS9XQ7Jaj/2vUDMB8GA1UdIwQY
MBaAFO6/W1GZljfIC/k8ipA9FsOuwlNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAt
NTQyNGRjNjNlMmFjLzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAtNTQyNGRjNjNlMmFj
LzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQREjD0+f
pwkOWrMzQSvN6qEVFNGXd5FIEVCVwyvuMgrIcbjJm/m0lKYR95RRhtzX61dz1OF2
zqbZZPaRIfeLn4FSXWAc1zhljK/WHb5hDvfZ4Cfi7+OL9xLxO1TgmXMkom4fGXgf
fpN9diHYqcCi9lbOG14beaamoUO60jT59hF1qc+sjsp3NsJxTs0zTyzFl2UA5pT3
coZ4sMSf8ZN/4o5oBwAV7n+VIMqPTkUhI7mM0+DOlYXVwNeaBGY6I6soGgmeiwaS
K2bgH8PobjqsuHioxEsU1RQcHuD/ccs5ylLlcEcyVEHZnZiqbLjvGvskvSZrIwu9
21u2pibw5zfSuw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:55 2026 by rpki-client