Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
File:                     abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json)
Hash identifier:          RKAPxoWg1vecVWD/PldX/UAcMYzeogOjawBVjhMNRDQ=
Subject key identifier:   A8:27:EB:DE:82:93:0D:3A:67:0C:A0:E3:70:E0:D4:70:38:E1:C5:A4
Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
Certificate issuer:       /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Certificate serial:       019EC06D7F6BF0F3AC0CCB4E50D686487B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
Manifest number:          0285
Signing time:             Sat 13 Jun 2026 10:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:01 +0000
Files and hashes:         1: ZckkoNHt2DvjlU2WvYDlIclH-DI.roa (hash: xy5JGKAo4mAfLH66AX9gOwR/ragqzfbDNJ5R5SMZh1s=)
                          2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: p+N5Q86WTDr5UXZagfWEj7qQxFWrbsflo49tAtYLtCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:7f:6b:f0:f3:ac:0c:cb:4e:50:d6:86:48:7b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
        Validity
            Not Before: Jun 13 10:01:01 2026 GMT
            Not After : Jun 14 10:01:01 2026 GMT
        Subject: CN=a827ebde82930d3a670ca0e370e0d47038e1c5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:5c:1e:d5:12:a5:5a:17:22:6f:aa:1f:a9:
                    10:97:c6:66:16:32:b3:4c:80:33:c6:2e:1a:01:37:
                    1c:98:72:bd:9a:c6:c6:50:26:fe:a8:b9:11:05:44:
                    fa:7a:44:37:d0:ee:9f:63:94:8b:af:81:cc:48:95:
                    b6:de:10:40:e2:27:d4:2d:a3:d0:9f:2b:1d:29:42:
                    43:1a:58:79:cc:8e:39:28:a9:36:f5:5a:f2:f7:dc:
                    0e:47:86:c3:a7:ec:ac:39:d7:9e:df:d8:b9:29:d2:
                    d6:f9:5f:0c:e1:86:43:52:81:4f:4b:1b:6a:e4:34:
                    bc:5e:f7:1f:17:0c:cf:31:2f:7a:b8:1f:50:b6:7d:
                    d5:a9:b0:d4:8a:72:38:47:e7:18:7d:bd:84:e0:b3:
                    fc:81:39:35:d2:24:3c:ec:4e:1c:b3:96:83:28:97:
                    ff:36:07:9e:02:ed:42:e7:73:10:27:fb:c6:82:db:
                    63:ac:fd:9d:57:49:6f:73:f1:b5:ed:b1:24:2e:36:
                    1f:c1:ab:06:cb:f8:e8:82:ca:96:50:17:ac:a8:a2:
                    7f:a4:68:92:bc:81:b6:34:63:22:f1:a8:fb:56:3a:
                    03:b0:d5:e8:08:f9:7b:57:bb:74:7e:3a:6b:c0:7b:
                    50:02:4e:85:29:a9:85:ec:21:a5:e4:90:ee:e0:bc:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:EB:DE:82:93:0D:3A:67:0C:A0:E3:70:E0:D4:70:38:E1:C5:A4
            X509v3 Authority Key Identifier:
                keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:61:ae:47:cb:b7:94:0e:df:44:50:0b:7e:47:dc:79:b0:34:
         18:cd:3a:e6:fb:c4:07:98:cc:90:3f:d9:04:1a:72:d2:3f:70:
         1a:07:63:fb:d6:88:26:af:27:d9:6c:e0:f5:d9:20:2a:75:79:
         f9:5e:b2:9d:f9:09:a7:a4:f7:c8:f1:65:1f:bd:84:82:6f:7b:
         36:95:6d:54:05:65:33:9f:56:6b:cf:bd:52:38:f1:af:12:c1:
         f6:8b:a0:41:53:8b:10:f4:61:a2:95:b3:24:e2:8c:6b:b5:32:
         de:f1:aa:0c:e8:17:a7:5f:ce:88:87:b6:bd:38:86:69:59:db:
         24:61:93:e3:18:09:aa:4f:7d:72:c9:b6:b8:49:64:26:3e:cf:
         a8:17:6a:3a:19:3b:0c:9c:a3:66:89:f4:33:60:37:73:7f:19:
         ba:fd:12:c6:9c:df:b1:36:a5:da:d6:1c:15:61:7a:dc:f5:1e:
         a2:b4:ef:6d:a6:35:36:93:eb:11:82:7a:e7:d2:68:50:9d:34:
         4a:40:f9:57:b5:c1:98:4d:ce:9b:0e:b1:ec:18:a8:3e:c0:a3:
         d4:ac:f3:4d:ab:fd:f9:cb:97:0a:92:54:f8:be:f4:b9:eb:df:
         c6:ef:87:bf:ac:3e:88:3d:8c:c4:96:f6:b8:84:4a:e9:71:ff:
         9f:b0:80:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbX9r8POsDMtOUNaGSHucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjdmM2JmOGUwYTdiNTkwYTBmZmFhMWM5YzBhYzU4MGEw
YjExOWUwHhcNMjYwNjEzMTAwMTAxWhcNMjYwNjE0MTAwMTAxWjAzMTEwLwYDVQQD
EyhhODI3ZWJkZTgyOTMwZDNhNjcwY2EwZTM3MGUwZDQ3MDM4ZTFjNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIBcHtUSpVoXIm+qH6kQl8ZmFjKz
TIAzxi4aATccmHK9msbGUCb+qLkRBUT6ekQ30O6fY5SLr4HMSJW23hBA4ifULaPQ
nysdKUJDGlh5zI45KKk29Vry99wOR4bDp+ysOdee39i5KdLW+V8M4YZDUoFPSxtq
5DS8XvcfFwzPMS96uB9Qtn3VqbDUinI4R+cYfb2E4LP8gTk10iQ87E4cs5aDKJf/
NgeeAu1C53MQJ/vGgttjrP2dV0lvc/G17bEkLjYfwasGy/jogsqWUBesqKJ/pGiS
vIG2NGMi8aj7VjoDsNXoCPl7V7t0fjprwHtQAk6FKamF7CGl5JDu4Lz9rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgn696Ckw06Zwyg43Dg1HA44cWkMB8GA1UdIwQY
MBaAFGm387+OCntZCg/6ocnArFgKCxGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xNmQ4NWYtODViNS00MmUzLWFkOWYt
ZWVjMDVmNDlhYzg2LzEvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xNmQ4NWYtODViNS00MmUzLWFkOWYtZWVjMDVmNDlhYzg2
LzEvYWJmenY0NEtlMWtLRF9xaHljQ3NXQW9MRVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA02GuR8u3
lA7fRFALfkfcebA0GM065vvEB5jMkD/ZBBpy0j9wGgdj+9aIJq8n2Wzg9dkgKnV5
+V6ynfkJp6T3yPFlH72Egm97NpVtVAVlM59Wa8+9UjjxrxLB9ougQVOLEPRhopWz
JOKMa7Uy3vGqDOgXp1/OiIe2vTiGaVnbJGGT4xgJqk99csm2uElkJj7PqBdqOhk7
DJyjZon0M2A3c38Zuv0SxpzfsTal2tYcFWF63PUeorTvbaY1NpPrEYJ659JoUJ00
SkD5V7XBmE3Omw6x7BioPsCj1KzzTav9+cuXCpJU+L70uevfxu+Hv6w+iD2MxJb2
uIRK6XH/n7CA2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:54 2026 by rpki-client