Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File:                     XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier:          gZJS1QZvpykqLAUEc2eRBIEyk4WgkHkvI50m7HOLYgo=
Subject key identifier:   CE:A7:BC:2F:A3:32:1C:54:8C:BF:AD:FE:15:8D:97:28:0C:AC:A0:C8
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer:       /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial:       019EC2C9158CF8493FB64E163E4F7819A5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number:          0D81
Signing time:             Sat 13 Jun 2026 21:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:18 +0000
Files and hashes:         1: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: aPNVv6ioNjfCdGzAK3bTp44tqH0ZlcGpMtwEsdCj7EM=)
                          2: eO46gXXoSZwATk8MoN76YPpN1jQ.roa (hash: F/WomuEJ+uQlAxaPHkR6qqNqSNUL0B0LVxqFRNytneU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:15:8c:f8:49:3f:b6:4e:16:3e:4f:78:19:a5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
        Validity
            Not Before: Jun 13 21:00:18 2026 GMT
            Not After : Jun 14 21:00:18 2026 GMT
        Subject: CN=cea7bc2fa3321c548cbfadfe158d97280caca0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:f6:1a:76:1c:db:52:1d:cd:be:f9:7a:d3:
                    a0:37:0c:9f:2f:ea:08:f7:15:b0:80:de:4c:12:8d:
                    d0:f0:58:e9:f1:e3:fa:1a:b3:f4:c1:55:8a:54:67:
                    7b:fd:3d:a1:52:19:01:a9:f9:e7:f1:5d:a4:88:a8:
                    81:12:0e:b7:fb:e5:bc:05:67:bb:6f:e8:c6:e5:58:
                    f6:47:25:9c:98:c9:44:eb:e4:38:5e:94:cc:30:43:
                    35:b9:35:2d:2f:f7:06:df:f2:3c:b2:86:fa:5d:fc:
                    cc:7e:55:ba:5c:a4:29:4d:29:58:82:58:27:cf:ba:
                    53:d1:b0:d2:b3:5f:3c:83:a1:3c:ae:62:69:ac:99:
                    0c:2e:e4:3b:a8:19:95:09:e8:90:1b:67:50:a9:36:
                    27:3e:17:7b:f4:6b:47:2f:6c:ae:a2:81:af:22:68:
                    c5:d3:25:e5:83:0b:4f:ae:a3:2d:16:b9:fb:95:20:
                    1d:14:b8:fc:d3:5d:c4:93:7a:1a:75:06:e0:ea:b0:
                    69:6c:79:8f:b0:38:52:4b:10:ab:ce:fa:a5:dc:8d:
                    26:4e:3d:ca:ab:14:97:1e:6b:af:44:96:83:93:97:
                    ba:18:dd:35:fd:ff:97:1e:a6:5b:c5:83:a7:34:90:
                    e8:d3:28:08:7c:68:17:b9:70:b4:3a:bf:75:12:7f:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A7:BC:2F:A3:32:1C:54:8C:BF:AD:FE:15:8D:97:28:0C:AC:A0:C8
            X509v3 Authority Key Identifier:
                keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:b0:13:7f:e8:99:2b:f6:a5:38:7c:52:5f:e9:f5:0f:e0:
         9b:d1:58:28:a2:da:ff:7c:88:0e:50:32:66:b5:70:23:2d:a8:
         53:e7:c1:6d:1f:e8:05:56:49:16:10:32:b8:c2:1a:e2:e0:2f:
         e7:8c:b2:97:4b:e7:62:62:ac:d7:84:7e:9e:52:cc:1c:55:bc:
         d3:2f:34:87:d3:79:3b:3b:a5:5a:43:55:92:64:4f:6c:46:44:
         4b:9a:62:71:27:b4:d1:51:a1:4d:b3:b6:cd:f1:05:ec:18:90:
         9f:fa:a4:32:57:16:eb:48:21:26:62:50:dc:f3:d6:87:39:b5:
         e2:18:f1:31:11:04:81:ef:05:ec:c4:9f:d7:0a:e7:cf:50:9f:
         8b:9c:aa:4b:e9:cf:a4:ef:05:b1:42:ca:0b:7f:f0:e9:0b:dc:
         9b:04:20:18:7f:b6:dd:fe:c0:2f:6d:56:47:ce:6a:c8:2d:f7:
         c6:ca:6e:15:25:aa:43:52:8b:4f:87:3d:82:f0:e9:3f:3b:b1:
         e9:ff:0d:21:bf:16:b6:0d:bc:78:e1:1e:ea:a8:a4:ef:06:b0:
         69:d4:59:32:20:a2:32:f8:23:83:7d:4e:62:58:5d:c2:8d:d3:
         1c:71:09:67:e1:8d:e7:6f:56:c6:58:51:b4:05:68:0c:f5:46:
         76:35:43:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyRWM+Ek/tk4WPk94GaXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj
NGFlMTIwHhcNMjYwNjEzMjEwMDE4WhcNMjYwNjE0MjEwMDE4WjAzMTEwLwYDVQQD
EyhjZWE3YmMyZmEzMzIxYzU0OGNiZmFkZmUxNThkOTcyODBjYWNhMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3X2GnYc21Idzb75etOgNwyfL+oI
9xWwgN5MEo3Q8Fjp8eP6GrP0wVWKVGd7/T2hUhkBqfnn8V2kiKiBEg63++W8BWe7
b+jG5Vj2RyWcmMlE6+Q4XpTMMEM1uTUtL/cG3/I8sob6XfzMflW6XKQpTSlYglgn
z7pT0bDSs188g6E8rmJprJkMLuQ7qBmVCeiQG2dQqTYnPhd79GtHL2yuooGvImjF
0yXlgwtPrqMtFrn7lSAdFLj8013Ek3oadQbg6rBpbHmPsDhSSxCrzvql3I0mTj3K
qxSXHmuvRJaDk5e6GN01/f+XHqZbxYOnNJDo0ygIfGgXuXC0Or91En9K3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6nvC+jMhxUjL+t/hWNlygMrKDIMB8GA1UdIwQY
MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt
YmJlYjQ1NTBkOWU2LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2
LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBqwE3/o
mSv2pTh8Ul/p9Q/gm9FYKKLa/3yIDlAyZrVwIy2oU+fBbR/oBVZJFhAyuMIa4uAv
54yyl0vnYmKs14R+nlLMHFW80y80h9N5OzulWkNVkmRPbEZES5picSe00VGhTbO2
zfEF7BiQn/qkMlcW60ghJmJQ3PPWhzm14hjxMREEge8F7MSf1wrnz1Cfi5yqS+nP
pO8FsULKC3/w6QvcmwQgGH+23f7AL21WR85qyC33xspuFSWqQ1KLT4c9gvDpPzux
6f8NIb8Wtg28eOEe6qik7wawadRZMiCiMvgjg31OYlhdwo3THHEJZ+GN529WxlhR
tAVoDPVGdjVD2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:25 2026 by rpki-client