Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File:                     1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier:          XDLVvcjpP6FbDLL24JKXpxHwM1YQikJkZZEmHAWxgAE=
Subject key identifier:   A0:0E:4B:A3:2A:55:F8:6F:26:56:92:93:F0:2B:18:7B:4F:5F:F9:1B
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer:       /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial:       019EBF2384EF74079F07E7E4EA0D09F7C78B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number:          0FEA
Signing time:             Sat 13 Jun 2026 04:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:36 +0000
Files and hashes:         1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: WmI1BzYkLtwHAvlrNLKxwfeH3PToJGQa0Q0nekrvmiA=)
                          2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
                          3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:84:ef:74:07:9f:07:e7:e4:ea:0d:09:f7:c7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
        Validity
            Not Before: Jun 13 04:00:36 2026 GMT
            Not After : Jun 14 04:00:36 2026 GMT
        Subject: CN=a00e4ba32a55f86f26569293f02b187b4f5ff91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:25:97:e0:3b:c4:1e:48:c8:b4:c1:0d:45:
                    59:0d:51:bc:51:56:68:b7:e7:5b:d3:8b:2f:09:ce:
                    85:e0:ac:e5:17:6c:d2:7b:a0:04:23:21:35:a0:b6:
                    d0:c8:16:bb:5e:eb:6a:cb:6a:82:1b:a2:8e:6a:5e:
                    cf:0d:f0:46:07:fe:32:63:63:24:01:9a:88:00:11:
                    06:d6:24:1e:6f:4e:00:0c:a2:39:bd:fa:64:fa:1b:
                    6c:39:7a:d7:31:d3:19:03:01:5e:a1:d9:ed:7d:4d:
                    83:cd:1e:31:27:89:36:08:83:53:35:e7:2f:1b:88:
                    d4:7a:17:91:50:49:5c:bf:71:13:da:7d:5e:44:68:
                    be:7a:fa:71:17:d8:ae:b6:3f:d5:4f:d2:74:cf:bb:
                    b3:2b:ae:f7:02:72:d9:e1:e5:86:c2:08:c8:9b:29:
                    a1:1b:71:ca:83:ef:07:2d:ca:2d:35:6e:af:b5:eb:
                    bc:a9:5d:ec:d3:9c:7b:45:b0:40:f6:64:7f:d5:e8:
                    06:75:b3:9d:bd:5b:5b:c7:6c:0d:49:f4:db:4e:f6:
                    3e:08:7f:3b:07:2a:e5:da:98:f3:1c:ef:5c:d6:af:
                    9e:f7:f0:1e:e8:d0:b7:aa:34:8b:0c:31:69:70:fb:
                    0c:ec:bf:70:e9:26:1b:0f:64:e9:b7:6c:70:cf:15:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:4B:A3:2A:55:F8:6F:26:56:92:93:F0:2B:18:7B:4F:5F:F9:1B
            X509v3 Authority Key Identifier:
                keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:41:57:be:d9:a8:9a:e6:56:10:f9:db:18:8d:91:1e:11:0e:
         67:a6:b1:03:bd:0d:c9:69:af:cf:a2:f9:04:11:b9:84:78:3d:
         62:75:7c:83:b2:fb:94:ca:5e:ee:ed:0c:c6:9e:81:28:f7:c2:
         19:7e:f9:d4:90:f9:90:83:55:ad:64:5d:fc:bb:2b:74:d0:ec:
         17:1a:e5:6a:6c:c8:c8:ce:da:71:9d:72:a7:c6:5c:17:e9:0a:
         f9:29:f2:df:72:15:7a:6d:0c:d3:60:00:58:d9:6b:0d:ae:cd:
         7b:5c:c3:6f:93:5a:5d:ef:69:dd:0a:a1:02:58:17:f2:86:ab:
         66:f1:66:5b:34:04:b6:78:7c:45:f3:19:bb:76:71:51:99:f8:
         b7:b2:46:d2:b2:94:03:c6:ec:a7:28:39:74:0b:8e:96:f7:1f:
         13:8b:c5:20:ae:fb:7a:46:1e:9c:fb:43:ae:49:b8:06:df:fb:
         1d:5e:78:fa:1f:df:00:c1:0d:c6:c8:a1:06:24:52:21:c9:72:
         40:72:2a:78:00:56:01:8f:0e:4c:ae:91:3e:8f:c7:1c:f7:b7:
         40:b2:98:5a:f8:a3:11:ae:28:c5:04:1f:1c:fc:df:dc:0d:47:
         6b:b8:dd:bb:ac:9d:3b:48:26:d4:8e:f5:21:d3:f4:29:2a:9a:
         c9:0e:5e:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I4TvdAefB+fk6g0J98eLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDkwMmEwN2ZjN2Q0OGUwZGIyOWJmZmJlM2FiMTA1NDNm
YzE0NjUwHhcNMjYwNjEzMDQwMDM2WhcNMjYwNjE0MDQwMDM2WjAzMTEwLwYDVQQD
EyhhMDBlNGJhMzJhNTVmODZmMjY1NjkyOTNmMDJiMTg3YjRmNWZmOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx0ll+A7xB5IyLTBDUVZDVG8UVZo
t+db04svCc6F4KzlF2zSe6AEIyE1oLbQyBa7Xutqy2qCG6KOal7PDfBGB/4yY2Mk
AZqIABEG1iQeb04ADKI5vfpk+htsOXrXMdMZAwFeodntfU2DzR4xJ4k2CINTNecv
G4jUeheRUElcv3ET2n1eRGi+evpxF9iutj/VT9J0z7uzK673AnLZ4eWGwgjImymh
G3HKg+8HLcotNW6vteu8qV3s05x7RbBA9mR/1egGdbOdvVtbx2wNSfTbTvY+CH87
Byrl2pjzHO9c1q+e9/Ae6NC3qjSLDDFpcPsM7L9w6SYbD2Tpt2xwzxWPSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAOS6MqVfhvJlaSk/ArGHtPX/kbMB8GA1UdIwQY
MBaAFNXZAqB/x9SODbKb/746sQVD/BRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEt
YTZjZWMyNWI4MDA2LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEtYTZjZWMyNWI4MDA2
LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEFXvtmo
muZWEPnbGI2RHhEOZ6axA70NyWmvz6L5BBG5hHg9YnV8g7L7lMpe7u0Mxp6BKPfC
GX751JD5kINVrWRd/LsrdNDsFxrlamzIyM7acZ1yp8ZcF+kK+Sny33IVem0M02AA
WNlrDa7Ne1zDb5NaXe9p3QqhAlgX8oarZvFmWzQEtnh8RfMZu3ZxUZn4t7JG0rKU
A8bspyg5dAuOlvcfE4vFIK77ekYenPtDrkm4Bt/7HV54+h/fAMENxsihBiRSIcly
QHIqeABWAY8OTK6RPo/HHPe3QLKYWvijEa4oxQQfHPzf3A1Ha7jdu6ydO0gm1I71
IdP0KSqayQ5ewA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:32 2026 by rpki-client