Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File:                     0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier:          5e1raB7gTFq3tIBoIIY73XBY2DFlOJYV9cuKtMI2sDI=
Subject key identifier:   3C:D1:D7:5D:58:A9:E6:3A:64:7F:EF:68:CE:ED:4E:DC:8E:7A:07:06
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer:       /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial:       019EBF24059636F3DDC008642811459861E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number:          1895
Signing time:             Sat 13 Jun 2026 04:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:09 +0000
Files and hashes:         1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: LH8lgB9yqOEiJBjBI5WsKRZcM5z2fHG/fDd7vfCzIq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:24:05:96:36:f3:dd:c0:08:64:28:11:45:98:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
        Validity
            Not Before: Jun 13 04:01:09 2026 GMT
            Not After : Jun 14 04:01:09 2026 GMT
        Subject: CN=3cd1d75d58a9e63a647fef68ceed4edc8e7a0706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:ee:87:35:c4:24:6c:98:b2:bc:79:2e:a7:
                    73:b7:9b:99:31:11:f5:23:8d:9c:f9:16:b4:1b:63:
                    63:84:2f:47:bb:60:18:c6:ba:0e:e4:5f:2c:9e:a5:
                    96:c2:c2:95:a2:42:29:e0:bb:f0:88:fc:7c:ef:4c:
                    00:dd:27:5e:a7:1c:bf:32:69:30:99:4c:13:53:e4:
                    f9:0e:aa:d6:f8:23:97:5a:3b:a1:52:27:f0:e0:5a:
                    56:ce:8c:72:8f:42:d3:1d:c5:0b:b6:e0:6d:ec:25:
                    4f:c9:26:51:68:b2:8d:84:fb:21:6b:86:68:94:82:
                    12:65:9a:cc:09:ad:bf:79:f1:9f:cb:8f:92:eb:76:
                    19:24:96:b2:cb:3c:32:4c:fe:fa:0f:ae:59:37:8e:
                    83:d3:ec:8a:90:a0:b1:45:e3:fd:f3:67:c4:35:5e:
                    b8:7c:71:c7:70:24:fb:f9:ea:94:21:32:68:6d:a1:
                    8b:38:6f:3e:47:0d:dd:49:61:9e:fd:e5:57:b5:08:
                    08:68:3f:7f:17:25:0d:25:90:aa:18:bc:56:78:8f:
                    3f:83:d1:ad:96:44:fa:43:c9:2c:f3:b3:17:b9:ba:
                    ea:e0:f3:f6:e8:75:db:3c:80:12:a6:c6:74:c8:74:
                    4b:12:e9:90:ed:b5:52:cf:c7:6a:be:f3:18:f3:bd:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D1:D7:5D:58:A9:E6:3A:64:7F:EF:68:CE:ED:4E:DC:8E:7A:07:06
            X509v3 Authority Key Identifier:
                keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:9e:3c:09:ab:31:83:45:c6:0c:c0:ee:25:42:46:54:3e:
         a9:23:7b:2e:22:c9:99:35:50:ed:ea:9f:fc:0b:63:e1:d2:48:
         66:eb:ee:40:03:71:ba:a0:3d:b0:03:14:33:cf:d9:d7:a3:ff:
         77:5b:53:13:7c:a8:ce:2a:f8:f7:cc:bf:b6:10:d6:2d:1e:f6:
         23:42:0c:be:3a:cc:21:65:28:61:0c:ef:bf:20:8a:f9:c9:44:
         24:b0:f6:d4:82:36:a7:5b:a2:b6:56:0a:b0:38:9d:ff:fe:2c:
         8b:8e:6a:36:87:82:c5:91:d4:f8:b9:d6:0f:be:04:89:4b:c1:
         70:82:91:70:44:92:5e:62:49:79:f3:36:71:18:ee:c2:4b:be:
         64:47:ef:88:eb:3a:6e:1e:e3:99:7b:8c:ea:31:bb:68:90:a9:
         94:8a:09:09:23:a7:e4:74:bf:cf:46:31:d6:ce:8f:ae:0e:3a:
         15:f1:f8:11:b4:66:93:e8:81:b4:d4:c2:1d:48:b8:9a:74:53:
         f8:e3:2d:8f:54:ca:d0:aa:14:40:07:1a:0c:ba:ac:24:9a:ce:
         52:5b:59:24:fe:e4:8e:81:09:e9:50:24:b8:9f:e2:5b:a0:0a:
         25:37:20:8b:07:31:6f:59:d5:e4:ad:c2:74:a8:43:1f:09:a7:
         21:20:8f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/JAWWNvPdwAhkKBFFmGHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGJkNGQ1NjgyY2U2MDhlMjdjYmUyMjFhMjY3N2VjYjUw
NzQ5N2QwHhcNMjYwNjEzMDQwMTA5WhcNMjYwNjE0MDQwMTA5WjAzMTEwLwYDVQQD
EygzY2QxZDc1ZDU4YTllNjNhNjQ3ZmVmNjhjZWVkNGVkYzhlN2EwNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBbuhzXEJGyYsrx5Lqdzt5uZMRH1
I42c+Ra0G2NjhC9Hu2AYxroO5F8snqWWwsKVokIp4LvwiPx870wA3Sdepxy/Mmkw
mUwTU+T5DqrW+COXWjuhUifw4FpWzoxyj0LTHcULtuBt7CVPySZRaLKNhPsha4Zo
lIISZZrMCa2/efGfy4+S63YZJJayyzwyTP76D65ZN46D0+yKkKCxReP982fENV64
fHHHcCT7+eqUITJobaGLOG8+Rw3dSWGe/eVXtQgIaD9/FyUNJZCqGLxWeI8/g9Gt
lkT6Q8ks87MXubrq4PP26HXbPIASpsZ0yHRLEumQ7bVSz8dqvvMY873cUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzR111YqeY6ZH/vaM7tTtyOegcGMB8GA1UdIwQY
MBaAFNAL1NVoLOYI4ny+Ihomd+y1B0l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8yOTk1MjItOTMyYy00ODdhLWFmM2Qt
ZWI5MzAwNjcyYWU0LzEvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8yOTk1MjItOTMyYy00ODdhLWFmM2QtZWI5MzAwNjcyYWU0
LzEvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZ+ePAmr
MYNFxgzA7iVCRlQ+qSN7LiLJmTVQ7eqf/Atj4dJIZuvuQANxuqA9sAMUM8/Z16P/
d1tTE3yozir498y/thDWLR72I0IMvjrMIWUoYQzvvyCK+clEJLD21II2p1uitlYK
sDid//4si45qNoeCxZHU+LnWD74EiUvBcIKRcESSXmJJefM2cRjuwku+ZEfviOs6
bh7jmXuM6jG7aJCplIoJCSOn5HS/z0Yx1s6Prg46FfH4EbRmk+iBtNTCHUi4mnRT
+OMtj1TK0KoUQAcaDLqsJJrOUltZJP7kjoEJ6VAkuJ/iW6AKJTcgiwcxb1nV5K3C
dKhDHwmnISCPiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:12 2026 by rpki-client