Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File:                     f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier:          zzXetgTqGVMXu7ZS9BdYLApljKVJCpo9k1603PEywQA=
Subject key identifier:   2E:35:0A:C4:E0:2C:2A:58:2C:1E:1B:53:9B:E3:4E:8F:CC:E2:48:01
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer:       /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial:       019EC44A287FBE3EC5002993590756B4F9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number:          06CC
Signing time:             Sun 14 Jun 2026 04:00:54 +0000
Manifest this update:     Sun 14 Jun 2026 04:00:54 +0000
Manifest next update:     Mon 15 Jun 2026 04:00:54 +0000
Files and hashes:         1: JXA8-jGbC4K_XrJLF-jKm9_Urkk.roa (hash: tDVb3RwyJVNSMR8JJRmNxAV5uGwYhy7h8q3pBfOZ3t8=)
                          2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: 28Dd9bL31ri75IcXZLXm+K8aAgI+rBNGokE5waPX/T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:28:7f:be:3e:c5:00:29:93:59:07:56:b4:f9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
        Validity
            Not Before: Jun 14 04:00:54 2026 GMT
            Not After : Jun 15 04:00:54 2026 GMT
        Subject: CN=2e350ac4e02c2a582c1e1b539be34e8fcce24801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:62:42:76:9a:ac:90:a7:5c:5d:98:93:82:
                    4e:d5:64:76:e5:cf:b1:18:35:f5:cf:cd:33:4a:74:
                    ab:74:e2:69:f6:68:77:90:52:29:62:68:52:67:1e:
                    af:bc:f4:7a:0f:b5:5c:e4:19:15:29:54:1d:8b:17:
                    34:74:dc:de:35:58:89:16:2c:e6:61:18:ea:91:c5:
                    d6:3b:e5:ec:aa:c9:26:43:2d:99:6f:04:1a:11:cc:
                    c4:c6:9f:52:e1:4a:42:71:f5:d1:e5:1b:51:c0:00:
                    da:f2:74:01:ca:8e:e8:e7:d5:e6:6b:62:fa:4b:13:
                    6a:b3:b1:0b:82:df:ba:70:55:e0:1e:9e:db:44:41:
                    29:1f:aa:21:1b:0b:de:91:21:af:27:0c:1b:36:17:
                    7b:84:d3:11:c9:7d:cd:3a:35:9b:4e:6a:ff:c1:eb:
                    a7:14:4e:08:f7:16:6c:1f:ed:c9:92:01:e3:3e:33:
                    f6:f8:af:f3:71:7c:37:df:58:50:0a:e2:d5:62:9f:
                    79:05:74:d6:7b:48:87:d1:d3:47:c2:d1:0b:0e:df:
                    9f:1f:19:10:91:fe:94:86:79:4d:f8:36:36:4c:72:
                    b5:5d:08:a7:d9:09:ad:00:36:2e:77:e5:06:9b:ba:
                    fc:48:3b:c8:98:82:d8:01:ea:0e:aa:1f:c2:96:8c:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:0A:C4:E0:2C:2A:58:2C:1E:1B:53:9B:E3:4E:8F:CC:E2:48:01
            X509v3 Authority Key Identifier:
                keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:12:72:f7:03:df:a1:60:ad:49:d5:1c:29:7a:b1:cf:49:93:
         ea:30:22:07:64:67:77:f5:50:35:ac:26:9d:1f:ab:d5:f5:bc:
         a3:4a:dc:85:8b:27:d4:81:03:71:8d:9b:9d:00:ad:c2:0a:ea:
         5b:1e:4c:d5:2d:52:e7:93:bb:65:78:99:e7:aa:80:24:77:59:
         d5:e7:c8:5d:ab:38:90:39:a5:b3:50:89:a6:12:75:9b:90:9a:
         7b:ad:6f:b1:38:f3:bd:52:3e:c2:74:be:a3:9a:a2:8d:99:dc:
         9e:43:d5:71:d6:ff:4c:2d:cc:48:4b:ff:2e:c9:69:1a:db:ab:
         aa:5c:7c:9e:13:b5:e1:f0:8a:d7:56:2b:7c:6b:3d:65:50:92:
         a8:b9:14:76:25:d3:a1:d1:b1:6e:65:52:05:07:21:dd:4a:8c:
         49:cc:06:0d:7b:26:fa:30:1a:e3:50:7f:a9:01:43:ef:c9:f2:
         3d:dd:7e:06:2c:7f:09:41:f1:e3:82:33:2c:3f:5a:62:62:0c:
         a3:a2:3f:a5:a7:be:f1:43:d9:de:c3:f9:e0:99:59:f1:ac:16:
         c2:f8:33:23:1b:26:7f:15:a4:ff:d9:b5:4e:ce:b1:38:6e:62:
         d0:a4:32:ff:6a:2e:a7:3d:ea:b8:c8:0c:8c:ff:56:5d:a1:9e:
         7a:2e:47:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ESih/vj7FACmTWQdWtPnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYTgxNmEzMzM4ZDMyNzQxY2Q0ZmZmOGY0OWRkYjJjYzgz
OGZkYzUwHhcNMjYwNjE0MDQwMDU0WhcNMjYwNjE1MDQwMDU0WjAzMTEwLwYDVQQD
EygyZTM1MGFjNGUwMmMyYTU4MmMxZTFiNTM5YmUzNGU4ZmNjZTI0ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMdiQnaarJCnXF2Yk4JO1WR25c+x
GDX1z80zSnSrdOJp9mh3kFIpYmhSZx6vvPR6D7Vc5BkVKVQdixc0dNzeNViJFizm
YRjqkcXWO+XsqskmQy2ZbwQaEczExp9S4UpCcfXR5RtRwADa8nQByo7o59Xma2L6
SxNqs7ELgt+6cFXgHp7bREEpH6ohGwvekSGvJwwbNhd7hNMRyX3NOjWbTmr/weun
FE4I9xZsH+3JkgHjPjP2+K/zcXw331hQCuLVYp95BXTWe0iH0dNHwtELDt+fHxkQ
kf6UhnlN+DY2THK1XQin2QmtADYud+UGm7r8SDvImILYAeoOqh/ClowndwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC41CsTgLCpYLB4bU5vjTo/M4kgBMB8GA1UdIwQY
MBaAFH+oFqMzjTJ0HNT/+PSd2yzIOP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMt
ZjA3MTdlYTQ4NWM2LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMtZjA3MTdlYTQ4NWM2
LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxJy9wPf
oWCtSdUcKXqxz0mT6jAiB2Rnd/VQNawmnR+r1fW8o0rchYsn1IEDcY2bnQCtwgrq
Wx5M1S1S55O7ZXiZ56qAJHdZ1efIXas4kDmls1CJphJ1m5Cae61vsTjzvVI+wnS+
o5qijZncnkPVcdb/TC3MSEv/LslpGturqlx8nhO14fCK11YrfGs9ZVCSqLkUdiXT
odGxbmVSBQch3UqMScwGDXsm+jAa41B/qQFD78nyPd1+Bix/CUHx44IzLD9aYmIM
o6I/pae+8UPZ3sP54JlZ8awWwvgzIxsmfxWk/9m1Ts6xOG5i0KQy/2oupz3quMgM
jP9WXaGeei5HTA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:56:29 2026 by rpki-client