Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File:                     70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier:          KBNNLmuf67uPRKlgvvxflOpqNvBe8T8Fg2bu5ekk6J8=
Subject key identifier:   A5:BF:B1:17:8E:84:80:A5:18:28:B2:B2:9D:A3:31:A0:A1:6E:5B:06
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer:       /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial:       019EBE11376CA6653DF0C3B466E1F6583175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number:          0D82
Signing time:             Fri 12 Jun 2026 23:00:59 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:59 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:59 +0000
Files and hashes:         1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: GkD2yUBE3jeJfUZrWS5C0UmE5jXc6ICeT0WguF6lgV8=)
                          2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:37:6c:a6:65:3d:f0:c3:b4:66:e1:f6:58:31:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
        Validity
            Not Before: Jun 12 23:00:59 2026 GMT
            Not After : Jun 13 23:00:59 2026 GMT
        Subject: CN=a5bfb1178e8480a51828b2b29da331a0a16e5b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:d4:94:f4:4a:80:05:48:1e:bc:e7:a1:64:
                    bf:a1:bb:f8:ba:7c:4e:05:0b:e8:95:15:46:46:73:
                    11:17:5a:05:f3:83:d8:08:8c:0c:d0:b5:75:91:56:
                    5a:a2:ee:0a:e6:2e:e4:ba:ed:db:29:c5:07:e9:47:
                    32:90:bf:91:17:7b:d4:a6:a6:8a:1a:a1:44:89:1f:
                    f8:aa:24:7d:31:a5:47:7a:c0:89:bd:fb:18:d9:b6:
                    e7:35:2e:22:1f:0a:35:8e:e0:51:89:72:45:d6:4f:
                    a9:33:89:b7:82:8d:bd:0e:69:1a:5b:44:e4:10:f0:
                    a5:ef:46:e1:19:60:bc:10:c3:79:86:bc:c9:c8:95:
                    b0:e6:94:42:60:c6:b3:49:30:e6:59:df:34:74:15:
                    f4:ea:d9:9b:f1:62:34:90:2c:d2:11:24:d5:17:2f:
                    9d:7c:27:97:f1:29:1d:51:04:e8:14:30:a2:fb:11:
                    b3:96:07:39:17:0e:9e:ba:e4:b9:13:06:95:52:33:
                    21:59:27:6d:9b:5b:bb:c3:40:c2:63:e5:67:6e:b7:
                    46:39:2e:fa:39:48:c3:cf:05:58:94:5b:5d:9e:ca:
                    fe:e9:50:b9:68:89:ee:05:a8:93:c3:8f:e0:1a:6b:
                    07:ea:51:cb:dd:1d:92:f0:e9:ed:7a:39:17:d3:43:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:B1:17:8E:84:80:A5:18:28:B2:B2:9D:A3:31:A0:A1:6E:5B:06
            X509v3 Authority Key Identifier:
                keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:73:11:e8:ac:c3:87:89:ea:31:58:b8:35:ed:68:ee:33:0d:
         b3:aa:45:4a:f2:c0:a7:89:6e:8f:23:ad:0e:98:cc:64:a6:a8:
         f6:69:10:70:d3:6e:3b:da:b7:91:fa:5b:87:61:76:c3:0d:b4:
         46:a7:66:3a:a5:7b:f5:29:ea:77:b9:48:b7:26:b6:2d:79:9c:
         c7:66:ac:73:88:1f:c2:fe:42:15:87:0f:d7:e3:55:52:56:0a:
         65:bb:63:6f:f7:d2:89:47:ac:2d:38:e2:99:24:47:33:02:fa:
         3b:44:3a:68:86:b4:24:19:a5:ac:f7:63:f0:b8:b3:97:12:8a:
         b9:b5:43:98:a1:84:ba:cd:9b:d6:9b:07:7f:21:6a:a1:30:78:
         45:03:6f:57:55:e3:c4:67:0b:33:43:56:a9:37:2f:54:e4:ae:
         91:f6:65:39:51:24:d6:bd:59:a0:6e:be:39:e8:a4:97:e2:b0:
         3b:ba:6d:95:59:0b:54:77:ff:9d:63:47:30:84:d7:88:2d:ba:
         da:da:a5:25:be:52:49:80:42:92:9f:b4:e4:5c:09:e5:5e:54:
         06:2b:1f:df:5d:6c:ab:42:97:bc:bc:ec:54:84:5b:bc:1f:17:
         9f:ae:c5:8c:6c:27:4e:03:8f:56:9c:fd:45:42:92:aa:dd:a1:
         d3:57:cb:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ETdspmU98MO0ZuH2WDF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDljYWMxNTFkYjE1OGVkNmE4NTYzMzU4NTU1NTdmNGU3
NWY3MjUwHhcNMjYwNjEyMjMwMDU5WhcNMjYwNjEzMjMwMDU5WjAzMTEwLwYDVQQD
EyhhNWJmYjExNzhlODQ4MGE1MTgyOGIyYjI5ZGEzMzFhMGExNmU1YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUDUlPRKgAVIHrznoWS/obv4unxO
BQvolRVGRnMRF1oF84PYCIwM0LV1kVZaou4K5i7kuu3bKcUH6UcykL+RF3vUpqaK
GqFEiR/4qiR9MaVHesCJvfsY2bbnNS4iHwo1juBRiXJF1k+pM4m3go29DmkaW0Tk
EPCl70bhGWC8EMN5hrzJyJWw5pRCYMazSTDmWd80dBX06tmb8WI0kCzSESTVFy+d
fCeX8SkdUQToFDCi+xGzlgc5Fw6euuS5EwaVUjMhWSdtm1u7w0DCY+VnbrdGOS76
OUjDzwVYlFtdnsr+6VC5aInuBaiTw4/gGmsH6lHL3R2S8OntejkX00OgPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW/sReOhIClGCiysp2jMaChblsGMB8GA1UdIwQY
MBaAFO9JysFR2xWO1qhWM1hVVX9OdfclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2It
ZDhhN2EyY2M4NzNiLzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2ItZDhhN2EyY2M4NzNi
LzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHMR6KzD
h4nqMVi4Ne1o7jMNs6pFSvLAp4lujyOtDpjMZKao9mkQcNNuO9q3kfpbh2F2ww20
RqdmOqV79Snqd7lItya2LXmcx2asc4gfwv5CFYcP1+NVUlYKZbtjb/fSiUesLTji
mSRHMwL6O0Q6aIa0JBmlrPdj8LizlxKKubVDmKGEus2b1psHfyFqoTB4RQNvV1Xj
xGcLM0NWqTcvVOSukfZlOVEk1r1ZoG6+Oeikl+KwO7ptlVkLVHf/nWNHMITXiC26
2tqlJb5SSYBCkp+05FwJ5V5UBisf311sq0KXvLzsVIRbvB8Xn67FjGwnTgOPVpz9
RUKSqt2h01fLMg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:02 2026 by rpki-client