Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File:                     4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier:          OFha2yM6LY+HL1DjVgfLrYfWrBdoQ+W8fPkzjjISuMc=
Subject key identifier:   A9:61:09:4B:67:C8:98:DE:2C:C1:EE:87:01:3C:91:FD:25:FF:27:9E
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer:       /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial:       019EBEED099C701BA30D2916C79D8C907ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number:          0A62
Signing time:             Sat 13 Jun 2026 03:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:05 +0000
Files and hashes:         1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: GoML0sJfM3ChF1e8K7+l5MrqjxOEO0wDKzSRh2apQ1I=)
                          2: u7z3f5MyS6Pn44Y8ceWPcFJRqYE.roa (hash: wWTcWByT+kygfV9+kd/6R30QexArvjCPKfIUysPXkgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:09:9c:70:1b:a3:0d:29:16:c7:9d:8c:90:7e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
        Validity
            Not Before: Jun 13 03:01:05 2026 GMT
            Not After : Jun 14 03:01:05 2026 GMT
        Subject: CN=a961094b67c898de2cc1ee87013c91fd25ff279e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:4f:33:e0:48:7c:85:d3:2e:c1:f4:c9:00:
                    2f:38:b6:11:e8:70:1b:87:e3:ff:79:7b:d4:65:3d:
                    8f:be:79:c8:0b:47:fb:5f:fe:d0:e8:b4:67:d0:43:
                    81:eb:31:81:df:65:9e:8e:ed:a6:61:ee:5a:ae:88:
                    35:85:d6:fc:1a:c9:91:18:cb:f0:9b:bb:d7:59:64:
                    95:e2:b6:8a:1f:80:88:ef:ee:6f:47:98:3c:2b:cd:
                    28:f9:f9:06:37:f2:ec:3c:1c:b1:4e:d7:94:f1:51:
                    99:d4:3a:9c:19:7a:0a:f9:6e:9a:93:e3:91:79:c1:
                    47:94:4c:76:c5:1e:e3:41:d3:fc:53:31:10:94:a8:
                    78:be:08:d1:44:7f:0b:15:26:92:95:f1:ba:78:30:
                    de:25:f8:f3:ef:d3:bd:f5:6b:0b:29:05:c2:a8:df:
                    3b:41:39:cd:aa:d5:95:1b:0c:3d:ec:35:06:0c:4b:
                    05:15:ae:ee:c2:68:f2:7f:1a:6a:34:2f:b5:86:9e:
                    44:b4:93:12:66:b6:64:f1:07:54:ec:cb:dc:be:97:
                    59:4e:f7:5e:04:9f:4e:2c:3c:46:dd:1e:a8:3c:05:
                    bc:88:4e:b3:42:12:75:ad:eb:94:44:02:ff:53:c0:
                    fc:04:4e:73:13:a4:ac:b8:e7:af:94:9e:95:9c:29:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:61:09:4B:67:C8:98:DE:2C:C1:EE:87:01:3C:91:FD:25:FF:27:9E
            X509v3 Authority Key Identifier:
                keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c1:6e:0d:62:52:64:26:10:b9:4b:d5:bc:14:f0:40:ec:3c:
         36:2a:59:6a:48:95:d3:22:be:fc:33:1a:b0:80:45:00:80:ee:
         20:82:8b:ba:2e:d0:b2:fc:12:15:54:97:2a:e1:36:0c:3c:cb:
         13:ac:c1:c2:67:6d:d1:3b:85:68:df:1b:f3:e4:86:15:d0:0a:
         7b:66:e1:8f:ac:b8:83:44:50:fd:2b:b2:b6:a4:39:44:0e:81:
         5f:e0:2d:83:d4:a5:94:b9:32:8b:83:73:58:5c:97:ca:ce:7f:
         65:79:3d:7b:80:67:16:51:b2:67:0d:5a:d5:b7:c7:22:63:2a:
         b5:d5:d1:08:dd:e0:4b:04:55:18:8a:21:ab:3e:a7:10:23:e5:
         9c:c9:f4:98:67:79:08:2f:1c:f6:30:9e:6a:8d:71:18:5e:11:
         13:0e:ac:97:07:b2:01:3e:f9:f5:46:3f:c3:5a:e8:9f:86:fa:
         02:25:5e:82:af:c5:83:79:d3:6d:d7:d8:13:d1:fa:65:2c:95:
         db:d9:14:f8:37:88:ad:40:04:3a:5e:d1:9c:4f:03:e3:85:45:
         ac:97:2e:53:e9:c2:41:ab:5c:60:6b:bc:89:3e:0f:ba:f8:6d:
         17:eb:56:0f:46:82:95:78:95:46:bd:26:26:43:45:55:bd:a8:
         7f:a0:a7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7QmccBujDSkWx52MkH7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1
NWQxNGYwHhcNMjYwNjEzMDMwMTA1WhcNMjYwNjE0MDMwMTA1WjAzMTEwLwYDVQQD
EyhhOTYxMDk0YjY3Yzg5OGRlMmNjMWVlODcwMTNjOTFmZDI1ZmYyNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaJPM+BIfIXTLsH0yQAvOLYR6HAb
h+P/eXvUZT2PvnnIC0f7X/7Q6LRn0EOB6zGB32Weju2mYe5arog1hdb8GsmRGMvw
m7vXWWSV4raKH4CI7+5vR5g8K80o+fkGN/LsPByxTteU8VGZ1DqcGXoK+W6ak+OR
ecFHlEx2xR7jQdP8UzEQlKh4vgjRRH8LFSaSlfG6eDDeJfjz79O99WsLKQXCqN87
QTnNqtWVGww97DUGDEsFFa7uwmjyfxpqNC+1hp5EtJMSZrZk8QdU7MvcvpdZTvde
BJ9OLDxG3R6oPAW8iE6zQhJ1reuURAL/U8D8BE5zE6SsuOevlJ6VnCkqGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlhCUtnyJjeLMHuhwE8kf0l/yeeMB8GA1UdIwQY
MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt
MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk
LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMFuDWJS
ZCYQuUvVvBTwQOw8NipZakiV0yK+/DMasIBFAIDuIIKLui7QsvwSFVSXKuE2DDzL
E6zBwmdt0TuFaN8b8+SGFdAKe2bhj6y4g0RQ/SuytqQ5RA6BX+Atg9SllLkyi4Nz
WFyXys5/ZXk9e4BnFlGyZw1a1bfHImMqtdXRCN3gSwRVGIohqz6nECPlnMn0mGd5
CC8c9jCeao1xGF4REw6slweyAT759UY/w1ron4b6AiVegq/Fg3nTbdfYE9H6ZSyV
29kU+DeIrUAEOl7RnE8D44VFrJcuU+nCQatcYGu8iT4PuvhtF+tWD0aClXiVRr0m
JkNFVb2of6Cn/g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:23 2026 by rpki-client