Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          5MJk1fJY8seoavcDERQHOIAVJFYAakBPuMTiMRYVSHw=
Subject key identifier:   D2:87:BE:6A:F1:A1:18:EE:7C:E9:7C:16:B5:B1:13:55:E6:59:42:9B
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       019EC25C91936710410A78D08FE572897205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          1354
Signing time:             Sat 13 Jun 2026 19:01:46 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:46 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:46 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: OYim5TKR6K2Yfcny04dQvIKIzTaD14ii5SfsIdbCKa8=)
                          2: RKDDpCFJgRVsaPKFW2mBHa9GuIM.roa (hash: iYIciX5oRPMlYEZ43lpL4qlTSrlyvBgCIZc5o+HesAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:91:93:67:10:41:0a:78:d0:8f:e5:72:89:72:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Jun 13 19:01:46 2026 GMT
            Not After : Jun 14 19:01:46 2026 GMT
        Subject: CN=d287be6af1a118ee7ce97c16b5b11355e659429b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:49:20:86:44:aa:20:4e:62:36:83:48:aa:
                    3b:a3:cb:2e:43:79:60:97:a1:3e:a8:0b:d7:b5:3e:
                    3d:81:00:d4:f6:1d:b3:68:e4:8e:48:5f:a3:cc:e3:
                    9f:f3:87:a0:6c:82:4f:d1:2b:83:a6:c7:27:7f:03:
                    09:a1:9f:51:12:ce:60:de:35:fd:c4:c2:11:3b:21:
                    a9:0d:1d:45:fd:89:4a:12:b3:c2:84:d2:ac:06:f1:
                    d4:f1:3b:c5:ba:f8:11:53:48:c0:b7:c4:3b:22:35:
                    8a:46:0e:16:bb:d3:a1:3c:32:bd:60:cb:c6:3e:40:
                    76:72:a9:e7:3b:cf:eb:ce:c6:65:ac:ce:f0:3d:61:
                    8d:66:a2:f2:e8:fa:5c:30:cc:68:af:18:42:79:75:
                    8a:d5:ac:c7:6e:28:de:b4:45:e8:d7:f1:93:75:93:
                    58:22:12:a2:5b:17:db:8c:ef:a8:71:13:4b:f5:b5:
                    2d:c4:cf:55:73:ee:a7:39:64:9f:6b:5c:58:32:a4:
                    c7:79:23:cb:53:66:51:e5:15:ca:10:41:01:94:fc:
                    d7:1c:58:84:bc:31:14:66:25:81:2e:67:3d:b2:11:
                    5d:96:93:bb:39:98:94:58:e7:c4:46:9c:07:c1:37:
                    68:52:da:7e:c5:1d:c5:70:ba:e0:71:07:f7:a6:05:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:87:BE:6A:F1:A1:18:EE:7C:E9:7C:16:B5:B1:13:55:E6:59:42:9B
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:2a:06:0e:2a:2f:1e:39:7a:24:bb:19:32:f9:9b:e1:6d:
         43:5c:86:ef:45:c0:3d:0b:01:b1:67:7a:21:5d:23:73:b1:7f:
         d5:e5:80:0d:63:14:89:e5:22:fe:2a:71:fb:06:0f:fe:1c:48:
         8e:9f:23:9f:4b:74:2c:36:55:a9:56:c3:bd:54:b7:b0:85:3f:
         c2:a4:f9:c6:0b:da:8c:7f:4f:90:93:90:9f:d7:96:ad:29:f0:
         34:8c:38:19:26:c2:ee:c0:4f:48:f9:7b:8b:86:4e:39:3e:2c:
         5e:8c:dd:d3:23:f9:69:01:58:89:e0:8c:25:09:d5:c2:b2:45:
         99:66:f6:82:3f:b2:0a:50:b9:15:f0:01:eb:cd:09:de:3f:d5:
         a2:5c:37:4b:f2:15:9e:9a:5c:1b:04:40:3b:e8:39:59:0d:d4:
         54:52:23:dc:06:9e:e5:b0:5e:3c:1e:21:cf:06:8c:1f:71:03:
         90:55:54:8d:fa:40:bd:29:e6:2c:af:9c:a5:02:de:0c:a9:f2:
         4b:4a:b6:44:1f:5e:71:b2:a4:df:dc:e6:f4:73:9e:1e:dc:0a:
         d8:b1:a5:6c:e7:d3:35:8a:7c:cc:8c:32:73:ee:8a:5f:b9:72:
         88:8c:96:b9:b3:8e:8a:a5:86:9d:ac:bf:13:a7:1d:fe:31:c0:
         b7:fb:ff:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CXJGTZxBBCnjQj+VyiXIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmI5MTJiNGE1YTBjNzcwM2I1Y2E1OGIxODY3NDFlMGQ1
MzM1YjQwHhcNMjYwNjEzMTkwMTQ2WhcNMjYwNjE0MTkwMTQ2WjAzMTEwLwYDVQQD
EyhkMjg3YmU2YWYxYTExOGVlN2NlOTdjMTZiNWIxMTM1NWU2NTk0MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3VJIIZEqiBOYjaDSKo7o8suQ3lg
l6E+qAvXtT49gQDU9h2zaOSOSF+jzOOf84egbIJP0SuDpscnfwMJoZ9REs5g3jX9
xMIROyGpDR1F/YlKErPChNKsBvHU8TvFuvgRU0jAt8Q7IjWKRg4Wu9OhPDK9YMvG
PkB2cqnnO8/rzsZlrM7wPWGNZqLy6PpcMMxorxhCeXWK1azHbijetEXo1/GTdZNY
IhKiWxfbjO+ocRNL9bUtxM9Vc+6nOWSfa1xYMqTHeSPLU2ZR5RXKEEEBlPzXHFiE
vDEUZiWBLmc9shFdlpO7OZiUWOfERpwHwTdoUtp+xR3FcLrgcQf3pgUJ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKHvmrxoRjufOl8FrWxE1XmWUKbMB8GA1UdIwQY
MBaAFOlrkStKWgx3A7XKWLGGdB4NUzW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yZjMzODMtZGI3OS00NGM2LWJiNmIt
YjU0NjE1MGZkYzA0LzEvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yZjMzODMtZGI3OS00NGM2LWJiNmItYjU0NjE1MGZkYzA0
LzEvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiYqBg4q
Lx45eiS7GTL5m+FtQ1yG70XAPQsBsWd6IV0jc7F/1eWADWMUieUi/ipx+wYP/hxI
jp8jn0t0LDZVqVbDvVS3sIU/wqT5xgvajH9PkJOQn9eWrSnwNIw4GSbC7sBPSPl7
i4ZOOT4sXozd0yP5aQFYieCMJQnVwrJFmWb2gj+yClC5FfAB680J3j/Volw3S/IV
nppcGwRAO+g5WQ3UVFIj3Aae5bBePB4hzwaMH3EDkFVUjfpAvSnmLK+cpQLeDKny
S0q2RB9ecbKk39zm9HOeHtwK2LGlbOfTNYp8zIwyc+6KX7lyiIyWubOOiqWGnay/
E6cd/jHAt/v/cg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:03:50 2026 by rpki-client