Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File:                     0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier:          /rGoP6mwESPvwJn+jnpzQqQayhsW+O/RQX6KzxJwySs=
Subject key identifier:   6F:E6:D1:67:7A:93:39:A8:51:16:57:56:B7:9B:F8:D3:4D:93:38:55
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer:       /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial:       019EBE486E4F1C2C0A9704DE2F64FF061C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number:          169B
Signing time:             Sat 13 Jun 2026 00:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:18 +0000
Files and hashes:         1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: IxYLXt9rRA0BLwl11c1gGz3PUfLBFYYRt/U1w2v9Ex8=)
                          2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:6e:4f:1c:2c:0a:97:04:de:2f:64:ff:06:1c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
        Validity
            Not Before: Jun 13 00:01:18 2026 GMT
            Not After : Jun 14 00:01:18 2026 GMT
        Subject: CN=6fe6d1677a9339a851165756b79bf8d34d933855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:d8:91:92:bf:96:7b:44:b6:0a:7d:3e:4b:
                    34:11:07:56:36:35:c0:8c:e4:dc:0f:d8:e5:96:48:
                    e2:9d:67:de:44:58:49:9a:8e:19:4f:55:eb:0f:85:
                    f0:bd:91:cd:fc:18:35:1c:f8:b4:96:7f:a9:e8:33:
                    18:75:03:b8:ba:cb:b0:c6:63:48:c6:92:4c:08:32:
                    f8:79:f8:9b:f6:90:42:82:26:6d:46:ca:7d:97:44:
                    6a:4f:ab:41:5c:7f:98:09:13:c5:7e:4b:b5:a6:d6:
                    e3:11:22:cf:3b:b8:01:00:43:4c:0e:23:2b:14:f8:
                    f9:02:b4:a0:e1:4f:97:01:d0:54:44:0d:83:d6:aa:
                    39:98:e9:40:15:45:3c:04:49:1d:be:d9:c0:e8:f6:
                    1a:7e:1d:45:7a:cc:bc:28:b7:47:cb:2e:99:a6:cf:
                    a0:31:b3:6c:03:89:3e:c1:0f:9a:6d:f5:f6:b9:89:
                    64:e5:b6:50:3c:a0:93:0e:c0:ca:d3:ec:69:9b:84:
                    a4:37:36:37:6d:ff:f2:d1:03:5c:f6:1d:a3:c8:f7:
                    27:e6:4c:94:6a:4e:c0:f6:b2:6f:ae:81:57:e6:ef:
                    5e:3f:7c:5a:3f:fc:96:53:c3:5b:1c:c6:9b:89:fd:
                    a2:5d:b0:3d:0f:09:78:36:5f:c3:2e:ed:91:c3:ce:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E6:D1:67:7A:93:39:A8:51:16:57:56:B7:9B:F8:D3:4D:93:38:55
            X509v3 Authority Key Identifier:
                keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:da:c2:f9:f0:59:39:dd:c3:fc:c4:6b:f3:8c:e3:e6:ea:
         29:11:69:35:10:09:b4:45:66:cb:e8:65:cc:15:c2:e4:45:84:
         88:56:32:1f:52:55:c6:20:83:74:5b:d4:d7:43:ea:da:36:28:
         8c:b0:09:92:a3:d1:24:49:3e:1b:cf:87:f6:21:1a:60:99:4f:
         93:eb:2e:31:62:ec:dc:0d:fb:b9:c7:73:55:b4:34:03:90:e7:
         5c:70:30:0e:ed:af:a6:21:bf:45:c4:84:89:9f:d1:8c:ad:c5:
         75:8b:1e:5f:46:5f:0e:0d:b6:38:72:23:87:48:9e:b6:0d:8f:
         a9:ec:3a:89:88:b0:34:c6:b3:fa:75:ed:da:2f:cb:64:1e:e0:
         69:50:28:f1:14:fd:32:41:d6:03:ac:93:cc:35:a0:bf:3a:ac:
         8f:02:cf:61:89:bc:6e:52:e7:f0:a1:18:e1:d1:39:8f:9b:67:
         1e:b4:99:62:58:04:71:5e:01:74:d8:31:61:37:a4:32:0c:9d:
         5d:b5:61:77:87:90:bc:ba:8d:0f:c0:49:70:fe:8f:7e:f0:b5:
         74:e4:04:9c:25:9c:ae:7c:d6:a4:1d:56:f7:8f:cb:7f:0f:12:
         2a:bb:41:e7:6b:13:02:9c:ad:e0:cf:da:15:43:23:16:e9:09:
         37:ac:4e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+SG5PHCwKlwTeL2T/BhwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy
ZTRjMTMwHhcNMjYwNjEzMDAwMTE4WhcNMjYwNjE0MDAwMTE4WjAzMTEwLwYDVQQD
Eyg2ZmU2ZDE2NzdhOTMzOWE4NTExNjU3NTZiNzliZjhkMzRkOTMzODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1rYkZK/lntEtgp9Pks0EQdWNjXA
jOTcD9jllkjinWfeRFhJmo4ZT1XrD4XwvZHN/Bg1HPi0ln+p6DMYdQO4usuwxmNI
xpJMCDL4efib9pBCgiZtRsp9l0RqT6tBXH+YCRPFfku1ptbjESLPO7gBAENMDiMr
FPj5ArSg4U+XAdBURA2D1qo5mOlAFUU8BEkdvtnA6PYafh1Fesy8KLdHyy6Zps+g
MbNsA4k+wQ+abfX2uYlk5bZQPKCTDsDK0+xpm4SkNzY3bf/y0QNc9h2jyPcn5kyU
ak7A9rJvroFX5u9eP3xaP/yWU8NbHMabif2iXbA9Dwl4Nl/DLu2Rw87/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/m0Wd6kzmoURZXVreb+NNNkzhVMB8GA1UdIwQY
MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt
YTg4YmI3ODA1YjA5LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5
LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjd3awvnw
WTndw/zEa/OM4+bqKRFpNRAJtEVmy+hlzBXC5EWEiFYyH1JVxiCDdFvU10Pq2jYo
jLAJkqPRJEk+G8+H9iEaYJlPk+suMWLs3A37ucdzVbQ0A5DnXHAwDu2vpiG/RcSE
iZ/RjK3FdYseX0ZfDg22OHIjh0ietg2Pqew6iYiwNMaz+nXt2i/LZB7gaVAo8RT9
MkHWA6yTzDWgvzqsjwLPYYm8blLn8KEY4dE5j5tnHrSZYlgEcV4BdNgxYTekMgyd
XbVhd4eQvLqND8BJcP6PfvC1dOQEnCWcrnzWpB1W94/Lfw8SKrtB52sTApyt4M/a
FUMjFukJN6xOJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:32:21 2026 by rpki-client