Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          iswU6mUlOT3bBab+0c/TvQihp4dTpHTtnvUPlGh1Wes=
Subject key identifier:   6F:57:FE:38:22:61:E9:B2:64:5B:40:26:CB:96:38:9F:49:9E:05:55
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       019EBF5A6CD51F1B645ADB45A7FFF5A5F0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0F80
Signing time:             Sat 13 Jun 2026 05:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:34 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: yVD3dROnBEPwJy5KTvGvCcFFZU+rGxdSxZzr1ldiDNM=)
                          2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:6c:d5:1f:1b:64:5a:db:45:a7:ff:f5:a5:f0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: Jun 13 05:00:34 2026 GMT
            Not After : Jun 14 05:00:34 2026 GMT
        Subject: CN=6f57fe382261e9b2645b4026cb96389f499e0555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:8e:36:bc:40:59:65:c4:a3:5a:e2:cb:c6:
                    29:aa:2d:8f:f5:72:51:4d:9c:8e:b3:19:10:92:21:
                    c9:d1:23:b5:ab:de:1f:43:a2:58:c3:9d:e6:24:a9:
                    4b:11:07:c8:42:90:1f:fa:7b:b2:97:57:a0:47:46:
                    00:ed:b5:5a:d1:59:9f:4c:48:80:e6:21:33:79:b5:
                    ad:38:bc:6a:ff:c9:b3:14:7f:67:a1:6a:72:24:81:
                    ab:58:d5:27:06:1c:87:f0:38:fa:c2:42:df:3c:b1:
                    fa:d3:2a:88:bd:95:39:bf:a1:04:d9:90:12:4f:3b:
                    a0:83:41:15:71:ce:a1:96:9c:64:c6:a8:fc:fc:a9:
                    d3:7d:6e:46:f1:05:d7:84:87:44:0a:e0:09:cd:42:
                    9e:45:63:91:e0:d5:03:ce:6d:52:25:90:2e:62:e5:
                    05:00:0d:53:d5:aa:01:c4:87:58:b4:18:d5:e7:e5:
                    82:0b:80:0a:0d:bb:86:84:bb:33:a1:78:8f:fd:77:
                    bc:fa:52:aa:07:d3:eb:cd:ad:e2:3a:90:c8:c4:9e:
                    95:89:b8:eb:0c:f2:d9:11:92:24:80:54:a1:52:cd:
                    49:a8:2f:2e:1d:9a:de:c3:a0:d8:24:f9:a6:eb:ac:
                    df:16:f6:fe:6b:29:ae:ba:d7:48:89:34:7c:29:4f:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:FE:38:22:61:E9:B2:64:5B:40:26:CB:96:38:9F:49:9E:05:55
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:31:85:eb:01:f3:f2:79:9e:f3:69:ec:fd:e6:bd:f0:c0:
         74:70:08:96:d8:fb:b9:34:57:71:46:a0:ba:c0:fb:4d:29:90:
         12:c4:51:0c:a5:8e:89:1c:37:60:da:d7:0f:27:89:8f:26:df:
         40:14:51:f1:55:b4:11:81:44:8a:de:f3:06:a3:fb:e2:a7:b1:
         5f:bf:97:47:85:6c:2e:fa:a9:f3:fa:48:96:4b:1a:2d:c1:18:
         08:e0:f0:cb:35:a3:89:10:40:e6:33:57:83:bd:0d:97:74:a2:
         9d:3e:29:29:eb:c4:7b:f9:67:dd:35:1a:84:7d:d2:b0:3b:a3:
         d7:7b:c3:c6:01:81:d2:1b:aa:1f:d8:cc:fd:7f:75:61:6a:88:
         70:f4:e5:b6:83:96:f4:d5:39:14:b8:db:04:8d:e3:18:f5:33:
         62:db:5c:d0:d1:6f:2e:6d:eb:60:cd:d8:e5:ec:99:c4:0f:fd:
         4f:b5:ed:8d:ed:f9:5c:df:9e:12:38:b9:ab:e4:94:73:4e:9a:
         64:58:ed:2c:73:2c:2a:09:86:ad:a1:d4:f9:1d:f8:b8:02:f9:
         73:f0:8f:5e:33:59:a8:d3:7d:54:d3:48:3b:4b:83:d6:6a:53:
         cc:89:b3:36:9a:d3:41:80:b9:fb:7d:f4:87:ec:40:f1:81:8d:
         90:53:00:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WmzVHxtkWttFp//1pfDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi
OWZlMDQwHhcNMjYwNjEzMDUwMDM0WhcNMjYwNjE0MDUwMDM0WjAzMTEwLwYDVQQD
Eyg2ZjU3ZmUzODIyNjFlOWIyNjQ1YjQwMjZjYjk2Mzg5ZjQ5OWUwNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GuONrxAWWXEo1riy8Ypqi2P9XJR
TZyOsxkQkiHJ0SO1q94fQ6JYw53mJKlLEQfIQpAf+nuyl1egR0YA7bVa0VmfTEiA
5iEzebWtOLxq/8mzFH9noWpyJIGrWNUnBhyH8Dj6wkLfPLH60yqIvZU5v6EE2ZAS
Tzugg0EVcc6hlpxkxqj8/KnTfW5G8QXXhIdECuAJzUKeRWOR4NUDzm1SJZAuYuUF
AA1T1aoBxIdYtBjV5+WCC4AKDbuGhLszoXiP/Xe8+lKqB9Prza3iOpDIxJ6Vibjr
DPLZEZIkgFShUs1JqC8uHZrew6DYJPmm66zfFvb+aymuutdIiTR8KU/PxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9X/jgiYemyZFtAJsuWOJ9JngVVMB8GA1UdIwQY
MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt
MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4
LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEExhesB
8/J5nvNp7P3mvfDAdHAIltj7uTRXcUagusD7TSmQEsRRDKWOiRw3YNrXDyeJjybf
QBRR8VW0EYFEit7zBqP74qexX7+XR4VsLvqp8/pIlksaLcEYCODwyzWjiRBA5jNX
g70Nl3SinT4pKevEe/ln3TUahH3SsDuj13vDxgGB0huqH9jM/X91YWqIcPTltoOW
9NU5FLjbBI3jGPUzYttc0NFvLm3rYM3Y5eyZxA/9T7Xtje35XN+eEji5q+SUc06a
ZFjtLHMsKgmGraHU+R34uAL5c/CPXjNZqNN9VNNIO0uD1mpTzImzNprTQYC5+330
h+xA8YGNkFMAeg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:26:24 2026 by rpki-client