Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
File:                     7tf2sWWjjP80bePjUhGNyZ7YIsc.mft (raw, json)
Hash identifier:          1SjzT3Y3sX0LOzWJe0SsF5C8iz9BH3WfFYmnsBUkPrs=
Subject key identifier:   9B:87:73:38:93:C6:43:C0:9F:F1:99:6C:32:20:39:20:09:2A:10:DF
Authority key identifier: EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7
Certificate issuer:       /CN=eed7f6b165a38cff346de3e352118dc99ed822c7
Certificate serial:       019EC035E534474C2B989A4ADEC943CDEB9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
Manifest number:          0246
Signing time:             Sat 13 Jun 2026 09:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:17 +0000
Files and hashes:         1: 7tf2sWWjjP80bePjUhGNyZ7YIsc.crl (hash: ftfJ8f3iWpx/0T+eeDCSLe47Tgh/vw4MR6nhGHRu+2I=)
                          2: NAW1_cKeiVf2Ht2OFDHqZcdwBFo.roa (hash: lOXDjnI4H7k/uRGO0GQznSDrcP2IS6+/d8MPZ+z5oLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:35:e5:34:47:4c:2b:98:9a:4a:de:c9:43:cd:eb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed7f6b165a38cff346de3e352118dc99ed822c7
        Validity
            Not Before: Jun 13 09:00:17 2026 GMT
            Not After : Jun 14 09:00:17 2026 GMT
        Subject: CN=9b87733893c643c09ff1996c32203920092a10df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:71:0a:0f:56:7e:6c:f2:b8:9a:5d:f2:71:
                    b3:44:f6:6e:d2:45:2a:69:78:5e:e2:48:4a:ba:29:
                    f9:fd:15:90:fe:b6:50:df:fd:9b:ff:1a:e2:ff:13:
                    25:8a:a0:89:ca:50:7a:4c:bd:13:95:87:fd:4e:aa:
                    b6:49:01:03:a5:cc:71:43:22:72:76:57:06:fb:67:
                    75:a8:da:32:9d:0b:80:3c:bb:40:29:e7:d1:f5:27:
                    69:57:d9:cf:db:7a:8b:bf:ad:e5:4a:cc:db:7a:d9:
                    ba:4b:23:b8:e6:4c:7d:a6:88:a6:75:95:71:5a:fd:
                    58:cd:12:d1:a1:8d:71:4a:9f:07:9a:c5:d2:0e:81:
                    41:47:0b:1c:18:e1:c7:f6:c6:74:23:fd:86:f3:07:
                    49:ca:1d:74:56:a6:68:1f:cf:6b:25:10:01:57:68:
                    04:90:8a:ec:a0:5c:64:e3:08:e7:04:6b:e6:7a:a8:
                    d2:ed:a3:5e:9f:2d:54:d8:cb:56:1a:b8:c4:38:6c:
                    16:b3:fd:f3:09:eb:fd:5a:a4:3c:b3:ef:0b:e4:6f:
                    6f:75:79:d4:6e:11:db:cf:25:60:25:67:4f:bf:76:
                    28:56:4b:f4:ba:e5:47:82:db:0a:fe:1e:ba:7f:a5:
                    66:6b:09:1a:e0:02:67:b0:d4:4f:2c:26:35:ba:e1:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:87:73:38:93:C6:43:C0:9F:F1:99:6C:32:20:39:20:09:2A:10:DF
            X509v3 Authority Key Identifier:
                keyid:EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0b:2d:3d:1f:21:16:b8:8f:99:8a:85:3f:4c:0b:81:45:f1:
         04:4b:ca:bc:d8:96:4b:1f:ca:34:b7:a6:6c:9d:62:35:ce:11:
         9a:39:a5:51:fc:21:d9:31:34:77:0b:43:18:33:4f:80:32:66:
         54:2a:7c:0b:70:77:b8:b0:70:25:46:34:16:6a:02:38:12:75:
         f4:f2:0d:1d:87:1c:7a:4e:2b:3a:be:d5:8f:cf:40:52:44:b4:
         b3:ff:ff:10:6d:0c:64:6a:26:e1:ed:5f:43:d1:34:d9:20:2b:
         5c:34:5b:55:fd:5e:4e:a9:81:c9:52:06:a0:d8:92:0f:9d:c2:
         cd:a0:b7:1d:0d:9e:bc:53:6e:47:18:08:72:8f:f1:85:d2:a6:
         26:57:92:e0:22:36:b6:bc:00:2a:f0:6f:67:ee:f2:3b:8d:6e:
         d6:b9:6c:37:2d:d6:01:63:2c:35:be:3e:47:42:93:ef:7c:c0:
         86:4f:97:ed:3f:dd:b6:cb:56:e9:ea:05:38:c9:3b:3b:70:ef:
         50:f1:13:0c:83:44:5f:de:48:f8:ef:01:28:5b:fe:8c:07:09:
         2c:1c:af:c6:b4:e4:3b:e3:e2:cf:9a:04:49:e0:97:1b:2d:58:
         05:72:ef:1a:98:31:5f:16:ed:d3:89:ba:ae:ae:d8:b6:83:29:
         1f:a8:2c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANeU0R0wrmJpK3slDzeueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDdmNmIxNjVhMzhjZmYzNDZkZTNlMzUyMTE4ZGM5OWVk
ODIyYzcwHhcNMjYwNjEzMDkwMDE3WhcNMjYwNjE0MDkwMDE3WjAzMTEwLwYDVQQD
Eyg5Yjg3NzMzODkzYzY0M2MwOWZmMTk5NmMzMjIwMzkyMDA5MmExMGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm91xCg9WfmzyuJpd8nGzRPZu0kUq
aXhe4khKuin5/RWQ/rZQ3/2b/xri/xMliqCJylB6TL0TlYf9Tqq2SQEDpcxxQyJy
dlcG+2d1qNoynQuAPLtAKefR9SdpV9nP23qLv63lSszbetm6SyO45kx9poimdZVx
Wv1YzRLRoY1xSp8HmsXSDoFBRwscGOHH9sZ0I/2G8wdJyh10VqZoH89rJRABV2gE
kIrsoFxk4wjnBGvmeqjS7aNeny1U2MtWGrjEOGwWs/3zCev9WqQ8s+8L5G9vdXnU
bhHbzyVgJWdPv3YoVkv0uuVHgtsK/h66f6Vmawka4AJnsNRPLCY1uuGmcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuHcziTxkPAn/GZbDIgOSAJKhDfMB8GA1UdIwQY
MBaAFO7X9rFlo4z/NG3j41IRjcme2CLHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jNTVlYTItNjJkMC00ZGI5LTkwMWMt
ZWFjNjNjMzNiMDg1LzEvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jNTVlYTItNjJkMC00ZGI5LTkwMWMtZWFjNjNjMzNiMDg1
LzEvN3RmMnNXV2pqUDgwYmVQalVoR055WjdZSXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQstPR8h
FriPmYqFP0wLgUXxBEvKvNiWSx/KNLembJ1iNc4RmjmlUfwh2TE0dwtDGDNPgDJm
VCp8C3B3uLBwJUY0FmoCOBJ19PINHYccek4rOr7Vj89AUkS0s///EG0MZGom4e1f
Q9E02SArXDRbVf1eTqmByVIGoNiSD53CzaC3HQ2evFNuRxgIco/xhdKmJleS4CI2
trwAKvBvZ+7yO41u1rlsNy3WAWMsNb4+R0KT73zAhk+X7T/dtstW6eoFOMk7O3Dv
UPETDINEX95I+O8BKFv+jAcJLByvxrTkO+Piz5oESeCXGy1YBXLvGpgxXxbt04m6
rq7YtoMpH6gsaw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:55:22 2026 by rpki-client