Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          rv0sQvA+qiz8bMXJsoCpNZ1XOVwfw3OdQE9fhDgt3b8=
Subject key identifier:   64:1C:3E:06:72:9B:6D:50:EC:B5:FA:EE:CE:91:00:52:B4:0A:77:3B
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       019EBF915CEB4F984477476B0983C9893160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          1054
Signing time:             Sat 13 Jun 2026 06:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:35 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: L2/oQlEimrlPsXNFqhfgRGl4QxHj7shw3e+z0xf0Mwk=)
                          2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:5c:eb:4f:98:44:77:47:6b:09:83:c9:89:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Jun 13 06:00:35 2026 GMT
            Not After : Jun 14 06:00:35 2026 GMT
        Subject: CN=641c3e06729b6d50ecb5faeece910052b40a773b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:98:1f:e9:f9:1b:8f:a5:43:bc:a7:93:0e:
                    38:c3:dc:76:ec:87:52:1a:b5:4b:5a:42:94:5b:1e:
                    e2:12:ea:90:72:10:12:55:8e:31:4f:7f:bc:28:a9:
                    7a:cf:20:e4:d3:da:8b:23:41:4a:fd:f6:1a:a5:da:
                    f4:d8:c3:1a:17:9f:26:17:8f:91:01:3e:3f:89:ed:
                    92:a3:52:71:8b:6d:ea:2e:6c:21:ef:d7:ac:61:e1:
                    53:e0:93:35:4f:72:45:b0:48:4c:d4:55:9a:32:21:
                    a3:60:85:f2:81:2c:4c:91:d2:ab:0d:0f:c6:0b:4f:
                    d9:90:cd:18:f4:5e:ca:1d:40:a6:44:34:da:4f:58:
                    db:a8:b7:72:2a:08:ac:3e:c5:93:ba:62:4a:95:1e:
                    e5:a3:84:ec:1d:01:a3:c7:f9:9d:3f:a9:13:4b:bd:
                    54:bd:e1:5c:b0:e3:82:1f:9b:20:c3:85:64:ce:c6:
                    39:5c:38:f9:a2:11:f3:de:32:84:1d:52:66:37:2a:
                    b2:14:ac:59:3b:cd:6a:05:2d:a8:9e:6b:c0:fb:6d:
                    ae:84:aa:fc:10:be:24:3d:b1:9f:1e:57:60:8b:3a:
                    f1:77:e4:1f:8e:76:a9:08:97:c3:2f:c3:e5:67:1f:
                    81:b9:63:f1:0a:8a:50:b9:48:2c:71:6c:84:f5:91:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1C:3E:06:72:9B:6D:50:EC:B5:FA:EE:CE:91:00:52:B4:0A:77:3B
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:64:f9:fd:af:ba:34:b0:6e:1d:33:11:e9:19:fb:30:0c:bf:
         6b:08:a0:f5:b7:e6:d3:97:98:d1:c2:b0:a2:e8:f7:6a:80:ae:
         7c:4a:d8:28:d3:dc:32:72:07:2d:a7:e9:dd:2b:a9:d4:3a:2b:
         dd:c8:49:45:9b:19:f8:c5:0e:fb:8b:49:8a:63:7c:1a:b6:66:
         b5:b6:ac:1d:39:0d:5a:75:b6:f4:16:b3:92:b7:bc:6b:ae:87:
         12:52:7d:96:16:5b:e5:f2:ef:26:58:81:38:73:ff:46:c5:0b:
         36:5e:73:ab:7e:b3:ac:58:35:cf:c4:90:56:4e:67:44:fb:5f:
         6d:5c:6f:31:e7:4d:be:07:70:5c:3d:75:53:d4:31:ec:ff:ad:
         fc:72:ad:45:e9:de:d9:fa:9d:f5:4a:47:a5:bf:49:00:49:80:
         c7:5c:09:46:fa:43:02:81:3a:86:e1:04:9e:7b:27:3e:f9:22:
         b2:ba:50:01:d3:84:d3:0c:5d:71:61:2e:bc:49:fa:91:07:b1:
         fd:97:14:be:d9:2d:28:57:6d:a8:aa:e3:f5:20:ff:29:49:6e:
         f8:65:0b:93:fd:73:1f:f4:45:c1:4d:06:89:3a:56:a2:00:12:
         61:d7:ea:23:9b:2e:87:4c:a8:df:31:57:82:8a:db:99:ed:ad:
         cd:f0:6d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kVzrT5hEd0drCYPJiTFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4
MmQ0M2EwHhcNMjYwNjEzMDYwMDM1WhcNMjYwNjE0MDYwMDM1WjAzMTEwLwYDVQQD
Eyg2NDFjM2UwNjcyOWI2ZDUwZWNiNWZhZWVjZTkxMDA1MmI0MGE3NzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAyYH+n5G4+lQ7ynkw44w9x27IdS
GrVLWkKUWx7iEuqQchASVY4xT3+8KKl6zyDk09qLI0FK/fYapdr02MMaF58mF4+R
AT4/ie2So1Jxi23qLmwh79esYeFT4JM1T3JFsEhM1FWaMiGjYIXygSxMkdKrDQ/G
C0/ZkM0Y9F7KHUCmRDTaT1jbqLdyKgisPsWTumJKlR7lo4TsHQGjx/mdP6kTS71U
veFcsOOCH5sgw4VkzsY5XDj5ohHz3jKEHVJmNyqyFKxZO81qBS2onmvA+22uhKr8
EL4kPbGfHldgizrxd+QfjnapCJfDL8PlZx+BuWPxCopQuUgscWyE9ZHNGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQcPgZym21Q7LX67s6RAFK0Cnc7MB8GA1UdIwQY
MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt
OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4
LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWT5/a+6
NLBuHTMR6Rn7MAy/awig9bfm05eY0cKwouj3aoCufErYKNPcMnIHLafp3Sup1Dor
3chJRZsZ+MUO+4tJimN8GrZmtbasHTkNWnW29Bazkre8a66HElJ9lhZb5fLvJliB
OHP/RsULNl5zq36zrFg1z8SQVk5nRPtfbVxvMedNvgdwXD11U9Qx7P+t/HKtRene
2fqd9UpHpb9JAEmAx1wJRvpDAoE6huEEnnsnPvkisrpQAdOE0wxdcWEuvEn6kQex
/ZcUvtktKFdtqKrj9SD/KUlu+GULk/1zH/RFwU0GiTpWogASYdfqI5suh0yo3zFX
gorbme2tzfBt0g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:43 2026 by rpki-client