Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
File:                     0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json)
Hash identifier:          h4RJ/gXaqiTdJDjzLnbcIi71nkpL2CBcp4fRn3IPHEs=
Subject key identifier:   7A:BE:A1:B9:05:5F:EC:6D:02:96:98:FE:DD:39:E4:10:33:92:41:F4
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Certificate issuer:       /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial:       019EBDA2D3738ED8D30DFE775884FCD6956D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
Manifest number:          0B8E
Signing time:             Fri 12 Jun 2026 21:00:25 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:25 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:25 +0000
Files and hashes:         1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: E05XlfJgeDNycMCnhdsMFGf90pLFKUJn/ugJwo0J2+4=)
                          2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=)
                          3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=)
                          4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=)
                          5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=)
                          6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=)
                          7: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=)
                          8: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=)
                          9: S3LSGjrV7uABu8qEE_ahYBI7SkU.roa (hash: X5ME7tz1ZHkzkoANVkGErwtBAD9pTrBBL5KsvqoJ5Yo=)
                          10: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=)
                          11: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=)
                          12: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=)
                          13: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=)
                          14: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=)
                          15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=)
                          16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=)
                          17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=)
                          18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=)
                          19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:d3:73:8e:d8:d3:0d:fe:77:58:84:fc:d6:95:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
        Validity
            Not Before: Jun 12 21:00:25 2026 GMT
            Not After : Jun 13 21:00:25 2026 GMT
        Subject: CN=7abea1b9055fec6d029698fedd39e410339241f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:06:66:9e:46:64:8c:83:e2:54:3c:16:0a:
                    23:ca:90:69:88:6c:94:58:93:1c:ff:a2:21:49:ee:
                    14:ca:c1:52:f6:d2:4f:32:ad:64:c8:c5:99:90:0a:
                    a3:20:b1:49:a6:98:60:89:ed:dd:b6:0a:44:06:f7:
                    74:59:a8:7f:2b:07:6d:d2:03:35:d0:89:5c:b7:db:
                    ed:5a:bb:7b:6c:7d:ea:e9:a7:d7:2d:ee:f9:c4:7c:
                    47:87:38:11:61:a1:8b:55:ef:b9:72:bc:85:51:b4:
                    fc:4c:ac:86:56:35:05:ef:9e:6b:be:38:44:c8:77:
                    c9:9c:bf:20:c2:33:f6:22:29:62:25:6d:05:50:45:
                    ec:9c:eb:df:35:69:42:87:a4:90:f1:48:69:dc:44:
                    4a:82:60:8b:2d:4a:fa:dc:52:8d:af:2c:01:19:5c:
                    09:0a:8c:c1:f0:9e:45:d5:f5:17:60:af:ee:c3:16:
                    e0:5f:47:11:ea:c5:13:da:0d:da:0b:3b:63:a6:04:
                    57:ea:26:19:bf:36:53:79:29:48:76:83:51:58:10:
                    c8:37:03:9c:61:0b:3a:6a:92:18:e7:f7:56:d0:4f:
                    0f:41:0d:46:7b:93:66:b6:b3:12:61:f9:51:bd:96:
                    ec:40:8e:3b:09:1f:f2:51:34:7a:0b:88:4f:e0:f2:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BE:A1:B9:05:5F:EC:6D:02:96:98:FE:DD:39:E4:10:33:92:41:F4
            X509v3 Authority Key Identifier:
                keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:90:97:9e:18:d9:a0:fd:86:7f:7b:e0:04:14:24:3f:45:
         e2:c3:61:83:27:c2:76:07:f9:17:e7:e7:b9:71:da:7f:70:63:
         a5:ac:e3:04:d5:ee:fd:7d:f8:b0:9c:30:4b:3a:4f:58:b2:67:
         72:27:9d:13:45:94:c8:74:fd:a9:78:3a:ec:60:b4:2b:1f:f6:
         12:5f:cb:2a:85:03:c6:c3:b0:41:c8:55:14:38:38:f5:58:6f:
         de:dc:06:2c:ea:ca:be:48:c6:80:77:ef:eb:cd:17:a9:78:92:
         90:a7:75:56:f3:f0:17:f0:08:54:de:01:bc:e3:e1:93:35:55:
         c3:c8:f8:92:1c:5f:41:91:d7:62:48:a9:fa:f7:1c:c6:39:e1:
         06:cb:01:25:ed:77:0a:31:31:0f:ba:f8:4b:96:e0:af:22:3b:
         ab:91:e2:64:40:cb:cf:c6:4a:f2:c5:23:8e:ef:a6:ad:f7:6f:
         60:b5:30:f4:b0:7f:1a:94:b0:4a:a7:87:b0:c8:b1:9b:87:88:
         97:c5:9e:4c:2d:d4:66:44:61:be:b9:85:71:23:0e:3d:f0:30:
         e1:a0:92:c6:67:7e:73:72:5f:10:b2:cd:c2:a2:4e:2a:df:2d:
         78:9d:69:e6:f2:8c:ef:f7:cc:6e:dd:39:37:a7:5b:53:ea:0d:
         1c:de:7f:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69otNzjtjTDf53WIT81pVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjYwNjEyMjEwMDI1WhcNMjYwNjEzMjEwMDI1WjAzMTEwLwYDVQQD
Eyg3YWJlYTFiOTA1NWZlYzZkMDI5Njk4ZmVkZDM5ZTQxMDMzOTI0MWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTUGZp5GZIyD4lQ8FgojypBpiGyU
WJMc/6IhSe4UysFS9tJPMq1kyMWZkAqjILFJpphgie3dtgpEBvd0Wah/Kwdt0gM1
0Ilct9vtWrt7bH3q6afXLe75xHxHhzgRYaGLVe+5cryFUbT8TKyGVjUF755rvjhE
yHfJnL8gwjP2IiliJW0FUEXsnOvfNWlCh6SQ8Uhp3ERKgmCLLUr63FKNrywBGVwJ
CozB8J5F1fUXYK/uwxbgX0cR6sUT2g3aCztjpgRX6iYZvzZTeSlIdoNRWBDINwOc
YQs6apIY5/dW0E8PQQ1Ge5NmtrMSYflRvZbsQI47CR/yUTR6C4hP4PJvVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq+obkFX+xtApaY/t055BAzkkH0MB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX76Ql54Y
2aD9hn974AQUJD9F4sNhgyfCdgf5F+fnuXHaf3BjpazjBNXu/X34sJwwSzpPWLJn
ciedE0WUyHT9qXg67GC0Kx/2El/LKoUDxsOwQchVFDg49Vhv3twGLOrKvkjGgHfv
680XqXiSkKd1VvPwF/AIVN4BvOPhkzVVw8j4khxfQZHXYkip+vccxjnhBssBJe13
CjExD7r4S5bgryI7q5HiZEDLz8ZK8sUjju+mrfdvYLUw9LB/GpSwSqeHsMixm4eI
l8WeTC3UZkRhvrmFcSMOPfAw4aCSxmd+c3JfELLNwqJOKt8teJ1p5vKM7/fMbt05
N6dbU+oNHN5/Ew==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:52 2026 by rpki-client