Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
File:                     SjUhO60WmUgIOMBVgPB44kHetYo.mft (raw, json)
Hash identifier:          PTk6nYPUgb5WTpLREO/6h8UtkV49lG4GP+GgYwFtqcI=
Subject key identifier:   DA:6C:AD:E5:F6:B4:BA:1D:BC:D6:5F:C6:6D:26:31:C2:5D:0D:F2:A3
Authority key identifier: 4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A
Certificate issuer:       /CN=4a35213bad1699480838c05580f078e241deb58a
Certificate serial:       019EC148CD5A832110FF1D8B517B3EA68AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
Manifest number:          6A
Signing time:             Sat 13 Jun 2026 14:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:34 +0000
Files and hashes:         1: SjUhO60WmUgIOMBVgPB44kHetYo.crl (hash: HpCVwk9BbqGhb5b48opWhPqpyz1GOK6Op8cRf5kiblQ=)
                          2: V1EGIfr7BvBMfahUaU4NVnlqdEQ.roa (hash: JrfQTYX7TC++GoVkr1xgTObKGu86dQxHF4+9hinDHN8=)
                          3: e_PoDcp11oHj3X7XTipT_OU4OPQ.roa (hash: +Lh+HAKbeHouZEc3ttgnD9FzVZd95ZF99HpVIGLvd0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:cd:5a:83:21:10:ff:1d:8b:51:7b:3e:a6:8a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a35213bad1699480838c05580f078e241deb58a
        Validity
            Not Before: Jun 13 14:00:34 2026 GMT
            Not After : Jun 14 14:00:34 2026 GMT
        Subject: CN=da6cade5f6b4ba1dbcd65fc66d2631c25d0df2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:f0:db:3b:b3:87:5c:fa:b5:36:03:e9:ae:
                    bf:c9:0b:84:2f:6e:54:9c:82:88:a8:4d:f3:58:de:
                    78:d4:5e:7b:0b:d8:09:c6:fd:49:52:f5:67:82:59:
                    f7:db:06:04:be:62:28:05:53:17:6b:74:9a:85:41:
                    74:af:9a:66:c8:0c:d3:a9:a8:cd:e8:f5:08:3d:54:
                    26:13:7e:d9:04:c5:87:f6:db:24:5a:46:91:c4:cd:
                    a6:b5:e7:39:43:89:5a:f9:94:1d:20:26:ea:91:eb:
                    71:8b:4b:5a:fd:ae:31:e7:70:37:aa:af:72:09:18:
                    ce:a0:7b:4b:16:23:a6:5f:09:f9:46:9c:66:c8:ac:
                    fa:be:bd:2b:56:ea:c4:34:cd:37:92:87:7f:44:13:
                    df:c9:ce:f5:87:cb:01:66:64:02:a3:35:45:fc:97:
                    df:95:07:5c:2f:c8:b3:37:e3:31:c2:d8:ae:46:8b:
                    5d:4d:28:40:37:1e:79:12:ea:2e:4d:59:fa:4f:57:
                    38:93:57:6f:7d:15:70:4c:c6:44:ac:df:de:bb:7d:
                    b9:0d:5c:da:3d:45:27:42:56:3b:6b:3c:4c:7f:5e:
                    d9:46:63:ee:b2:4f:18:2d:3b:bf:28:b0:97:36:ca:
                    33:e6:9a:6a:b3:75:49:a7:59:ef:12:6f:2e:4b:8e:
                    75:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6C:AD:E5:F6:B4:BA:1D:BC:D6:5F:C6:6D:26:31:C2:5D:0D:F2:A3
            X509v3 Authority Key Identifier:
                keyid:4A:35:21:3B:AD:16:99:48:08:38:C0:55:80:F0:78:E2:41:DE:B5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjUhO60WmUgIOMBVgPB44kHetYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/712fe5-fcc9-4695-a194-2fd33b210e76/1/SjUhO60WmUgIOMBVgPB44kHetYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6e:da:5c:ba:dd:9e:2d:c2:97:ff:a1:ce:51:7e:ee:1f:c1:
         1d:eb:48:1f:d3:0a:fe:bc:f5:1a:b2:5f:ee:72:c9:9a:5f:d3:
         8a:96:e2:c0:aa:e0:ee:3b:12:1f:dc:88:f4:32:a8:0c:5b:b0:
         12:2a:40:e2:a1:98:79:49:3c:7e:ae:4d:9c:c5:ca:27:e2:29:
         59:b5:33:23:df:c2:5d:b4:4d:64:28:27:d6:81:fb:b0:6b:8c:
         fd:08:a4:3c:5a:dc:01:ce:35:5a:ea:94:56:97:c8:5d:bb:27:
         cf:6d:20:9c:ad:b1:03:80:45:78:51:ab:87:f7:5c:9e:12:5a:
         27:a7:ca:a3:e9:e4:3e:0f:2a:1d:b5:04:bf:f0:95:0b:8c:56:
         b5:78:25:71:18:a6:14:e7:43:07:9f:aa:3b:05:70:17:6c:77:
         3e:46:8d:e7:81:03:f2:55:27:ee:4a:9b:87:c2:15:9c:f0:b1:
         2b:a4:0f:2e:93:2a:5f:77:ca:1c:76:79:0a:c7:8d:83:d4:82:
         8e:ff:8f:2c:c6:88:db:46:19:e3:e8:53:fc:8d:f2:f8:05:b9:
         55:2f:84:22:8c:b4:67:de:58:97:27:07:1b:5d:26:3f:e5:5b:
         43:34:5c:04:a3:52:a9:ca:c2:7d:8d:3b:79:d2:1f:f1:d3:14:
         f9:24:8d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSM1agyEQ/x2LUXs+porpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMzUyMTNiYWQxNjk5NDgwODM4YzA1NTgwZjA3OGUyNDFk
ZWI1OGEwHhcNMjYwNjEzMTQwMDM0WhcNMjYwNjE0MTQwMDM0WjAzMTEwLwYDVQQD
EyhkYTZjYWRlNWY2YjRiYTFkYmNkNjVmYzY2ZDI2MzFjMjVkMGRmMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCDw2zuzh1z6tTYD6a6/yQuEL25U
nIKIqE3zWN541F57C9gJxv1JUvVngln32wYEvmIoBVMXa3SahUF0r5pmyAzTqajN
6PUIPVQmE37ZBMWH9tskWkaRxM2mtec5Q4la+ZQdICbqketxi0ta/a4x53A3qq9y
CRjOoHtLFiOmXwn5RpxmyKz6vr0rVurENM03kod/RBPfyc71h8sBZmQCozVF/Jff
lQdcL8izN+MxwtiuRotdTShANx55EuouTVn6T1c4k1dvfRVwTMZErN/eu325DVza
PUUnQlY7azxMf17ZRmPusk8YLTu/KLCXNsoz5ppqs3VJp1nvEm8uS451YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpsreX2tLodvNZfxm0mMcJdDfKjMB8GA1UdIwQY
MBaAFEo1ITutFplICDjAVYDweOJB3rWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQt
MmZkMzNiMjEwZTc2LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83MTJmZTUtZmNjOS00Njk1LWExOTQtMmZkMzNiMjEwZTc2
LzEvU2pVaE82MFdtVWdJT01CVmdQQjQ0a0hldFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW7aXLrd
ni3Cl/+hzlF+7h/BHetIH9MK/rz1GrJf7nLJml/TipbiwKrg7jsSH9yI9DKoDFuw
EipA4qGYeUk8fq5NnMXKJ+IpWbUzI9/CXbRNZCgn1oH7sGuM/QikPFrcAc41WuqU
VpfIXbsnz20gnK2xA4BFeFGrh/dcnhJaJ6fKo+nkPg8qHbUEv/CVC4xWtXglcRim
FOdDB5+qOwVwF2x3PkaN54ED8lUn7kqbh8IVnPCxK6QPLpMqX3fKHHZ5CseNg9SC
jv+PLMaI20YZ4+hT/I3y+AW5VS+EIoy0Z95YlycHG10mP+VbQzRcBKNSqcrCfY07
edIf8dMU+SSNeg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:01:48 2026 by rpki-client