Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
File:                     TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json)
Hash identifier:          sgqiZkrADcYVr2z+gkg5fCTrmP2vCdvWzHFtFEgGocc=
Subject key identifier:   52:CF:17:26:EA:DF:18:A2:58:80:5E:7E:D1:A8:6B:B1:CE:E9:21:29
Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
Certificate issuer:       /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Certificate serial:       019EBE112F48B858BB07AF572DC2C9CDCB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
Manifest number:          0296
Signing time:             Fri 12 Jun 2026 23:00:57 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:57 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:57 +0000
Files and hashes:         1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: lCD50vSiZf/kG8GPjmMe5zekeXjQUM7FPE/uf3wuT7w=)
                          2: zYL449gEhOrSRUOWk45-5w_QwxY.asa (hash: 2I3JzyYDlWOa37LiRrfqotSTSjqIyf07yQPMZe4sNg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:2f:48:b8:58:bb:07:af:57:2d:c2:c9:cd:cb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
        Validity
            Not Before: Jun 12 23:00:57 2026 GMT
            Not After : Jun 13 23:00:57 2026 GMT
        Subject: CN=52cf1726eadf18a258805e7ed1a86bb1cee92129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:5d:2b:d0:b8:e2:ca:41:d2:b5:a0:46:f0:
                    ac:c9:c2:6a:83:f1:56:31:12:aa:a9:8d:85:00:a5:
                    bf:8c:ca:0a:77:b7:67:a4:54:7d:9c:de:7b:59:8e:
                    6d:1b:94:92:b6:a5:1e:7f:bf:96:64:cb:c7:10:24:
                    da:aa:bb:42:56:e5:ad:a9:43:64:f1:df:d6:93:b7:
                    57:d7:ec:8b:62:8f:10:ce:b7:80:2d:48:13:41:d8:
                    71:9a:3e:02:10:9d:ce:37:32:00:14:88:e3:78:34:
                    bb:5b:e5:bc:6c:3c:11:15:14:36:01:da:5d:03:ee:
                    f1:12:85:00:cd:6f:ec:85:bf:75:ed:64:7f:aa:17:
                    51:02:07:9e:91:5b:9c:66:7f:99:d7:e6:be:db:53:
                    be:2c:d2:5d:97:87:73:d4:e4:c5:76:80:4c:58:12:
                    4e:28:3e:8d:a0:37:e5:42:a0:e9:1d:51:02:e2:31:
                    d8:95:19:f2:d2:88:77:87:a8:9e:af:bc:9a:66:fe:
                    51:c6:5a:77:03:c8:09:83:9f:23:39:bf:98:78:ce:
                    b3:44:4d:ab:0b:af:0f:ad:8a:e3:70:24:ea:77:58:
                    51:47:a8:7c:b7:72:b7:24:1c:1b:75:5a:c5:3e:d2:
                    35:e0:57:2d:fc:8b:22:a6:d8:47:f7:cc:99:e6:2b:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CF:17:26:EA:DF:18:A2:58:80:5E:7E:D1:A8:6B:B1:CE:E9:21:29
            X509v3 Authority Key Identifier:
                keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8c:c0:5e:91:57:e5:4c:ed:3d:00:26:cd:58:a3:cd:52:65:
         de:07:69:8e:8a:51:74:f2:2a:04:02:86:cc:5d:d1:b9:7b:c2:
         3e:23:ff:7c:14:e1:a4:6e:63:6f:a1:c3:6f:92:58:f1:56:b6:
         81:63:57:6c:da:14:26:9a:ec:dc:fe:f2:66:c2:bc:4d:56:31:
         8a:0e:ac:bb:3f:5b:61:39:19:a1:3e:6c:98:58:69:c2:4e:c4:
         05:a2:d5:ad:81:62:0b:8c:bd:45:c0:ab:b2:01:b1:62:9f:20:
         39:8c:21:5c:94:f3:a0:48:06:29:81:49:f4:f7:52:4f:b2:91:
         e5:be:98:06:91:b7:3f:06:57:f0:d7:6c:ee:70:f6:a3:42:26:
         07:55:a2:42:1d:39:05:dd:b0:2e:bf:aa:de:e4:e0:48:d8:e1:
         0e:cf:5b:91:ae:0e:32:4a:49:19:36:63:08:d8:99:d7:87:1b:
         b4:8b:99:ae:25:a7:45:c4:cf:6f:c5:3a:57:a9:5d:a3:0d:ce:
         00:e2:c6:43:82:9e:92:67:6b:76:f6:d0:8d:84:7e:fa:1e:54:
         5b:31:24:c0:73:84:4b:87:86:23:09:52:c7:03:c5:f5:56:69:
         61:c1:6a:c8:6a:55:ae:84:5d:1c:75:ac:92:d3:76:c8:02:3f:
         70:07:4e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ES9IuFi7B69XLcLJzctoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYmMyNmFiMzRjODMxOTc0MzMyZGQzOTlhOGU1NmU5YWE5
YjdiODUwHhcNMjYwNjEyMjMwMDU3WhcNMjYwNjEzMjMwMDU3WjAzMTEwLwYDVQQD
Eyg1MmNmMTcyNmVhZGYxOGEyNTg4MDVlN2VkMWE4NmJiMWNlZTkyMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeZdK9C44spB0rWgRvCsycJqg/FW
MRKqqY2FAKW/jMoKd7dnpFR9nN57WY5tG5SStqUef7+WZMvHECTaqrtCVuWtqUNk
8d/Wk7dX1+yLYo8QzreALUgTQdhxmj4CEJ3ONzIAFIjjeDS7W+W8bDwRFRQ2Adpd
A+7xEoUAzW/shb917WR/qhdRAgeekVucZn+Z1+a+21O+LNJdl4dz1OTFdoBMWBJO
KD6NoDflQqDpHVEC4jHYlRny0oh3h6ier7yaZv5Rxlp3A8gJg58jOb+YeM6zRE2r
C68PrYrjcCTqd1hRR6h8t3K3JBwbdVrFPtI14Fct/IsipthH98yZ5iuwCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLPFybq3xiiWIBeftGoa7HO6SEpMB8GA1UdIwQY
MBaAFE68Jqs0yDGXQzLdOZqOVumqm3uFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQt
YmViNzkwZGE1YjRmLzEvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQtYmViNzkwZGE1YjRm
LzEvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYzAXpFX
5UztPQAmzVijzVJl3gdpjopRdPIqBAKGzF3RuXvCPiP/fBThpG5jb6HDb5JY8Va2
gWNXbNoUJprs3P7yZsK8TVYxig6suz9bYTkZoT5smFhpwk7EBaLVrYFiC4y9RcCr
sgGxYp8gOYwhXJTzoEgGKYFJ9PdST7KR5b6YBpG3PwZX8Nds7nD2o0ImB1WiQh05
Bd2wLr+q3uTgSNjhDs9bka4OMkpJGTZjCNiZ14cbtIuZriWnRcTPb8U6V6ldow3O
AOLGQ4KekmdrdvbQjYR++h5UWzEkwHOES4eGIwlSxwPF9VZpYcFqyGpVroRdHHWs
ktN2yAI/cAdO4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:58 2026 by rpki-client