Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File:                     25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier:          myd6R0tQWmKsrMPOqN9gzxfqN8EJeKUFEIQ8XYLF3Vs=
Subject key identifier:   DB:18:3A:6D:88:B3:A1:99:F8:DD:85:80:F3:82:5F:23:DE:E1:D6:84
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer:       /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial:       019EC036BDA30C6AC7013D74B4654B634108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number:          048C
Signing time:             Sat 13 Jun 2026 09:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:13 +0000
Files and hashes:         1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: nQt/+F9e4olLzdScyxGdeVhS+RopPBsLOu6GPVIadmI=)
                          2: SMH2Oc24_m72oqPVd7XOf3_OyRU.roa (hash: WsgzmpsbvE0g6zXQzhps2wgMNgXJq/ibUvwvE7MedyM=)
                          3: hS-zp-zfmueU5iHRFKC0O06b_Y8.roa (hash: bQDlMMAMtH4O8JePaz3JngoNBpURtKGCYa9QelbxBc8=)
                          4: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (hash: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:bd:a3:0c:6a:c7:01:3d:74:b4:65:4b:63:41:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
        Validity
            Not Before: Jun 13 09:01:13 2026 GMT
            Not After : Jun 14 09:01:13 2026 GMT
        Subject: CN=db183a6d88b3a199f8dd8580f3825f23dee1d684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:3c:1c:32:0f:8c:8a:35:91:c9:2b:64:85:
                    45:47:fa:f8:6d:97:b2:49:15:95:92:67:b2:9d:5c:
                    d7:53:a8:c9:8a:ab:e7:5e:98:86:aa:05:dd:37:be:
                    25:ec:83:64:13:07:2f:6a:b2:39:fc:a6:54:92:b3:
                    3e:0a:bd:a0:f9:81:c7:6a:65:3d:69:2d:3d:e7:a4:
                    45:61:78:54:34:70:51:c3:5c:e8:61:2d:7f:c2:11:
                    44:b4:2a:5a:4f:72:b6:37:66:37:3e:c3:ff:0c:01:
                    c9:4c:ea:93:2a:3f:49:7e:e9:fb:4b:9f:59:79:79:
                    5c:66:21:fe:b3:6b:94:79:fc:36:1b:85:a2:a0:49:
                    01:c0:4c:9b:28:64:ae:15:cb:7b:10:69:fa:27:03:
                    9c:b3:18:c0:5f:d8:47:a3:ed:65:2f:7e:3d:0c:2c:
                    b9:e9:0e:02:1e:a1:77:18:b5:f9:fc:74:f7:85:4d:
                    76:6f:17:30:79:7e:55:74:27:54:68:5d:28:d3:1d:
                    b7:11:ab:bf:2e:d2:b2:87:c8:d6:63:80:cd:78:75:
                    83:e8:17:c1:fb:29:5c:99:cb:65:63:35:bf:da:19:
                    bc:e4:b9:07:41:2f:af:df:14:ed:89:fb:b9:fc:b6:
                    25:c5:ff:de:37:db:6c:dc:94:df:f2:5e:94:0e:c8:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:18:3A:6D:88:B3:A1:99:F8:DD:85:80:F3:82:5F:23:DE:E1:D6:84
            X509v3 Authority Key Identifier:
                keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:dd:6c:da:b6:36:f8:0a:81:49:60:f1:74:c4:55:17:a3:
         44:82:c4:f1:0a:a4:e0:0a:24:f9:3b:54:94:cf:90:e0:5a:2a:
         bf:79:ea:1c:32:a6:c5:96:36:a4:fb:64:74:79:a1:36:dd:c9:
         f2:09:e1:7c:0d:45:14:b9:1a:53:77:d7:d3:25:23:19:df:de:
         eb:c9:64:38:7b:cb:6e:e2:4a:75:7d:87:58:28:ad:e1:59:f5:
         aa:3f:2e:fd:18:a2:5d:b1:86:a9:07:b5:44:a6:f3:cc:6d:92:
         e8:fe:24:20:6f:4a:e1:92:c5:25:f2:b5:a9:b2:07:60:f6:26:
         d3:18:d2:14:c8:e0:53:c8:0f:9c:5a:3b:00:0e:6f:62:7f:e2:
         bb:9c:7d:d2:13:3e:f1:3b:d8:ed:88:12:fb:31:75:d6:fb:99:
         22:07:30:78:a4:70:f6:34:6f:d1:38:5d:13:a5:91:3b:c0:60:
         a6:07:6c:24:8c:10:ca:ad:97:03:c2:30:ca:6a:ef:04:fa:ef:
         92:bc:d7:01:57:b3:00:3c:7b:14:0a:6f:ef:39:4d:77:11:7d:
         07:57:eb:f9:56:74:18:b8:57:d6:f4:5a:b2:71:d4:02:4d:9f:
         2a:a9:3a:88:0c:fe:f3:89:dc:36:50:4c:cc:17:ce:07:33:13:
         e1:3c:a0:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANr2jDGrHAT10tGVLY0EIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0
NTExMDMwHhcNMjYwNjEzMDkwMTEzWhcNMjYwNjE0MDkwMTEzWjAzMTEwLwYDVQQD
EyhkYjE4M2E2ZDg4YjNhMTk5ZjhkZDg1ODBmMzgyNWYyM2RlZTFkNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C88HDIPjIo1kckrZIVFR/r4bZey
SRWVkmeynVzXU6jJiqvnXpiGqgXdN74l7INkEwcvarI5/KZUkrM+Cr2g+YHHamU9
aS0956RFYXhUNHBRw1zoYS1/whFEtCpaT3K2N2Y3PsP/DAHJTOqTKj9Jfun7S59Z
eXlcZiH+s2uUefw2G4WioEkBwEybKGSuFct7EGn6JwOcsxjAX9hHo+1lL349DCy5
6Q4CHqF3GLX5/HT3hU12bxcweX5VdCdUaF0o0x23Eau/LtKyh8jWY4DNeHWD6BfB
+ylcmctlYzW/2hm85LkHQS+v3xTtifu5/LYlxf/eN9ts3JTf8l6UDsiLcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsYOm2Is6GZ+N2FgPOCXyPe4daEMB8GA1UdIwQY
MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt
ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3
LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfDdbNq2
NvgKgUlg8XTEVRejRILE8Qqk4Aok+TtUlM+Q4Foqv3nqHDKmxZY2pPtkdHmhNt3J
8gnhfA1FFLkaU3fX0yUjGd/e68lkOHvLbuJKdX2HWCit4Vn1qj8u/RiiXbGGqQe1
RKbzzG2S6P4kIG9K4ZLFJfK1qbIHYPYm0xjSFMjgU8gPnFo7AA5vYn/iu5x90hM+
8TvY7YgS+zF11vuZIgcweKRw9jRv0ThdE6WRO8BgpgdsJIwQyq2XA8IwymrvBPrv
krzXAVezADx7FApv7zlNdxF9B1fr+VZ0GLhX1vRasnHUAk2fKqk6iAz+84ncNlBM
zBfOBzMT4Tyg7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:28 2026 by rpki-client