Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File:                     LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier:          L2xGchzHs0mM+tsv4Ag7s+zTsU7q6wi3V512pqvZqts=
Subject key identifier:   33:F7:CB:62:8C:B7:BC:B5:D1:AF:FD:26:B7:94:F4:BB:35:CF:FC:5F
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer:       /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial:       019EBFC81958FF200C3CCD8F59490D9260F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number:          11E3
Signing time:             Sat 13 Jun 2026 07:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:22 +0000
Files and hashes:         1: KhWNkr5gAw1c6ddmTPeSiEEfFWg.roa (hash: BfC/J8Ikas8k6I01UNkrtdj0AZZqj/UTxvhIrki0FuQ=)
                          2: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: WiUrYA6xJs2fz07Q2FUlROQ7gdk6TnwLdlLPuuaOZG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:19:58:ff:20:0c:3c:cd:8f:59:49:0d:92:60:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
        Validity
            Not Before: Jun 13 07:00:22 2026 GMT
            Not After : Jun 14 07:00:22 2026 GMT
        Subject: CN=33f7cb628cb7bcb5d1affd26b794f4bb35cffc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:a1:b4:bf:ba:d2:d2:9d:7a:ac:cf:f4:fa:
                    ae:f8:af:ce:b6:36:7c:42:3e:4c:42:dc:b8:db:94:
                    56:59:8c:9b:5b:4d:1f:c6:e0:eb:da:50:2e:c8:ae:
                    4d:e0:ea:64:ac:71:16:1d:da:5d:f5:41:01:ef:2b:
                    fa:88:3f:9b:64:29:d4:be:9a:ea:ad:6a:0f:bc:1b:
                    54:32:5b:88:44:98:31:0f:ab:33:b0:96:58:3d:d6:
                    31:87:b6:1c:2c:8e:91:32:ea:67:ab:5e:94:11:a3:
                    83:aa:e8:3c:4f:85:f3:1b:49:b2:1a:5c:19:5f:08:
                    43:62:8a:74:11:91:a0:eb:1c:3a:ff:e6:6b:08:28:
                    a3:08:63:2d:06:df:cf:00:3b:a8:07:ba:52:60:a3:
                    a6:46:bf:f8:c1:d4:ac:9e:87:7e:c2:05:9b:7b:ff:
                    31:dc:11:02:d0:90:b3:f7:c9:ec:6c:bf:57:a9:15:
                    c1:7d:e8:58:e1:cd:f4:39:da:93:ed:d7:3e:9e:e3:
                    ab:c8:c2:3c:96:25:24:82:88:49:8e:4c:c0:b1:50:
                    af:11:d7:05:d8:e0:87:49:b4:77:45:32:0c:fa:41:
                    dd:6a:7b:75:c4:fa:72:ec:ba:3a:6f:2f:18:fa:65:
                    72:bb:7e:9c:35:df:19:22:a3:18:6a:ad:ac:33:92:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F7:CB:62:8C:B7:BC:B5:D1:AF:FD:26:B7:94:F4:BB:35:CF:FC:5F
            X509v3 Authority Key Identifier:
                keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:02:6a:9f:06:1b:d5:df:cc:af:b3:04:2f:ca:fd:7a:2e:65:
         3b:1e:1c:d6:7a:36:32:1e:60:84:f0:f0:cc:7d:7b:04:1e:cc:
         b5:00:a1:c6:65:27:1c:60:87:02:af:fd:ac:2e:35:9e:95:cd:
         44:7a:6b:0e:88:d2:d0:7c:ff:f7:7e:7f:87:12:8d:f7:06:6c:
         65:9c:79:81:20:72:67:12:b8:e6:82:13:99:4b:c6:69:15:ca:
         6b:99:0f:b3:47:3c:01:02:09:b2:23:e0:d9:3a:38:cb:33:e0:
         79:9f:2a:fc:9b:41:6d:9e:50:3b:73:96:53:f0:9d:cd:e6:e3:
         5e:00:a5:5a:c1:de:88:79:f6:5a:16:f3:9b:d6:96:af:48:c4:
         b8:a3:b1:be:c1:f0:36:40:67:e9:82:3f:bb:1b:f3:fe:bd:d0:
         96:dd:23:da:cf:5f:f2:bb:ec:ce:a0:fd:cc:24:37:b9:b0:91:
         44:56:4d:47:3d:c6:90:e7:e6:75:4b:fc:05:09:11:7a:ad:73:
         a2:79:6b:5e:af:98:e5:15:1e:9d:32:bb:77:03:c8:1e:41:8e:
         e9:f8:ef:61:29:93:82:4d:0a:b0:3e:43:c3:8e:7f:c5:7d:5b:
         b8:e2:63:91:f0:a1:93:95:ea:8e:00:06:62:c2:8f:a2:37:22:
         44:25:24:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yBlY/yAMPM2PWUkNkmD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjYwNjEzMDcwMDIyWhcNMjYwNjE0MDcwMDIyWjAzMTEwLwYDVQQD
EygzM2Y3Y2I2MjhjYjdiY2I1ZDFhZmZkMjZiNzk0ZjRiYjM1Y2ZmYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW2htL+60tKdeqzP9Pqu+K/OtjZ8
Qj5MQty425RWWYybW00fxuDr2lAuyK5N4OpkrHEWHdpd9UEB7yv6iD+bZCnUvprq
rWoPvBtUMluIRJgxD6szsJZYPdYxh7YcLI6RMupnq16UEaODqug8T4XzG0myGlwZ
XwhDYop0EZGg6xw6/+ZrCCijCGMtBt/PADuoB7pSYKOmRr/4wdSsnod+wgWbe/8x
3BEC0JCz98nsbL9XqRXBfehY4c30OdqT7dc+nuOryMI8liUkgohJjkzAsVCvEdcF
2OCHSbR3RTIM+kHdant1xPpy7Lo6by8Y+mVyu36cNd8ZIqMYaq2sM5ItEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP3y2KMt7y10a/9JreU9Ls1z/xfMB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQJqnwYb
1d/Mr7MEL8r9ei5lOx4c1no2Mh5ghPDwzH17BB7MtQChxmUnHGCHAq/9rC41npXN
RHprDojS0Hz/935/hxKN9wZsZZx5gSByZxK45oITmUvGaRXKa5kPs0c8AQIJsiPg
2To4yzPgeZ8q/JtBbZ5QO3OWU/CdzebjXgClWsHeiHn2Whbzm9aWr0jEuKOxvsHw
NkBn6YI/uxvz/r3Qlt0j2s9f8rvszqD9zCQ3ubCRRFZNRz3GkOfmdUv8BQkReq1z
onlrXq+Y5RUenTK7dwPIHkGO6fjvYSmTgk0KsD5Dw45/xX1buOJjkfChk5XqjgAG
YsKPojciRCUkxw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:41:21 2026 by rpki-client