Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File:                     dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier:          kMYqb/0tZw+j1xybd2YFdyEfBu379J1fvWO5yTzkhpU=
Subject key identifier:   C8:56:89:37:43:45:2E:48:A3:D1:20:8C:EE:18:AB:E8:4E:0F:FB:D2
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer:       /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial:       019EC2245D7F10F26B6550624504C69FC107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number:          0DC6
Signing time:             Sat 13 Jun 2026 18:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:23 +0000
Files and hashes:         1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
                          2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: nBdK0av6KegtL8D9mo8imEOPAYAgrEsTdNOEGJE25VY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:5d:7f:10:f2:6b:65:50:62:45:04:c6:9f:c1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
        Validity
            Not Before: Jun 13 18:00:23 2026 GMT
            Not After : Jun 14 18:00:23 2026 GMT
        Subject: CN=c856893743452e48a3d1208cee18abe84e0ffbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:18:6d:9d:9a:de:d4:cf:f9:bd:b8:8f:67:
                    b2:cf:9a:ab:c7:25:a2:5a:12:83:84:78:e5:8b:97:
                    cc:e8:e3:79:1b:2c:37:45:75:6c:e1:01:d3:8e:de:
                    9f:8d:87:ae:bb:3c:e7:6c:44:f7:c0:5c:c2:19:36:
                    99:7b:28:01:61:8e:3f:b5:07:82:92:23:fd:69:fe:
                    22:2d:69:d3:be:5c:59:1c:d8:25:a3:45:ff:0f:19:
                    b8:29:cb:3d:83:ce:44:90:e9:1d:94:77:b4:6b:64:
                    40:5b:74:07:e7:4b:45:48:73:2f:1a:9b:80:92:b9:
                    5e:d2:12:f9:a5:b4:90:a6:bc:f2:87:64:a3:f3:a5:
                    f4:86:b3:99:3b:71:c9:4c:54:e2:d7:0e:9b:9e:28:
                    7b:1e:2d:d3:d8:58:79:df:c6:fd:91:75:f6:fb:c6:
                    48:cc:4f:19:18:70:7f:24:b0:99:8f:f8:33:af:97:
                    b6:4d:c2:86:3f:18:61:79:d5:f6:3d:43:d9:01:54:
                    55:96:bc:e7:7e:3b:fa:30:30:ef:68:5c:6f:e9:78:
                    ff:a2:b5:a4:3e:e2:59:1b:66:03:66:52:ef:91:e1:
                    a6:dc:8c:89:1f:f3:60:34:8b:3f:e4:59:42:3e:c2:
                    06:20:cc:3b:03:5a:a6:0a:45:58:40:ac:8d:38:f8:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:56:89:37:43:45:2E:48:A3:D1:20:8C:EE:18:AB:E8:4E:0F:FB:D2
            X509v3 Authority Key Identifier:
                keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:44:1a:ff:87:04:50:27:08:49:e0:c9:17:f4:f7:39:cd:
         e5:c4:e3:22:bd:7d:17:38:84:00:b0:d8:86:cd:bc:5e:fc:8e:
         ed:b3:fb:47:74:e5:ed:de:91:eb:79:dd:e8:05:3b:da:bb:54:
         e4:8b:8e:c9:22:16:02:1e:63:4d:66:82:8f:ee:16:d3:6a:f2:
         e4:5f:08:bb:0a:e6:9c:76:0a:09:45:49:5e:d5:06:86:69:f1:
         88:a2:ba:b9:6c:82:c1:0e:59:46:62:c4:8e:1e:e0:aa:2e:8a:
         f7:be:e3:b2:ca:d7:c5:31:9d:04:9c:9e:69:8d:90:cf:50:4e:
         00:5e:0a:c5:cf:9f:4a:80:2c:20:75:3d:38:13:2a:22:ec:03:
         2f:4e:2b:ba:60:23:ba:17:cb:e8:da:e7:2e:1e:3c:be:e0:da:
         f2:7e:b7:1a:b2:d0:30:0a:11:b2:8d:0f:37:64:58:8f:f3:10:
         4c:3b:84:f5:d9:1c:67:74:99:77:77:c2:ab:58:ef:8c:a6:55:
         2d:a7:88:66:d1:4d:f8:01:51:7e:1d:d5:34:de:bd:e5:6f:80:
         0f:73:16:a4:da:b8:a6:37:2b:d8:d9:45:69:14:8e:3c:66:a9:
         88:a0:9a:4a:10:15:c9:fa:ce:6b:71:dd:5f:38:79:f8:d4:3a:
         5d:86:62:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJF1/EPJrZVBiRQTGn8EHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NmZiYTQ2NjM0ZDIyYjkzZGIxYmY0NmVjNWE4ZDY2NWU2
MmRhYzcwHhcNMjYwNjEzMTgwMDIzWhcNMjYwNjE0MTgwMDIzWjAzMTEwLwYDVQQD
EyhjODU2ODkzNzQzNDUyZTQ4YTNkMTIwOGNlZTE4YWJlODRlMGZmYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokoYbZ2a3tTP+b24j2eyz5qrxyWi
WhKDhHjli5fM6ON5Gyw3RXVs4QHTjt6fjYeuuzznbET3wFzCGTaZeygBYY4/tQeC
kiP9af4iLWnTvlxZHNglo0X/Dxm4Kcs9g85EkOkdlHe0a2RAW3QH50tFSHMvGpuA
krle0hL5pbSQprzyh2Sj86X0hrOZO3HJTFTi1w6bnih7Hi3T2Fh538b9kXX2+8ZI
zE8ZGHB/JLCZj/gzr5e2TcKGPxhhedX2PUPZAVRVlrznfjv6MDDvaFxv6Xj/orWk
PuJZG2YDZlLvkeGm3IyJH/NgNIs/5FlCPsIGIMw7A1qmCkVYQKyNOPhC8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhWiTdDRS5Io9EgjO4Yq+hOD/vSMB8GA1UdIwQY
MBaAFHVvukZjTSK5PbG/RuxajWZeYtrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTct
ZDNhZGM3NDQ5MzkxLzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTctZDNhZGM3NDQ5Mzkx
LzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPD9EGv+H
BFAnCEngyRf09znN5cTjIr19FziEALDYhs28XvyO7bP7R3Tl7d6R63nd6AU72rtU
5IuOySIWAh5jTWaCj+4W02ry5F8IuwrmnHYKCUVJXtUGhmnxiKK6uWyCwQ5ZRmLE
jh7gqi6K977jssrXxTGdBJyeaY2Qz1BOAF4Kxc+fSoAsIHU9OBMqIuwDL04rumAj
uhfL6NrnLh48vuDa8n63GrLQMAoRso0PN2RYj/MQTDuE9dkcZ3SZd3fCq1jvjKZV
LaeIZtFN+AFRfh3VNN695W+AD3MWpNq4pjcr2NlFaRSOPGapiKCaShAVyfrOa3Hd
Xzh5+NQ6XYZiRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:48 2026 by rpki-client