Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File:                     M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier:          aZND8/o4rV9s7cQUoHzHLD8RNTNCoa/hEZyMhh3rKak=
Subject key identifier:   4F:46:D1:89:9F:98:59:1B:9B:F6:3B:F2:F7:2E:12:DC:CD:B4:A5:E0
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer:       /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial:       019ED3F412D4D474C42EFC4382B93B9B07F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number:          1966
Signing time:             Wed 17 Jun 2026 05:00:48 +0000
Manifest this update:     Wed 17 Jun 2026 05:00:48 +0000
Manifest next update:     Thu 18 Jun 2026 05:00:48 +0000
Files and hashes:         1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: Ut23FloJI3PoJ/tAUvudYpTKAEv/msgsQIV/bRzLsFM=)
                          2: aTwucs9Pwvr6YSYXdadFRJo6hLs.roa (hash: ilcm0/S70CqecxpFPp/FDen+jHt9VTiUtWGnp7lMb1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:12:d4:d4:74:c4:2e:fc:43:82:b9:3b:9b:07:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
        Validity
            Not Before: Jun 17 05:00:48 2026 GMT
            Not After : Jun 18 05:00:48 2026 GMT
        Subject: CN=4f46d1899f98591b9bf63bf2f72e12dccdb4a5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:82:03:d0:fe:c3:5d:fb:d2:af:ef:fe:75:aa:
                    d7:65:90:97:39:bb:20:a6:c0:a5:41:73:b2:4a:de:
                    19:13:2c:35:38:4a:cd:ed:5a:2d:cb:53:47:b9:0c:
                    3a:d5:b2:29:ae:40:54:f7:94:ec:37:3a:1a:d5:13:
                    b5:20:45:9b:09:8b:52:61:68:8c:3c:c3:de:be:00:
                    58:85:02:db:c9:88:43:86:48:7b:df:ac:52:00:80:
                    a6:5d:2d:c5:37:24:c3:f2:15:03:cc:d8:19:6d:20:
                    0e:92:0c:73:67:7c:ce:f8:c2:e7:07:a5:b0:41:95:
                    9e:35:d0:d9:36:84:1b:73:67:7b:44:66:d3:1d:35:
                    a6:39:82:99:96:ba:83:f2:6a:f6:0f:c6:39:09:04:
                    f0:fb:8d:fc:18:ea:19:a4:b3:49:98:d1:6b:d8:30:
                    31:c2:13:07:16:13:fe:f5:50:f4:7e:66:85:cd:b6:
                    93:c7:58:db:89:03:4b:08:1d:73:d8:8c:c5:5d:12:
                    f7:9f:69:03:6f:4a:b6:dc:7e:06:c4:74:e8:ab:e8:
                    ca:0d:7b:30:e5:c9:9a:76:60:33:3d:79:ef:b8:a0:
                    e8:85:db:4c:e9:7d:d2:60:bb:9b:a6:44:c6:69:99:
                    84:f4:e8:6d:fc:f0:8e:93:8c:20:d7:7f:4d:2b:a4:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:46:D1:89:9F:98:59:1B:9B:F6:3B:F2:F7:2E:12:DC:CD:B4:A5:E0
            X509v3 Authority Key Identifier:
                keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:c0:1f:00:cb:ab:06:3b:8b:6b:45:88:5b:fe:7a:8c:d4:
         bc:34:c4:12:4e:8c:36:0c:ba:a0:1f:de:26:cb:1d:b0:b0:18:
         65:be:1d:de:ae:f5:8d:55:1b:b5:fd:98:4c:7c:30:44:ae:c7:
         a9:33:3d:39:2e:ee:b4:2e:57:11:ed:df:aa:cc:73:c9:ec:55:
         7b:07:f7:a2:50:59:5b:fb:80:f6:72:97:ec:a7:21:fe:fb:1f:
         fc:4c:14:e9:00:c6:b5:5d:7d:c7:02:79:02:bb:3e:79:3a:a4:
         64:a8:0f:03:8d:2a:23:7c:da:d8:a8:a4:e5:3c:0a:fc:6c:5d:
         5f:40:d6:db:98:aa:de:ae:aa:0c:3d:a1:f4:8a:d2:e1:54:34:
         16:52:d5:6e:6d:40:98:ef:b6:d2:6e:cc:ec:21:e7:25:14:1d:
         fb:9f:ca:d3:b2:4d:a1:19:22:b5:0e:aa:42:10:aa:78:fb:76:
         01:bc:9d:89:e3:48:3f:af:82:fd:cd:da:79:f2:5a:8a:6f:10:
         3e:b3:85:29:86:92:33:44:d1:7e:b8:02:eb:cf:f8:fd:67:93:
         90:0d:37:c4:75:1c:55:f1:1e:e1:ca:b6:a1:bd:09:3a:07:cb:
         3b:d6:ce:e4:24:98:72:65:a6:f5:02:e1:a9:16:d6:b8:8b:c7:
         78:bc:cb:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7T9BLU1HTELvxDgrk7mwfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj
YzY0YTkwHhcNMjYwNjE3MDUwMDQ4WhcNMjYwNjE4MDUwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZjQ2ZDE4OTlmOTg1OTFiOWJmNjNiZjJmNzJlMTJkY2NkYjRhNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oID0P7DXfvSr+/+darXZZCXObsg
psClQXOySt4ZEyw1OErN7Voty1NHuQw61bIprkBU95TsNzoa1RO1IEWbCYtSYWiM
PMPevgBYhQLbyYhDhkh736xSAICmXS3FNyTD8hUDzNgZbSAOkgxzZ3zO+MLnB6Ww
QZWeNdDZNoQbc2d7RGbTHTWmOYKZlrqD8mr2D8Y5CQTw+438GOoZpLNJmNFr2DAx
whMHFhP+9VD0fmaFzbaTx1jbiQNLCB1z2IzFXRL3n2kDb0q23H4GxHToq+jKDXsw
5cmadmAzPXnvuKDohdtM6X3SYLubpkTGaZmE9Oht/PCOk4wg139NK6TqGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9G0YmfmFkbm/Y78vcuEtzNtKXgMB8GA1UdIwQY
MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt
Y2E4Y2Y2YWNmYWViLzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi
LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgTAHwDL
qwY7i2tFiFv+eozUvDTEEk6MNgy6oB/eJssdsLAYZb4d3q71jVUbtf2YTHwwRK7H
qTM9OS7utC5XEe3fqsxzyexVewf3olBZW/uA9nKX7Kch/vsf/EwU6QDGtV19xwJ5
Ars+eTqkZKgPA40qI3za2Kik5TwK/GxdX0DW25iq3q6qDD2h9IrS4VQ0FlLVbm1A
mO+20m7M7CHnJRQd+5/K07JNoRkitQ6qQhCqePt2AbydieNIP6+C/c3aefJaim8Q
PrOFKYaSM0TRfrgC68/4/WeTkA03xHUcVfEe4cq2ob0JOgfLO9bO5CSYcmWm9QLh
qRbWuIvHeLzLLA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:26 2026 by rpki-client