Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File:                     AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier:          CV0xNmoWPwKlBUmdZ9PkUxzNaBvuEqWD0yjfJLk7eY4=
Subject key identifier:   CF:6B:17:AF:D7:47:14:B2:AE:9E:95:55:0E:0A:30:46:A4:62:3F:32
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer:       /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial:       019EBFC84813B718AE4F2B61B89F62A27144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 07:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:34 +0000
Files and hashes:         1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: 6l85f4Hk7K2Gf1AJegRb3Mu1XAsQyvOtrz8A4zeKuK4=)
                          2: P1a-wy-41SGB2vgjhP8VvtqZ32c.roa (hash: 8eDEG1cF3oj7ePCmIr7bInU5XFHVVJIT2TT9CuFv1Es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:48:13:b7:18:ae:4f:2b:61:b8:9f:62:a2:71:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
        Validity
            Not Before: Jun 13 07:00:34 2026 GMT
            Not After : Jun 14 07:00:34 2026 GMT
        Subject: CN=cf6b17afd74714b2ae9e95550e0a3046a4623f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4b:7d:2d:ab:14:80:0d:25:bb:07:eb:bb:8e:
                    eb:04:76:27:29:d7:2c:d3:0d:78:1f:f1:ff:6f:06:
                    bb:9b:c7:cf:82:bf:82:89:98:b6:3c:11:67:c6:62:
                    04:a8:83:7d:5b:be:21:f6:35:9a:b1:34:c7:3b:df:
                    91:0f:32:77:9e:41:9e:37:50:55:c2:16:ca:e8:9a:
                    a8:bf:18:2a:cb:1e:d7:0b:d0:20:49:bc:41:9b:76:
                    a2:3b:00:bd:2f:f7:b1:0c:78:c8:02:c7:cc:6b:fb:
                    c8:52:09:a6:92:7b:61:47:53:f6:6a:64:cc:05:f0:
                    f6:dd:8f:12:03:40:33:34:17:16:24:1c:d8:8a:f4:
                    f9:d1:ab:89:d1:27:55:88:11:24:05:da:67:65:32:
                    ed:97:f9:8c:58:8f:51:9c:2a:8f:11:6e:fc:14:46:
                    66:e7:6d:25:28:29:fa:4c:41:27:82:22:06:6c:b7:
                    bf:4d:b3:37:c8:6b:4b:1f:f2:cc:95:05:27:26:2d:
                    a1:4f:00:5b:93:ad:74:9d:44:8a:af:a4:51:a2:8a:
                    fe:e9:5d:65:f0:bf:10:b4:89:52:82:5b:df:98:d3:
                    bb:ca:76:40:1c:e1:e1:5c:c3:7c:4a:a6:19:e9:d2:
                    56:20:a6:98:f7:5c:07:74:14:76:79:0a:a8:a6:e5:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:17:AF:D7:47:14:B2:AE:9E:95:55:0E:0A:30:46:A4:62:3F:32
            X509v3 Authority Key Identifier:
                keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:5b:58:56:c8:c0:a4:d8:70:22:cd:91:66:8e:71:62:ec:
         b2:4f:a6:0e:ad:ce:fb:b8:02:f6:a3:55:d1:80:20:5c:c4:2b:
         64:da:29:c0:7b:6d:56:07:33:fe:43:37:86:b7:1e:e0:8f:98:
         88:25:7f:51:ff:5c:a8:70:c3:5a:94:65:7e:a9:08:b5:73:34:
         c8:3f:4c:8b:f9:61:4f:8f:76:8b:16:31:a0:cb:75:60:64:bb:
         6b:ea:b0:d3:0b:86:74:4b:02:eb:e3:ec:eb:36:8a:8c:71:b5:
         49:81:18:7a:ef:73:89:d9:af:06:ec:c6:77:13:91:d5:28:d0:
         2d:c7:22:5a:4f:01:aa:14:28:43:50:24:23:21:78:53:e4:e0:
         55:38:bf:7b:b4:cd:01:ce:29:4e:d6:cc:a7:5d:a5:7f:2e:ae:
         0c:a0:14:50:43:e3:2b:31:23:45:db:69:b0:04:d2:5b:d5:ae:
         8f:d9:40:d4:c9:b3:e0:82:a7:5f:5a:21:cb:9e:74:86:b1:54:
         d4:d5:65:59:f6:94:43:22:62:ba:ed:93:dc:69:33:d6:bb:88:
         29:19:4b:82:f6:13:78:6f:aa:37:dc:9d:ea:ee:d7:b5:8e:04:
         72:87:e7:db:08:82:09:d6:14:c5:f5:b8:10:b8:01:80:1c:33:
         20:c7:4c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yEgTtxiuTythuJ9ionFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi
MjM4NTAwHhcNMjYwNjEzMDcwMDM0WhcNMjYwNjE0MDcwMDM0WjAzMTEwLwYDVQQD
EyhjZjZiMTdhZmQ3NDcxNGIyYWU5ZTk1NTUwZTBhMzA0NmE0NjIzZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUt9LasUgA0luwfru47rBHYnKdcs
0w14H/H/bwa7m8fPgr+CiZi2PBFnxmIEqIN9W74h9jWasTTHO9+RDzJ3nkGeN1BV
whbK6Jqovxgqyx7XC9AgSbxBm3aiOwC9L/exDHjIAsfMa/vIUgmmknthR1P2amTM
BfD23Y8SA0AzNBcWJBzYivT50auJ0SdViBEkBdpnZTLtl/mMWI9RnCqPEW78FEZm
520lKCn6TEEngiIGbLe/TbM3yGtLH/LMlQUnJi2hTwBbk610nUSKr6RRoor+6V1l
8L8QtIlSglvfmNO7ynZAHOHhXMN8SqYZ6dJWIKaY91wHdBR2eQqopuW6IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9rF6/XRxSyrp6VVQ4KMEakYj8yMB8GA1UdIwQY
MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt
MTZiOWVhZmViNGVhLzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh
LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9ZbWFbI
wKTYcCLNkWaOcWLssk+mDq3O+7gC9qNV0YAgXMQrZNopwHttVgcz/kM3hrce4I+Y
iCV/Uf9cqHDDWpRlfqkItXM0yD9Mi/lhT492ixYxoMt1YGS7a+qw0wuGdEsC6+Ps
6zaKjHG1SYEYeu9zidmvBuzGdxOR1SjQLcciWk8BqhQoQ1AkIyF4U+TgVTi/e7TN
Ac4pTtbMp12lfy6uDKAUUEPjKzEjRdtpsATSW9Wuj9lA1Mmz4IKnX1ohy550hrFU
1NVlWfaUQyJiuu2T3Gkz1ruIKRlLgvYTeG+qN9yd6u7XtY4Ecofn2wiCCdYUxfW4
ELgBgBwzIMdM6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:48 2026 by rpki-client