Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File:                     C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier:          Btfhn98pZseXAuOjJQfToXS8Sn1WA/iXqerz8sDvtnA=
Subject key identifier:   32:A3:F6:B0:3D:E5:C5:6C:3F:F0:86:57:D1:63:B2:B0:26:0B:1E:07
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer:       /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial:       019EBDDA866786B3D192D359F0BCEEA7FAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number:          110D
Signing time:             Fri 12 Jun 2026 22:01:15 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:15 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:15 +0000
Files and hashes:         1: 0ZZBNy_4ZfeDGv0GZ4Y6WyBitiY.roa (hash: xrSAqsjvVj4VTaGXTAjpYZq+szPFsolHKq89Y8sv2SY=)
                          2: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: 25Bw3z1vYsUOzzmqYxTlJGYJnc5oTDeEzVF2SFFxzcA=)
                          3: HlPf6jt7HgmbuEWgecuG4Sgaorc.roa (hash: j8/ocuESU17xtFvRR6K0O2U6/8pNxL5+xXsijYbdSGQ=)
                          4: JB8yx2b88cSBO2zP8HmMFflCSbQ.roa (hash: ptfoSvZpsHgOB3p1UFy4y5riUES2ZHub67bxSsiN4pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:86:67:86:b3:d1:92:d3:59:f0:bc:ee:a7:fa:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
        Validity
            Not Before: Jun 12 22:01:15 2026 GMT
            Not After : Jun 13 22:01:15 2026 GMT
        Subject: CN=32a3f6b03de5c56c3ff08657d163b2b0260b1e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:fa:7f:58:97:ab:a0:44:0a:89:77:05:6a:
                    ae:11:98:54:d4:4f:1e:c2:cd:36:eb:fc:72:b6:a3:
                    93:10:c1:f7:6b:a6:82:83:d3:83:b9:bc:3a:bd:ec:
                    0f:38:9b:4d:96:dd:39:23:53:b4:9f:36:d7:b5:e1:
                    16:03:ae:54:56:2f:6d:0d:cc:12:45:3e:61:98:a8:
                    ad:fd:1f:d9:a1:75:7f:d9:2d:da:3f:8f:57:58:18:
                    ee:87:f7:da:a2:a0:5f:f3:f8:9b:d1:3c:10:69:e1:
                    4b:b5:77:83:f0:ac:7b:34:f9:44:74:cc:36:9f:55:
                    a7:aa:f4:66:ad:8f:07:a5:70:1c:27:0d:3e:62:4c:
                    40:22:4b:99:27:29:ec:f7:41:5a:55:f6:6c:f3:ff:
                    24:d9:87:05:ed:9b:35:6e:8c:d0:3f:84:d1:43:95:
                    21:fe:94:0f:38:49:15:c1:ec:85:32:c7:d3:83:ec:
                    6e:01:a5:08:1c:c7:12:b0:e3:f7:d8:a9:99:92:51:
                    de:de:45:f3:a5:c6:95:d2:82:d0:ac:82:33:c1:6a:
                    cc:ca:f0:f2:60:fa:c0:c6:8b:a6:92:57:13:9c:11:
                    e9:34:a3:75:0d:bc:b6:20:a0:2a:fb:5c:f3:ce:95:
                    37:c9:11:7a:05:9e:d8:ba:33:ca:99:30:8d:09:09:
                    06:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:F6:B0:3D:E5:C5:6C:3F:F0:86:57:D1:63:B2:B0:26:0B:1E:07
            X509v3 Authority Key Identifier:
                keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7f:14:f8:50:c4:bf:79:3d:c6:67:68:f0:87:f8:64:01:6e:
         d7:7e:41:16:02:8f:b8:04:79:f5:b5:4e:ae:70:e2:34:6c:ce:
         6c:9f:fb:f7:ca:8f:ef:41:e4:1a:fe:d7:c5:72:9e:d8:f1:b0:
         f3:74:f1:3b:82:b1:d9:9b:21:90:5f:b3:3c:ea:0c:95:4a:86:
         6b:a8:95:02:f6:ad:be:d2:72:03:49:7f:cb:f8:76:00:c7:46:
         9f:69:d7:b6:5f:2b:d7:50:04:d7:67:60:77:b7:00:96:b7:8f:
         82:b3:25:da:f8:42:1f:59:e3:7f:77:e3:a5:85:5a:ea:55:38:
         a1:67:f5:63:bc:fa:12:a1:84:d1:32:60:1d:c8:0c:fa:19:db:
         4c:4f:a5:3c:b2:c7:ef:f5:c1:65:a3:2e:50:73:78:5e:c8:ce:
         57:8c:d6:14:6f:7d:c9:77:9e:c7:ee:68:7c:3e:7b:fb:ea:85:
         95:09:ee:a2:03:1d:93:67:e5:89:af:ab:9d:d5:2f:7f:73:5c:
         19:7c:22:f8:c6:e5:ec:de:5a:80:7f:8a:8d:11:34:b5:79:94:
         db:d7:93:d6:cd:dc:25:58:ce:9f:b6:11:a3:15:e0:2b:2f:8a:
         89:9f:de:0e:15:df:94:54:19:5d:8b:81:c6:fc:5e:89:e3:f1:
         1a:17:cb:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692oZnhrPRktNZ8Lzup/rkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4
OTI1MmYwHhcNMjYwNjEyMjIwMTE1WhcNMjYwNjEzMjIwMTE1WjAzMTEwLwYDVQQD
EygzMmEzZjZiMDNkZTVjNTZjM2ZmMDg2NTdkMTYzYjJiMDI2MGIxZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8H6f1iXq6BECol3BWquEZhU1E8e
ws026/xytqOTEMH3a6aCg9ODubw6vewPOJtNlt05I1O0nzbXteEWA65UVi9tDcwS
RT5hmKit/R/ZoXV/2S3aP49XWBjuh/faoqBf8/ib0TwQaeFLtXeD8Kx7NPlEdMw2
n1WnqvRmrY8HpXAcJw0+YkxAIkuZJyns90FaVfZs8/8k2YcF7Zs1bozQP4TRQ5Uh
/pQPOEkVweyFMsfTg+xuAaUIHMcSsOP32KmZklHe3kXzpcaV0oLQrIIzwWrMyvDy
YPrAxoumklcTnBHpNKN1Dby2IKAq+1zzzpU3yRF6BZ7YujPKmTCNCQkGxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKj9rA95cVsP/CGV9FjsrAmCx4HMB8GA1UdIwQY
MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt
NjA3OGVmZDA3ODVlLzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl
LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApH8U+FDE
v3k9xmdo8If4ZAFu135BFgKPuAR59bVOrnDiNGzObJ/798qP70HkGv7XxXKe2PGw
83TxO4Kx2ZshkF+zPOoMlUqGa6iVAvatvtJyA0l/y/h2AMdGn2nXtl8r11AE12dg
d7cAlrePgrMl2vhCH1njf3fjpYVa6lU4oWf1Y7z6EqGE0TJgHcgM+hnbTE+lPLLH
7/XBZaMuUHN4XsjOV4zWFG99yXeex+5ofD57++qFlQnuogMdk2flia+rndUvf3Nc
GXwi+Mbl7N5agH+KjRE0tXmU29eT1s3cJVjOn7YRoxXgKy+KiZ/eDhXflFQZXYuB
xvxeiePxGhfLXg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:08 2026 by rpki-client