Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File:                     0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier:          RoJ/GmSY65yAMotQlgUjCf0wg9gRLdH1+p78lG3CSXs=
Subject key identifier:   21:0B:6B:2C:2F:D1:93:62:CB:9C:BB:05:F7:38:A0:70:22:C9:08:D9
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer:       /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial:       019EBDA2BF4C2D1367F2342710F88FC50324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number:          1321
Signing time:             Fri 12 Jun 2026 21:00:20 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:20 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:20 +0000
Files and hashes:         1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: nxNpWEuI2SoLqbi+g4F7mnDTP9m6T0uujfTnIccZxGg=)
                          2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:bf:4c:2d:13:67:f2:34:27:10:f8:8f:c5:03:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
        Validity
            Not Before: Jun 12 21:00:20 2026 GMT
            Not After : Jun 13 21:00:20 2026 GMT
        Subject: CN=210b6b2c2fd19362cb9cbb05f738a07022c908d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:c8:6f:a6:89:4d:7b:fb:56:30:af:7b:90:
                    2a:d4:0b:b0:d8:77:81:47:22:91:ef:ee:02:b7:33:
                    09:bc:7c:61:e8:1b:7f:29:31:9b:cb:bb:25:6b:16:
                    67:1a:4f:e0:56:9b:c1:85:20:17:08:20:49:ce:7f:
                    31:ac:96:23:c8:ae:50:32:93:60:64:7e:29:27:a9:
                    50:0d:0a:9d:1a:10:2e:c3:c8:07:84:24:72:87:b7:
                    bb:7d:67:fb:ad:fe:83:de:24:ef:fb:9b:0f:2a:0d:
                    d9:27:45:18:16:aa:2d:6c:1f:7f:09:1c:6b:bf:a3:
                    68:3d:98:44:2a:5f:11:09:28:35:d3:23:84:2d:74:
                    b3:44:4f:ed:9a:10:22:56:23:80:37:d2:3a:56:f6:
                    d6:90:e0:61:16:99:8a:01:c7:d2:cf:3a:01:fc:99:
                    f4:48:aa:5f:f9:cc:7d:f2:a3:22:75:49:59:6e:9a:
                    64:0d:ef:5b:e6:47:ae:19:21:24:e6:f2:cd:0f:f0:
                    73:9c:50:94:8e:de:30:6d:a6:ae:1e:89:dd:5c:31:
                    b5:f0:13:77:2c:e5:ea:75:cd:28:ff:4a:08:d1:66:
                    9f:c8:1c:0d:70:c2:78:ed:3c:b7:c2:7d:c3:c7:f1:
                    a0:99:e0:c1:c4:7e:e3:68:88:03:83:df:82:f6:92:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0B:6B:2C:2F:D1:93:62:CB:9C:BB:05:F7:38:A0:70:22:C9:08:D9
            X509v3 Authority Key Identifier:
                keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:22:d0:fe:76:79:fc:93:9b:0b:6b:7d:8b:1f:d4:94:32:40:
         d7:04:27:24:ca:15:8c:42:c5:58:d0:0f:fd:49:1a:20:ae:f8:
         b7:e1:32:18:5b:a9:d0:4c:23:74:60:e7:d7:0e:5e:5f:69:cf:
         52:a6:d5:41:d4:85:bf:9b:59:07:6b:9f:6e:51:5b:27:59:8b:
         c0:02:f3:5a:96:b4:00:67:f1:65:3c:63:dd:3d:3a:51:cb:f4:
         12:41:3f:e5:86:a5:40:e1:75:ee:63:ef:a5:75:e4:48:f1:5d:
         ef:21:c2:eb:25:69:dd:ed:43:6f:26:1c:21:23:4b:8f:f7:f4:
         38:2e:3b:31:ee:9e:8b:6a:88:30:8d:4a:41:52:2e:dc:b7:b7:
         ca:c3:11:f9:56:12:34:d9:ef:86:f4:d7:a2:eb:b1:de:4d:78:
         7e:bf:15:94:4c:54:9e:c6:7d:72:78:59:08:cc:c3:03:16:2d:
         a8:27:a5:51:31:93:09:99:c1:48:54:4a:5d:24:40:06:be:83:
         3b:01:3c:69:fb:5a:5c:f7:23:ea:ee:08:9c:0c:29:e2:fd:15:
         96:04:99:b5:8a:ef:b8:b6:33:d8:71:fd:04:3d:a2:86:d6:3e:
         8a:ed:58:e0:ea:7a:90:e1:1a:5a:c5:0e:fa:6e:b4:64:e6:a5:
         f3:d8:0e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69or9MLRNn8jQnEPiPxQMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTNjOGNjNjNkMGU3ZTA2OWNhNTIzZjM0ZWZiMzk1M2Vl
MjFiNjUwHhcNMjYwNjEyMjEwMDIwWhcNMjYwNjEzMjEwMDIwWjAzMTEwLwYDVQQD
EygyMTBiNmIyYzJmZDE5MzYyY2I5Y2JiMDVmNzM4YTA3MDIyYzkwOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7zIb6aJTXv7VjCve5Aq1Auw2HeB
RyKR7+4CtzMJvHxh6Bt/KTGby7slaxZnGk/gVpvBhSAXCCBJzn8xrJYjyK5QMpNg
ZH4pJ6lQDQqdGhAuw8gHhCRyh7e7fWf7rf6D3iTv+5sPKg3ZJ0UYFqotbB9/CRxr
v6NoPZhEKl8RCSg10yOELXSzRE/tmhAiViOAN9I6VvbWkOBhFpmKAcfSzzoB/Jn0
SKpf+cx98qMidUlZbppkDe9b5keuGSEk5vLND/BznFCUjt4wbaauHondXDG18BN3
LOXqdc0o/0oI0WafyBwNcMJ47Ty3wn3Dx/GgmeDBxH7jaIgDg9+C9pLkOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCELaywv0ZNiy5y7Bfc4oHAiyQjZMB8GA1UdIwQY
MBaAFNKjyMxj0OfgacpSPzTvs5U+4htlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kMGExZmUtMGI2NS00ZDUwLWFlMmYt
MTI4OTg2OTdhODYyLzEvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kMGExZmUtMGI2NS00ZDUwLWFlMmYtMTI4OTg2OTdhODYy
LzEvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiLQ/nZ5
/JObC2t9ix/UlDJA1wQnJMoVjELFWNAP/UkaIK74t+EyGFup0EwjdGDn1w5eX2nP
UqbVQdSFv5tZB2ufblFbJ1mLwALzWpa0AGfxZTxj3T06Ucv0EkE/5YalQOF17mPv
pXXkSPFd7yHC6yVp3e1DbyYcISNLj/f0OC47Me6ei2qIMI1KQVIu3Le3ysMR+VYS
NNnvhvTXouux3k14fr8VlExUnsZ9cnhZCMzDAxYtqCelUTGTCZnBSFRKXSRABr6D
OwE8aftaXPcj6u4InAwp4v0VlgSZtYrvuLYz2HH9BD2ihtY+iu1Y4Op6kOEaWsUO
+m60ZOal89gOkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:51 2026 by rpki-client