Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File:                     hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier:          T4uzIyZl1u3aiFLiF/VQ4Fz52L2xWzbRjSNZ02zkzaE=
Subject key identifier:   C3:6C:52:09:B1:4C:2B:75:1C:96:D0:FD:4E:CC:6E:70:67:DD:C2:8F
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer:       /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial:       019EBF5AC36F9B6C06534B68D523D8F34A44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number:          13FB
Signing time:             Sat 13 Jun 2026 05:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:56 +0000
Files and hashes:         1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
                          2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: XgGz5bPZf7Bh1zoKf9FN5/+POWlaMN3ylTVOzpn1vGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:c3:6f:9b:6c:06:53:4b:68:d5:23:d8:f3:4a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
        Validity
            Not Before: Jun 13 05:00:56 2026 GMT
            Not After : Jun 14 05:00:56 2026 GMT
        Subject: CN=c36c5209b14c2b751c96d0fd4ecc6e7067ddc28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:e9:96:a3:b6:17:f1:51:7f:cb:b1:8c:78:
                    e8:b6:e0:04:e8:e8:48:57:9a:ce:2f:d0:6c:62:11:
                    1a:6f:13:f3:6d:04:b9:4c:1a:4e:fb:6d:9f:1a:9f:
                    74:b0:21:65:ec:86:cb:a5:f4:4f:06:d4:e7:39:a8:
                    b1:48:da:7a:a9:10:ab:71:aa:7c:a9:71:a4:45:24:
                    2f:23:9a:73:4b:de:f0:7a:cb:b0:10:6e:0d:d5:57:
                    b4:8b:14:0b:be:1b:a6:cb:55:d5:a6:45:ef:c5:9e:
                    ad:47:69:ac:9a:8f:4b:cf:11:3c:4f:19:da:a1:50:
                    86:b2:1c:1d:20:c9:0c:1c:5d:d9:e3:2a:0b:82:63:
                    1b:48:3c:77:c5:77:f4:f8:cd:92:6b:10:de:db:9e:
                    7b:b7:81:76:f4:e6:63:cd:4e:d1:b3:55:fc:dd:bf:
                    5b:bd:ad:1d:51:71:10:b1:42:a9:7e:97:41:80:dd:
                    b2:8b:d3:fa:09:45:09:f8:33:29:61:45:a1:62:d8:
                    2d:63:c7:d9:d4:85:a1:e8:6a:26:59:e9:1c:11:a3:
                    19:40:8c:c5:01:02:ef:1b:6f:c0:c9:d6:07:6b:f6:
                    f4:2a:af:43:cd:66:5a:f1:da:07:2e:62:24:7c:3e:
                    39:36:5e:3b:7e:f8:52:28:c8:3b:bd:0a:a4:d9:39:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6C:52:09:B1:4C:2B:75:1C:96:D0:FD:4E:CC:6E:70:67:DD:C2:8F
            X509v3 Authority Key Identifier:
                keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1d:72:16:2b:62:6e:9b:53:23:71:23:3c:f2:80:6d:4f:87:
         a1:d5:b9:7e:5a:94:8f:9c:97:68:65:88:65:7e:54:92:42:ec:
         f3:56:51:5c:dc:31:c4:88:51:4a:5f:d3:cd:51:9b:c0:d2:e5:
         ea:1e:7f:31:d6:35:ac:a2:75:16:bc:ae:a6:1d:4a:87:9b:58:
         ab:71:20:44:a7:27:3c:5d:24:50:f5:fb:d8:1f:f0:1c:b9:60:
         c2:c1:dd:d1:bf:93:24:92:0a:7f:13:bd:7f:ea:7f:5c:c8:95:
         50:50:ab:39:85:2d:ea:c5:bd:fb:b5:d3:21:b2:f2:6f:9d:5e:
         6f:87:ce:f0:d7:b2:5f:23:a5:85:ec:b4:56:fd:03:24:64:03:
         8d:07:bb:56:fe:dd:e2:b5:ea:c5:4d:0f:a8:e0:55:a9:a1:9a:
         38:a7:4c:54:0d:d2:d3:c8:07:4e:de:a3:4e:bd:d6:3a:a6:ae:
         2f:46:3d:16:9a:5b:5a:9d:b2:5a:4f:bd:ea:c1:7d:36:62:a4:
         47:20:bd:a2:02:56:60:c5:40:1d:de:51:a2:bd:88:af:36:6d:
         60:6f:4e:25:af:cb:bf:76:e5:81:06:61:1f:41:37:98:c4:b8:
         92:f9:a2:37:3d:cd:ac:c9:fe:9a:90:1d:4c:27:83:22:ed:55:
         01:6c:23:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WsNvm2wGU0to1SPY80pEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjZlOTE3NDJkYWQxYjlmNGM3OTZiMjNiMzdlYjdhY2Q4
NTgxNjEwHhcNMjYwNjEzMDUwMDU2WhcNMjYwNjE0MDUwMDU2WjAzMTEwLwYDVQQD
EyhjMzZjNTIwOWIxNGMyYjc1MWM5NmQwZmQ0ZWNjNmU3MDY3ZGRjMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOjplqO2F/FRf8uxjHjotuAE6OhI
V5rOL9BsYhEabxPzbQS5TBpO+22fGp90sCFl7IbLpfRPBtTnOaixSNp6qRCrcap8
qXGkRSQvI5pzS97wesuwEG4N1Ve0ixQLvhumy1XVpkXvxZ6tR2msmo9LzxE8Txna
oVCGshwdIMkMHF3Z4yoLgmMbSDx3xXf0+M2SaxDe2557t4F29OZjzU7Rs1X83b9b
va0dUXEQsUKpfpdBgN2yi9P6CUUJ+DMpYUWhYtgtY8fZ1IWh6GomWekcEaMZQIzF
AQLvG2/AydYHa/b0Kq9DzWZa8doHLmIkfD45Nl47fvhSKMg7vQqk2TnWqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNsUgmxTCt1HJbQ/U7MbnBn3cKPMB8GA1UdIwQY
MBaAFIRm6RdC2tG59MeWsjs363rNhYFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAt
NGUzMmM4YjhlZTM2LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAtNGUzMmM4YjhlZTM2
LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvR1yFiti
bptTI3EjPPKAbU+HodW5flqUj5yXaGWIZX5UkkLs81ZRXNwxxIhRSl/TzVGbwNLl
6h5/MdY1rKJ1Fryuph1Kh5tYq3EgRKcnPF0kUPX72B/wHLlgwsHd0b+TJJIKfxO9
f+p/XMiVUFCrOYUt6sW9+7XTIbLyb51eb4fO8NeyXyOlhey0Vv0DJGQDjQe7Vv7d
4rXqxU0PqOBVqaGaOKdMVA3S08gHTt6jTr3WOqauL0Y9FppbWp2yWk+96sF9NmKk
RyC9ogJWYMVAHd5Ror2IrzZtYG9OJa/Lv3blgQZhH0E3mMS4kvmiNz3NrMn+mpAd
TCeDIu1VAWwjcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:54 2026 by rpki-client