Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          dtBUd9KsSEJfiYCZTLvGua33vCLtLoUv+PzW0SIcwUI=
Subject key identifier:   F3:CC:AB:1C:10:C0:C0:FE:51:09:13:B8:12:17:85:6C:08:24:E8:DD
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       019ED42B171A093BB29CC0E5536787EED711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          0F6E
Signing time:             Wed 17 Jun 2026 06:00:54 +0000
Manifest this update:     Wed 17 Jun 2026 06:00:54 +0000
Manifest next update:     Thu 18 Jun 2026 06:00:54 +0000
Files and hashes:         1: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: gF9+adjSgRZPpPLTCpmo8c5jn/CHoJz+AMOK1cwLAr0=)
                          2: ymwnzHfZGdMRFGEeM7VXK-BgXAw.roa (hash: zIUfyqH90eqwbG4q9Ekkq/Mb1Io/2HvKy6Zq+oTaP8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:17:1a:09:3b:b2:9c:c0:e5:53:67:87:ee:d7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Jun 17 06:00:54 2026 GMT
            Not After : Jun 18 06:00:54 2026 GMT
        Subject: CN=f3ccab1c10c0c0fe510913b81217856c0824e8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:dd:1b:57:63:7b:81:a3:5f:6a:f5:8a:54:
                    3c:38:9f:e7:94:8e:e0:7e:17:57:26:6d:e0:53:a2:
                    9f:b5:fb:c3:16:9e:f7:6f:4f:21:68:90:4a:db:9f:
                    3b:a3:c3:77:4d:65:1e:4e:0c:e7:46:f4:57:df:f2:
                    c4:85:6d:66:46:dd:0c:b7:b3:43:30:32:6b:69:23:
                    25:a0:2c:dc:ab:93:bc:7f:8c:c6:92:df:c0:2c:39:
                    ff:c6:82:8b:1e:d5:9c:20:f6:a3:76:ce:82:ff:8a:
                    f4:31:c9:3f:a5:12:cc:ab:e6:b3:5e:f7:ab:e2:96:
                    c8:04:78:76:a8:76:a2:b4:51:1e:44:a0:57:19:bc:
                    a4:66:0e:d2:84:e2:92:31:a3:dd:95:66:3f:bd:dd:
                    da:89:77:6b:e1:ed:cd:99:33:f9:d5:33:32:09:4a:
                    8e:22:3b:a4:65:d2:cc:48:7e:80:8d:a5:0b:d7:f0:
                    93:31:5e:9f:ce:df:a6:5b:ed:23:38:bc:e9:a8:b0:
                    2a:37:66:49:8c:a0:03:a5:25:9a:16:b5:ac:35:2a:
                    2c:f5:69:42:7d:07:c6:47:fe:cf:41:07:0f:c7:d3:
                    11:c2:75:9e:98:5d:f6:1b:df:c1:07:ff:c5:7c:6e:
                    37:fe:22:a6:a2:b5:cd:e1:4e:ec:58:aa:3a:4f:ca:
                    48:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:AB:1C:10:C0:C0:FE:51:09:13:B8:12:17:85:6C:08:24:E8:DD
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:7d:a7:55:c7:bf:c5:ae:f5:ef:3b:fb:76:d1:24:1d:08:
         9a:e9:51:0b:98:72:32:4f:1d:8a:27:1e:1a:b5:7d:43:80:e8:
         a2:dc:84:0e:a6:47:f2:c8:ab:97:c1:72:45:cb:cc:7c:35:0d:
         74:e0:12:a1:be:1d:4c:bc:dc:b9:8d:ad:5c:36:50:e0:33:01:
         e0:9e:68:69:a8:18:84:02:09:3a:d7:f3:e5:76:cc:4b:9d:92:
         c7:33:5c:9e:a6:42:5a:60:08:ea:65:92:fe:f6:c6:c1:c0:42:
         ef:b9:bb:8e:a8:ae:fd:63:b4:82:a2:3f:95:eb:53:61:7d:2a:
         9c:12:d3:66:57:bb:a7:c6:bd:75:a8:94:88:44:d8:d3:e2:64:
         ea:de:3a:72:d6:97:25:3c:16:b8:22:83:be:44:c6:ee:69:83:
         7e:aa:99:59:3d:d7:65:33:6f:f5:ec:a2:3c:ab:3e:fb:92:c9:
         d4:e7:ac:4c:83:e3:fc:ff:77:e5:88:50:50:f9:94:50:11:53:
         8c:bf:29:80:8f:80:6d:92:d3:20:3c:d1:93:88:ac:eb:e3:29:
         7d:f0:f2:56:5e:47:d9:1c:9d:3b:6b:fd:3d:8b:30:77:77:1b:
         96:e9:68:09:ba:c7:67:5d:80:d7:fa:7e:f7:cc:f4:cd:6d:94:
         ad:8f:6a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UKxcaCTuynMDlU2eH7tcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDE4Y2M2NTUwZGZkYjE4OTk5NjlhNjAyN2U0MzVhMWIw
YjEzNDEwHhcNMjYwNjE3MDYwMDU0WhcNMjYwNjE4MDYwMDU0WjAzMTEwLwYDVQQD
EyhmM2NjYWIxYzEwYzBjMGZlNTEwOTEzYjgxMjE3ODU2YzA4MjRlOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWDdG1dje4GjX2r1ilQ8OJ/nlI7g
fhdXJm3gU6KftfvDFp73b08haJBK2587o8N3TWUeTgznRvRX3/LEhW1mRt0Mt7ND
MDJraSMloCzcq5O8f4zGkt/ALDn/xoKLHtWcIPajds6C/4r0Mck/pRLMq+azXver
4pbIBHh2qHaitFEeRKBXGbykZg7ShOKSMaPdlWY/vd3aiXdr4e3NmTP51TMyCUqO
IjukZdLMSH6AjaUL1/CTMV6fzt+mW+0jOLzpqLAqN2ZJjKADpSWaFrWsNSos9WlC
fQfGR/7PQQcPx9MRwnWemF32G9/BB//FfG43/iKmorXN4U7sWKo6T8pITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPMqxwQwMD+UQkTuBIXhWwIJOjdMB8GA1UdIwQY
MBaAFJhBjMZVDf2xiZlppgJ+Q1obCxNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYmNmM2MtNjdjZC00MDNmLTk0NGMt
ZmQ1ZDc5ZWM1YjE3LzEvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iYmNmM2MtNjdjZC00MDNmLTk0NGMtZmQ1ZDc5ZWM1YjE3
LzEvbUVHTXhsVU5fYkdKbVdtbUFuNURXaHNMRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADM99p1XH
v8Wu9e87+3bRJB0ImulRC5hyMk8diiceGrV9Q4DootyEDqZH8sirl8FyRcvMfDUN
dOASob4dTLzcuY2tXDZQ4DMB4J5oaagYhAIJOtfz5XbMS52SxzNcnqZCWmAI6mWS
/vbGwcBC77m7jqiu/WO0gqI/letTYX0qnBLTZle7p8a9daiUiETY0+Jk6t46ctaX
JTwWuCKDvkTG7mmDfqqZWT3XZTNv9eyiPKs++5LJ1OesTIPj/P935YhQUPmUUBFT
jL8pgI+AbZLTIDzRk4is6+MpffDyVl5H2RydO2v9PYswd3cbluloCbrHZ12A1/p+
98z0zW2UrY9q9w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:38:32 2026 by rpki-client