Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File:                     HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier:          uoSyzHmbA8Gn6l0rSwLtKFfyO8G8vU+UMqZW4vQw6F0=
Subject key identifier:   E7:6D:1E:2B:5A:C2:A5:39:DE:6C:96:7C:9E:32:98:72:AA:65:70:B4
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer:       /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial:       019EC3DC4A4653B6AB8F37B9B13628A1958F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number:          12C8
Signing time:             Sun 14 Jun 2026 02:00:54 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:54 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:54 +0000
Files and hashes:         1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
                          2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
                          3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: OQ6OEBazW9lPllk7K2DkBLAr111Wk5CCV/HrycCybyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:4a:46:53:b6:ab:8f:37:b9:b1:36:28:a1:95:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
        Validity
            Not Before: Jun 14 02:00:54 2026 GMT
            Not After : Jun 15 02:00:54 2026 GMT
        Subject: CN=e76d1e2b5ac2a539de6c967c9e329872aa6570b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:58:5e:1a:47:62:db:72:02:d5:0c:13:ff:
                    92:16:c1:2e:8e:33:d0:c2:92:47:4f:6b:9d:e4:21:
                    53:7d:0a:a3:29:0b:4c:a2:99:5b:29:90:a3:63:7d:
                    de:64:70:82:de:70:75:6a:aa:b6:60:4a:18:38:a1:
                    aa:59:64:51:63:1b:1a:32:5e:90:1f:77:95:41:98:
                    a4:71:45:d3:cf:7f:58:8b:99:56:ed:c5:db:4f:34:
                    74:1d:4d:a6:87:6e:f7:b0:b4:13:c2:ce:76:51:4e:
                    55:35:99:e7:11:a4:6a:0f:88:0e:1c:c4:f2:92:f6:
                    35:17:a3:e1:ec:41:c2:39:30:03:15:04:a6:01:46:
                    16:d2:61:89:96:78:ae:5d:ab:e4:2f:89:2f:d4:84:
                    44:8d:e2:de:e0:3c:ee:6e:17:6f:37:98:a7:8e:52:
                    e8:83:1e:e1:9d:99:80:0f:db:4d:2a:9a:09:be:72:
                    7e:56:8c:13:ac:64:5b:12:fd:32:a1:b2:4f:f8:be:
                    5f:d6:3a:a9:1e:5e:ac:f9:17:11:d6:e9:18:61:d5:
                    1b:a6:81:95:42:3c:c5:a6:37:c6:9a:63:8f:4c:12:
                    57:17:5a:e3:25:1d:a7:7f:57:0b:b5:0e:27:34:81:
                    60:93:57:59:aa:f1:d5:2e:7a:77:aa:a3:5e:ad:61:
                    45:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6D:1E:2B:5A:C2:A5:39:DE:6C:96:7C:9E:32:98:72:AA:65:70:B4
            X509v3 Authority Key Identifier:
                keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:c2:ca:e2:93:8f:1b:d5:e0:ba:fd:49:63:e5:9b:6b:a6:
         f9:c8:ae:d1:98:99:0f:70:b1:34:f1:8b:46:03:6a:df:a8:a0:
         90:6d:7e:38:c2:1a:2e:09:4b:68:69:b3:82:f9:9a:09:8e:52:
         78:2f:18:5d:02:44:b6:70:a1:c8:ec:7a:b0:86:84:af:8b:af:
         43:a5:f8:4d:f7:ef:1b:0a:37:84:87:58:cd:9f:02:52:5c:3a:
         48:cf:5d:20:fc:40:e1:c2:d9:34:f1:62:f5:bb:43:84:a8:0c:
         15:8d:af:c0:70:7c:6f:07:ab:27:58:8c:58:bd:77:be:2a:ea:
         23:35:48:d2:46:1d:4d:19:54:1b:bf:33:d9:c4:4a:eb:6c:5c:
         2f:8a:40:6f:c9:6e:4b:ed:d5:80:43:79:ac:5b:9b:66:8b:3f:
         41:46:19:8d:66:59:76:f0:b4:8b:b0:f5:63:b7:89:ed:38:b3:
         7e:55:8b:64:b3:c3:b3:03:d4:05:3b:6e:50:e3:73:7b:ed:53:
         4c:9b:51:13:5c:ac:54:ce:11:18:1b:b1:da:3f:ec:4d:03:92:
         01:73:30:26:60:24:a6:67:22:c3:29:8c:02:c2:85:5d:19:ae:
         fd:e3:10:58:ce:ff:c8:87:10:e2:cd:88:13:d9:53:78:fb:08:
         f6:a3:df:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3EpGU7arjze5sTYooZWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0
NDQ4ZGIwHhcNMjYwNjE0MDIwMDU0WhcNMjYwNjE1MDIwMDU0WjAzMTEwLwYDVQQD
EyhlNzZkMWUyYjVhYzJhNTM5ZGU2Yzk2N2M5ZTMyOTg3MmFhNjU3MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvpYXhpHYttyAtUME/+SFsEujjPQ
wpJHT2ud5CFTfQqjKQtMoplbKZCjY33eZHCC3nB1aqq2YEoYOKGqWWRRYxsaMl6Q
H3eVQZikcUXTz39Yi5lW7cXbTzR0HU2mh273sLQTws52UU5VNZnnEaRqD4gOHMTy
kvY1F6Ph7EHCOTADFQSmAUYW0mGJlniuXavkL4kv1IREjeLe4DzubhdvN5injlLo
gx7hnZmAD9tNKpoJvnJ+VowTrGRbEv0yobJP+L5f1jqpHl6s+RcR1ukYYdUbpoGV
QjzFpjfGmmOPTBJXF1rjJR2nf1cLtQ4nNIFgk1dZqvHVLnp3qqNerWFFlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdtHitawqU53myWfJ4ymHKqZXC0MB8GA1UdIwQY
MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt
NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx
LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1/CyuKT
jxvV4Lr9SWPlm2um+ciu0ZiZD3CxNPGLRgNq36igkG1+OMIaLglLaGmzgvmaCY5S
eC8YXQJEtnChyOx6sIaEr4uvQ6X4TffvGwo3hIdYzZ8CUlw6SM9dIPxA4cLZNPFi
9btDhKgMFY2vwHB8bwerJ1iMWL13virqIzVI0kYdTRlUG78z2cRK62xcL4pAb8lu
S+3VgEN5rFubZos/QUYZjWZZdvC0i7D1Y7eJ7TizflWLZLPDswPUBTtuUONze+1T
TJtRE1ysVM4RGBux2j/sTQOSAXMwJmAkpmciwymMAsKFXRmu/eMQWM7/yIcQ4s2I
E9lTePsI9qPfbg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:26 2026 by rpki-client