Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File:                     zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier:          MRaLWxZccmAREwgesPp+9/t8UjlHnmjCreYmPdoEJfU=
Subject key identifier:   B6:4C:2A:54:1A:99:4E:5C:35:F8:22:A0:F2:CC:0E:E5:B5:27:F2:86
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer:       /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial:       019EC2C9D4F54D4EE44E4E2BF34D93565579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number:          12AF
Signing time:             Sat 13 Jun 2026 21:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:07 +0000
Files and hashes:         1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=)
                          2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: sF2wieV89DMuPaf2Oxi8MQdPI/Hi1QvP7Q3iT8cKzFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:d4:f5:4d:4e:e4:4e:4e:2b:f3:4d:93:56:55:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
        Validity
            Not Before: Jun 13 21:01:07 2026 GMT
            Not After : Jun 14 21:01:07 2026 GMT
        Subject: CN=b64c2a541a994e5c35f822a0f2cc0ee5b527f286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:e0:89:ed:46:9e:f0:ad:dd:c7:f2:56:1e:
                    8a:fe:84:76:3b:ce:0e:0b:e7:a6:f8:4a:65:39:1e:
                    6a:fb:63:2f:1f:0d:ec:c9:7a:26:c8:2b:17:47:55:
                    4e:f5:6f:eb:cb:43:58:e3:74:a4:b9:1a:42:72:37:
                    8c:30:8c:12:62:ef:d4:c1:f6:06:88:34:cc:08:22:
                    d7:62:7b:fd:15:e8:e8:c1:5f:5d:7d:10:1e:dc:3c:
                    a5:fa:23:58:c8:b1:dd:de:74:7d:04:d2:c6:12:2a:
                    10:bb:77:00:4f:34:f0:61:b5:55:1a:e1:3d:c4:26:
                    ba:64:fb:70:8c:fa:a6:ba:d2:0d:65:3c:17:c0:2f:
                    d9:dd:e4:b1:3f:52:ba:3d:74:6e:ff:e2:9a:9f:68:
                    67:53:52:cb:b3:5a:3a:fe:37:e0:36:de:a6:d0:d7:
                    76:59:0d:74:71:b0:a6:b4:c2:c6:34:e7:f6:9d:60:
                    6f:c1:bd:c9:76:6a:27:ed:64:47:9a:96:7f:e2:3e:
                    f8:b0:9b:c3:07:27:95:33:9a:b7:90:1e:25:8c:0b:
                    96:19:79:e3:18:7f:75:5b:57:a9:33:fd:16:b0:92:
                    63:f3:7c:88:d2:36:3e:3b:a4:2d:ce:2a:9a:67:4d:
                    f1:98:53:e2:8a:f0:9e:6e:89:39:02:44:b2:de:93:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4C:2A:54:1A:99:4E:5C:35:F8:22:A0:F2:CC:0E:E5:B5:27:F2:86
            X509v3 Authority Key Identifier:
                keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:52:3d:22:32:48:87:45:62:18:46:01:ee:f1:65:fc:5a:01:
         b9:48:f3:3c:a5:e1:94:32:12:b2:b2:af:86:55:ba:d3:0e:6f:
         3e:3f:df:74:b8:01:76:52:37:fc:b4:1f:de:25:f2:d6:0b:b1:
         41:72:1a:df:83:37:96:41:7f:da:0e:62:1b:ff:55:a6:98:98:
         59:4b:55:9f:ec:3a:de:89:29:26:5d:e8:8a:65:76:ba:54:a7:
         a9:ef:a7:69:8e:cc:5f:39:12:44:85:83:49:ab:41:27:21:74:
         1f:e9:ec:c6:97:9b:f4:aa:fb:37:6d:a3:ea:4c:9b:64:f1:7c:
         c8:74:e9:09:22:1d:7c:19:68:1b:8a:d3:0d:31:da:09:88:5a:
         e3:02:ea:ca:f5:7f:24:55:3a:2e:78:17:ed:b6:d5:23:55:45:
         a4:23:d3:e0:d3:a3:76:10:fb:68:fa:b4:d9:ca:6c:ac:a1:81:
         a7:28:ab:99:61:38:cc:e7:74:8f:e6:89:a0:78:4a:41:24:ff:
         28:09:b8:7d:99:d8:00:29:46:b7:f0:c8:47:4e:96:be:3d:45:
         35:e4:9f:86:67:01:df:0d:60:d4:d6:cc:1b:d2:21:18:d0:59:
         6a:1d:a1:7a:9f:72:b6:54:56:b4:8e:d5:03:57:d8:28:e6:86:
         1c:fd:5f:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CydT1TU7kTk4r802TVlV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGU5YmUyNDhjNzQxYmE2YTI2YWM4Y2ZlMmMyYmI3YzJk
N2EzYjEwHhcNMjYwNjEzMjEwMTA3WhcNMjYwNjE0MjEwMTA3WjAzMTEwLwYDVQQD
EyhiNjRjMmE1NDFhOTk0ZTVjMzVmODIyYTBmMmNjMGVlNWI1MjdmMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE3gie1GnvCt3cfyVh6K/oR2O84O
C+em+EplOR5q+2MvHw3syXomyCsXR1VO9W/ry0NY43SkuRpCcjeMMIwSYu/UwfYG
iDTMCCLXYnv9FejowV9dfRAe3Dyl+iNYyLHd3nR9BNLGEioQu3cATzTwYbVVGuE9
xCa6ZPtwjPqmutINZTwXwC/Z3eSxP1K6PXRu/+Kan2hnU1LLs1o6/jfgNt6m0Nd2
WQ10cbCmtMLGNOf2nWBvwb3Jdmon7WRHmpZ/4j74sJvDByeVM5q3kB4ljAuWGXnj
GH91W1epM/0WsJJj83yI0jY+O6QtziqaZ03xmFPiivCebok5AkSy3pOV3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZMKlQamU5cNfgioPLMDuW1J/KGMB8GA1UdIwQY
MBaAFM6Om+JIx0G6aiasjP4sK7fC16OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTIt
OWZiOGUyNTQ1ZDczLzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTItOWZiOGUyNTQ1ZDcz
LzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1I9IjJI
h0ViGEYB7vFl/FoBuUjzPKXhlDISsrKvhlW60w5vPj/fdLgBdlI3/LQf3iXy1gux
QXIa34M3lkF/2g5iG/9VppiYWUtVn+w63okpJl3oimV2ulSnqe+naY7MXzkSRIWD
SatBJyF0H+nsxpeb9Kr7N22j6kybZPF8yHTpCSIdfBloG4rTDTHaCYha4wLqyvV/
JFU6LngX7bbVI1VFpCPT4NOjdhD7aPq02cpsrKGBpyirmWE4zOd0j+aJoHhKQST/
KAm4fZnYAClGt/DIR06Wvj1FNeSfhmcB3w1g1NbMG9IhGNBZah2hep9ytlRWtI7V
A1fYKOaGHP1fSg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:54 2026 by rpki-client