Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File:                     xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier:          7XfXWDf+TIpk/5XgNr2AEwroF8BHWFFAYmKqma+Anj0=
Subject key identifier:   A2:18:D6:B1:57:BB:49:D6:2B:5D:FF:B4:52:2B:E4:D1:82:82:A1:6D
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer:       /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial:       019EBE10EC55A277F2642F50EB3DA4D22C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number:          144B
Signing time:             Fri 12 Jun 2026 23:00:40 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:40 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:40 +0000
Files and hashes:         1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
                          2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: RPpFT9YwfoV6R4GMFPddK/olbaRTTFZfB8/SVYwNRkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:ec:55:a2:77:f2:64:2f:50:eb:3d:a4:d2:2c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
        Validity
            Not Before: Jun 12 23:00:40 2026 GMT
            Not After : Jun 13 23:00:40 2026 GMT
        Subject: CN=a218d6b157bb49d62b5dffb4522be4d18282a16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:98:e0:6d:fa:66:d9:64:d4:9e:63:fe:77:
                    f1:5a:67:ad:77:a7:54:86:57:8d:8f:58:a4:d4:d8:
                    48:86:e0:59:aa:7e:cf:df:ca:61:1a:6c:aa:75:1b:
                    1e:48:70:12:9a:ef:a7:23:d2:92:9b:41:51:2b:11:
                    cc:34:17:95:61:00:28:2e:fe:7b:a9:cf:62:2f:a6:
                    0c:f0:4c:0b:b7:4e:34:cb:64:20:4a:63:7b:6c:ce:
                    f7:ce:6d:ac:22:bb:bf:39:ba:a8:71:03:4a:f2:b2:
                    89:2b:ce:32:01:f8:ce:f7:51:5f:14:a1:fe:bc:fd:
                    c9:ae:11:a3:d2:bc:14:10:26:5b:30:3d:97:ea:ab:
                    71:bd:ff:73:af:7c:e3:aa:2f:91:5a:31:d5:5a:b5:
                    10:4f:b6:0c:95:50:69:7b:a4:df:4d:61:ab:91:bf:
                    04:3f:00:f7:86:66:a8:e9:2d:a9:fc:8b:b9:2e:0c:
                    f3:9b:e5:b4:14:48:87:dd:41:83:21:c6:ea:e5:9a:
                    47:11:ff:69:dd:30:6a:86:24:fb:74:4b:d7:93:ae:
                    2e:c8:92:19:d5:de:f8:c7:2d:4f:ee:82:dc:2d:f3:
                    b4:cc:e5:f9:dc:40:dc:b5:f9:5f:22:4c:20:1f:a9:
                    90:4d:24:20:5e:28:48:86:52:f7:b5:57:b6:b6:cd:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:18:D6:B1:57:BB:49:D6:2B:5D:FF:B4:52:2B:E4:D1:82:82:A1:6D
            X509v3 Authority Key Identifier:
                keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9e:2d:ea:f5:e1:e1:0f:31:c6:79:f4:e5:9d:a8:cf:f5:6d:
         d7:a6:48:7d:1e:a4:61:04:45:95:cf:ef:be:b6:44:ac:87:8a:
         0a:02:a2:a8:10:cf:5f:89:37:ed:13:87:f0:37:9f:7e:ff:11:
         e2:85:3b:78:53:52:94:51:6b:86:24:98:d4:b6:b7:2c:f1:cd:
         0e:25:a2:d4:1f:d8:87:c4:77:9f:dc:72:56:3b:96:9a:ee:a4:
         0f:30:3a:2c:ed:de:f0:90:7e:4e:e4:83:73:36:96:c4:ef:69:
         2d:74:73:e6:89:26:82:5f:20:2e:e4:19:35:a9:07:e5:01:84:
         17:2c:e0:15:92:a1:27:f1:3a:f2:f3:d2:c5:ee:99:d3:a0:62:
         f9:15:df:93:73:a6:46:38:b9:85:5e:46:39:23:0d:eb:c3:98:
         dc:80:2c:14:5d:40:88:25:d5:89:16:3b:1b:45:a6:21:be:5c:
         3d:c1:45:6c:ae:da:8f:50:0a:87:6c:bb:8b:30:46:05:17:ab:
         b3:1a:b7:0e:84:5e:04:21:d8:6c:65:bc:7d:58:81:c1:4b:12:
         c2:9f:06:7b:f3:7f:23:85:de:b3:a3:5c:b4:f2:61:dd:4d:df:
         01:ee:1b:d3:44:16:49:08:f5:6f:33:8e:f3:8e:42:5a:b3:cb:
         e9:f9:2a:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EOxVonfyZC9Q6z2k0ixcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi
MzgxN2EwHhcNMjYwNjEyMjMwMDQwWhcNMjYwNjEzMjMwMDQwWjAzMTEwLwYDVQQD
EyhhMjE4ZDZiMTU3YmI0OWQ2MmI1ZGZmYjQ1MjJiZTRkMTgyODJhMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOaY4G36Ztlk1J5j/nfxWmetd6dU
hleNj1ik1NhIhuBZqn7P38phGmyqdRseSHASmu+nI9KSm0FRKxHMNBeVYQAoLv57
qc9iL6YM8EwLt040y2QgSmN7bM73zm2sIru/ObqocQNK8rKJK84yAfjO91FfFKH+
vP3JrhGj0rwUECZbMD2X6qtxvf9zr3zjqi+RWjHVWrUQT7YMlVBpe6TfTWGrkb8E
PwD3hmao6S2p/Iu5Lgzzm+W0FEiH3UGDIcbq5ZpHEf9p3TBqhiT7dEvXk64uyJIZ
1d74xy1P7oLcLfO0zOX53EDctflfIkwgH6mQTSQgXihIhlL3tVe2ts2BlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIY1rFXu0nWK13/tFIr5NGCgqFtMB8GA1UdIwQY
MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt
YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj
LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZ4t6vXh
4Q8xxnn05Z2oz/Vt16ZIfR6kYQRFlc/vvrZErIeKCgKiqBDPX4k37ROH8Deffv8R
4oU7eFNSlFFrhiSY1La3LPHNDiWi1B/Yh8R3n9xyVjuWmu6kDzA6LO3e8JB+TuSD
czaWxO9pLXRz5okmgl8gLuQZNakH5QGEFyzgFZKhJ/E68vPSxe6Z06Bi+RXfk3Om
Rji5hV5GOSMN68OY3IAsFF1AiCXViRY7G0WmIb5cPcFFbK7aj1AKh2y7izBGBRer
sxq3DoReBCHYbGW8fViBwUsSwp8Ge/N/I4Xes6NctPJh3U3fAe4b00QWSQj1bzOO
845CWrPL6fkqAg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:26 2026 by rpki-client