Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File:                     DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier:          kEjOa10l1MUAqZIpgRrNTw0HsZK38jwpzdes4fbXgnA=
Subject key identifier:   00:8F:4E:A8:EC:13:51:75:9E:79:BC:45:5C:BC:3E:13:89:FD:91:08
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer:       /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial:       019EC2929784D1580FE5610BBB27841B9C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number:          15FB
Signing time:             Sat 13 Jun 2026 20:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:47 +0000
Files and hashes:         1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: wy5//soQbaP2ivYxBzd+q/HQL3pUqlfDUPEqalMsY2g=)
                          2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:97:84:d1:58:0f:e5:61:0b:bb:27:84:1b:9c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
        Validity
            Not Before: Jun 13 20:00:47 2026 GMT
            Not After : Jun 14 20:00:47 2026 GMT
        Subject: CN=008f4ea8ec1351759e79bc455cbc3e1389fd9108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:6d:23:21:54:d1:d7:00:96:1d:2f:60:32:
                    67:da:48:4e:c3:a0:7a:29:48:67:8f:36:fc:fe:38:
                    53:0e:ed:ab:e2:4c:3e:b5:bb:dc:f4:f7:e7:b1:24:
                    56:7c:f8:3f:a1:19:c8:72:01:5c:62:c3:da:3c:4d:
                    9c:f3:a3:f0:7c:19:d7:f7:55:60:52:90:10:8a:79:
                    39:95:fb:0b:f9:06:1b:83:40:3d:76:62:da:b0:8e:
                    c2:87:b7:ef:b3:f9:ee:53:de:0d:fe:9e:5e:48:a9:
                    87:c5:05:c4:00:75:e7:59:29:20:87:92:03:4d:63:
                    72:67:33:49:d5:8a:9d:26:81:70:9f:38:09:cf:c2:
                    1f:9b:a2:aa:98:18:68:21:c6:c4:f4:06:fa:c7:5c:
                    75:24:d0:b6:eb:aa:5f:60:d5:83:9f:c4:e2:1f:c5:
                    b4:67:9c:97:39:33:bc:60:c3:16:c4:f3:84:35:dd:
                    fc:6a:8e:d4:9e:e7:0b:73:d5:a5:d7:54:2c:50:5b:
                    6d:59:25:ed:d1:61:eb:a9:a8:64:b6:0e:31:c4:a1:
                    a1:91:14:69:f7:90:ef:fa:5b:74:ee:d0:7a:cd:a2:
                    2b:65:41:30:1d:41:4b:1e:78:7d:d2:93:4c:ae:a9:
                    39:65:8f:c6:78:47:e0:61:cc:b4:f0:2e:09:b2:d3:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8F:4E:A8:EC:13:51:75:9E:79:BC:45:5C:BC:3E:13:89:FD:91:08
            X509v3 Authority Key Identifier:
                keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:d8:19:a3:a5:6d:a4:36:0b:ef:17:fa:b5:53:20:6c:57:
         d0:34:89:3e:37:c3:dc:50:b6:01:8f:29:9f:ed:63:c7:83:3a:
         3c:6e:9f:95:61:57:6f:95:10:50:0f:1e:1f:52:2f:8d:d1:e1:
         c1:ae:07:07:c5:77:5a:5e:c0:6f:42:ee:df:f2:28:d5:6a:75:
         e1:06:fd:b7:bc:9d:6c:7a:a2:ee:32:ac:e4:12:d2:40:14:34:
         94:01:99:02:5a:dd:29:74:f2:3b:5b:ca:72:1f:2d:71:6a:57:
         2d:1a:6c:dc:c4:68:ea:fd:41:89:62:cd:37:a7:af:41:a3:fa:
         e5:84:57:06:ad:15:b7:1e:ba:7b:fa:3a:2e:16:41:8d:24:bc:
         66:af:58:5c:00:ec:6a:81:5f:ae:bd:33:43:9c:f9:5a:97:61:
         0f:57:e4:72:48:91:f9:0b:6f:bc:55:8f:4f:a0:0d:45:b1:fc:
         1f:5a:a9:2a:00:13:b7:8a:34:e6:76:25:fd:8f:f8:f7:96:7d:
         2e:f2:25:ff:7f:35:a5:9d:fc:43:fc:51:29:fc:8b:8b:03:0d:
         0a:b3:29:96:bf:ae:0c:90:25:cf:85:1e:38:86:b8:0c:31:61:
         7a:78:0c:f8:0d:5d:a6:68:6b:98:87:34:ab:c8:84:e9:3a:d6:
         f5:0b:28:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkpeE0VgP5WELuyeEG5ySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2
YTU2MTEwHhcNMjYwNjEzMjAwMDQ3WhcNMjYwNjE0MjAwMDQ3WjAzMTEwLwYDVQQD
EygwMDhmNGVhOGVjMTM1MTc1OWU3OWJjNDU1Y2JjM2UxMzg5ZmQ5MTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFBtIyFU0dcAlh0vYDJn2khOw6B6
KUhnjzb8/jhTDu2r4kw+tbvc9PfnsSRWfPg/oRnIcgFcYsPaPE2c86PwfBnX91Vg
UpAQink5lfsL+QYbg0A9dmLasI7Ch7fvs/nuU94N/p5eSKmHxQXEAHXnWSkgh5ID
TWNyZzNJ1YqdJoFwnzgJz8Ifm6KqmBhoIcbE9Ab6x1x1JNC266pfYNWDn8TiH8W0
Z5yXOTO8YMMWxPOENd38ao7UnucLc9Wl11QsUFttWSXt0WHrqahktg4xxKGhkRRp
95Dv+lt07tB6zaIrZUEwHUFLHnh90pNMrqk5ZY/GeEfgYcy08C4JstMT6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACPTqjsE1F1nnm8RVy8PhOJ/ZEIMB8GA1UdIwQY
MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt
YjhjMzZlY2VkYWQ4LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4
LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwnYGaOl
baQ2C+8X+rVTIGxX0DSJPjfD3FC2AY8pn+1jx4M6PG6flWFXb5UQUA8eH1IvjdHh
wa4HB8V3Wl7Ab0Lu3/Io1Wp14Qb9t7ydbHqi7jKs5BLSQBQ0lAGZAlrdKXTyO1vK
ch8tcWpXLRps3MRo6v1BiWLNN6evQaP65YRXBq0Vtx66e/o6LhZBjSS8Zq9YXADs
aoFfrr0zQ5z5WpdhD1fkckiR+QtvvFWPT6ANRbH8H1qpKgATt4o05nYl/Y/495Z9
LvIl/381pZ38Q/xRKfyLiwMNCrMplr+uDJAlz4UeOIa4DDFhengM+A1dpmhrmIc0
q8iE6TrW9QsoEw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:26 2026 by rpki-client