Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File:                     aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier:          rFn8gok74ghSUMOK7P8cn2C3J32yXeki+1ButdJeoh0=
Subject key identifier:   96:32:91:3E:70:DD:E2:05:F2:18:7B:9E:D5:A4:34:79:09:85:D0:EB
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer:       /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial:       019EBFC908C9D537612A636B56F4D3C2D004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number:          18EC
Signing time:             Sat 13 Jun 2026 07:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:23 +0000
Files and hashes:         1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: TN2LYkLSMt4J8Wu8fgmHCNAPdHLCIWIhzXZu8yfzLhw=)
                          2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:08:c9:d5:37:61:2a:63:6b:56:f4:d3:c2:d0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
        Validity
            Not Before: Jun 13 07:01:23 2026 GMT
            Not After : Jun 14 07:01:23 2026 GMT
        Subject: CN=9632913e70dde205f2187b9ed5a434790985d0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:ec:cb:cf:84:26:2a:f2:7f:e8:78:10:7d:
                    69:46:c3:b5:ed:f0:f1:85:61:ec:27:1c:f5:2a:88:
                    3f:8d:83:2c:fe:97:2c:77:c8:ee:e6:87:6a:50:42:
                    68:77:53:83:e6:37:6e:29:68:ff:3a:61:1d:c6:44:
                    dd:25:ef:da:67:0a:a6:c9:1c:4e:b0:7b:6e:27:a9:
                    43:75:0c:3d:bf:3a:2c:5d:60:d5:a3:2d:5f:47:d5:
                    82:98:46:67:8e:ea:71:c2:ef:49:cb:42:c4:94:1a:
                    fb:f2:fa:bc:80:22:d5:5d:38:a4:e9:dc:11:43:87:
                    9c:d8:21:b4:d1:3b:ed:69:bc:71:a3:eb:f6:d5:9c:
                    83:92:ea:2c:db:06:b3:ec:bf:8d:cc:d2:73:2a:67:
                    1e:6e:25:10:e6:42:cb:ec:42:3b:17:92:4f:83:b2:
                    8b:54:3d:72:4a:c4:24:d0:92:33:57:58:eb:c8:86:
                    97:23:09:8c:1e:53:ea:17:87:26:54:58:0b:e2:8e:
                    c1:e2:12:83:a7:07:72:5d:30:b1:54:77:92:02:61:
                    ca:a1:91:3a:6c:41:cd:2e:9c:7f:b0:73:7c:f7:c2:
                    ee:1d:5f:e7:f1:33:e5:25:9c:41:b8:11:45:b3:88:
                    10:b4:5e:31:c6:f0:5d:25:f3:c4:84:24:8a:4b:db:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:32:91:3E:70:DD:E2:05:F2:18:7B:9E:D5:A4:34:79:09:85:D0:EB
            X509v3 Authority Key Identifier:
                keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c8:61:2c:25:27:6f:0b:b6:0a:79:c2:ed:b7:cc:37:03:29:
         de:e5:15:88:9b:6a:37:b9:1f:f8:6e:5b:0b:9a:bf:ea:21:f1:
         25:b9:97:ca:4c:d0:fa:42:46:6a:3a:d3:3c:e6:6f:5f:c9:36:
         58:a7:1b:72:16:ba:54:5a:ad:3b:2c:03:2b:c3:da:a4:0b:b7:
         82:83:7b:67:fc:5f:57:36:d1:fe:4f:e4:07:b4:17:53:73:ce:
         0e:ae:1e:59:a7:73:22:74:50:72:f1:5e:94:08:ab:14:96:31:
         2a:e4:f9:97:19:a9:81:f4:70:55:14:05:9b:2e:ba:b2:55:d2:
         4a:8c:08:ab:8e:6e:18:b7:d8:52:49:c1:0f:9b:22:34:02:7b:
         d0:32:0b:7c:48:67:10:e8:a8:d8:02:98:d8:fd:cd:1f:43:14:
         31:76:aa:81:ca:23:c8:e0:4a:79:8f:aa:36:ac:cf:a8:40:bc:
         b9:99:61:e9:80:f1:a6:99:07:45:a7:fe:43:a5:0c:2c:4f:6a:
         19:9c:86:cf:36:2c:09:7f:cf:98:50:1f:f3:7e:a5:3d:29:17:
         8b:73:69:15:b6:ec:a7:19:ed:c6:02:9f:9e:a9:96:e2:34:8a:
         54:93:35:d2:47:37:66:26:ed:cf:2a:bd:a5:b9:01:a6:90:c2:
         4d:23:d4:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yQjJ1TdhKmNrVvTTwtAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjYwNjEzMDcwMTIzWhcNMjYwNjE0MDcwMTIzWjAzMTEwLwYDVQQD
Eyg5NjMyOTEzZTcwZGRlMjA1ZjIxODdiOWVkNWE0MzQ3OTA5ODVkMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KDsy8+EJiryf+h4EH1pRsO17fDx
hWHsJxz1Kog/jYMs/pcsd8ju5odqUEJod1OD5jduKWj/OmEdxkTdJe/aZwqmyRxO
sHtuJ6lDdQw9vzosXWDVoy1fR9WCmEZnjupxwu9Jy0LElBr78vq8gCLVXTik6dwR
Q4ec2CG00Tvtabxxo+v21ZyDkuos2waz7L+NzNJzKmcebiUQ5kLL7EI7F5JPg7KL
VD1ySsQk0JIzV1jryIaXIwmMHlPqF4cmVFgL4o7B4hKDpwdyXTCxVHeSAmHKoZE6
bEHNLpx/sHN898LuHV/n8TPlJZxBuBFFs4gQtF4xxvBdJfPEhCSKS9sWsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYykT5w3eIF8hh7ntWkNHkJhdDrMB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGshhLCUn
bwu2CnnC7bfMNwMp3uUViJtqN7kf+G5bC5q/6iHxJbmXykzQ+kJGajrTPOZvX8k2
WKcbcha6VFqtOywDK8PapAu3goN7Z/xfVzbR/k/kB7QXU3PODq4eWadzInRQcvFe
lAirFJYxKuT5lxmpgfRwVRQFmy66slXSSowIq45uGLfYUknBD5siNAJ70DILfEhn
EOio2AKY2P3NH0MUMXaqgcojyOBKeY+qNqzPqEC8uZlh6YDxppkHRaf+Q6UMLE9q
GZyGzzYsCX/PmFAf836lPSkXi3NpFbbspxntxgKfnqmW4jSKVJM10kc3Zibtzyq9
pbkBppDCTSPUPw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:52:12 2026 by rpki-client