Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File:                     1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier:          al8oqIr3xtvB6kLG8sl02KLAJZIqAhn8qsioHQPVgIA=
Subject key identifier:   BF:7B:A3:C3:22:17:2F:33:92:F4:6F:F3:54:15:94:29:6F:1F:5B:44
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       019EBF23749336268D0B68E7DCE1A891EE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number:          12C6
Signing time:             Sat 13 Jun 2026 04:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:32 +0000
Files and hashes:         1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: LIWsPOt7Rm4AkLCK4M4NWr+VtcA8xGw1y85ScFPcrMU=)
                          2: MNcRXpZmo9U1VGyp7iNoe-ahRYc.roa (hash: sUVdf+DEbppS/mcQWvKY4TguTZDnt2ApNazCAD8Sm+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:74:93:36:26:8d:0b:68:e7:dc:e1:a8:91:ee:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: Jun 13 04:00:32 2026 GMT
            Not After : Jun 14 04:00:32 2026 GMT
        Subject: CN=bf7ba3c322172f3392f46ff3541594296f1f5b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:73:5c:67:c2:2b:94:c5:95:2d:c4:45:a4:
                    6e:aa:80:00:4b:63:5d:e4:51:3c:cf:4d:98:10:8f:
                    be:fc:25:8e:7e:54:f3:34:49:d0:11:43:d1:ea:b3:
                    13:6c:44:56:d0:7d:5c:e5:6d:1d:ae:a1:fd:cd:ab:
                    53:60:c4:b6:21:33:b0:cf:2f:67:a3:68:26:52:74:
                    34:bd:81:cc:a7:04:c4:5d:1d:f2:bb:d6:1a:5c:18:
                    29:aa:9b:cd:f1:6d:9f:53:b9:0d:87:0b:38:67:4f:
                    b2:c1:29:f0:84:a9:12:86:09:59:55:c8:cf:58:cc:
                    6d:d3:fd:5d:89:93:39:2d:63:87:01:16:a4:f4:ca:
                    d7:d1:69:27:13:8c:a0:a0:bb:24:a0:65:72:22:67:
                    5e:ea:37:2e:7d:ed:4e:15:9a:2b:f1:7d:28:4b:bb:
                    3e:03:b6:01:9f:31:a1:9a:76:d9:59:54:98:fd:4b:
                    28:f7:61:68:80:76:01:e2:e8:c1:b9:6b:a7:4b:25:
                    1f:7c:d5:78:83:a3:10:05:22:d7:d9:77:71:ec:35:
                    68:fc:d9:0f:1c:1c:46:33:7b:16:6d:d2:16:e0:77:
                    7a:2e:62:bb:4a:6a:78:bb:0a:d3:36:84:9f:f1:dc:
                    85:a1:20:a9:c0:fa:bd:79:e0:85:a8:08:dd:bc:0d:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7B:A3:C3:22:17:2F:33:92:F4:6F:F3:54:15:94:29:6F:1F:5B:44
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a8:9f:bf:f4:e0:b0:49:b4:1e:27:aa:19:09:93:7b:92:63:
         a0:dd:19:73:8f:d6:1b:df:41:6a:71:8a:ae:ea:b4:cf:fe:5e:
         f8:e1:7c:6a:fc:7c:3c:9d:e4:81:fe:60:20:37:88:cb:62:87:
         70:c7:6f:1b:73:7c:75:bb:0b:f8:56:37:91:4f:a1:de:bd:dc:
         41:94:41:a1:c2:d0:2a:a6:e1:94:86:a0:d6:ad:8f:d8:e3:36:
         95:8c:7e:61:b9:c1:88:ac:11:1c:c6:88:f5:73:13:25:ff:a6:
         1f:46:dd:23:3b:25:c7:33:e1:56:73:8c:66:90:29:af:06:66:
         13:e6:1f:22:a4:f1:33:cc:70:81:c0:56:97:18:b5:82:f5:99:
         31:e7:95:60:2a:9e:80:fe:6f:12:55:eb:e7:0a:0d:96:a0:5a:
         19:ff:36:ad:01:79:22:60:5f:4f:a3:14:17:c7:25:9b:fe:c0:
         8d:b1:5d:b4:7e:0a:da:6d:f7:c3:8a:80:97:54:35:1c:26:e2:
         78:b1:a6:dc:6c:93:85:25:f0:8b:40:24:90:43:67:2b:d6:9b:
         c0:65:37:99:d5:22:3f:a7:7f:f5:01:d9:01:b8:f7:b1:9a:76:
         9e:4a:ea:cc:28:0f:17:23:37:ef:88:69:0b:8d:9b:01:bf:63:
         2e:4b:b3:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I3STNiaNC2jn3OGoke4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz
Yzk3OTYwHhcNMjYwNjEzMDQwMDMyWhcNMjYwNjE0MDQwMDMyWjAzMTEwLwYDVQQD
EyhiZjdiYTNjMzIyMTcyZjMzOTJmNDZmZjM1NDE1OTQyOTZmMWY1YjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4pzXGfCK5TFlS3ERaRuqoAAS2Nd
5FE8z02YEI++/CWOflTzNEnQEUPR6rMTbERW0H1c5W0drqH9zatTYMS2ITOwzy9n
o2gmUnQ0vYHMpwTEXR3yu9YaXBgpqpvN8W2fU7kNhws4Z0+ywSnwhKkShglZVcjP
WMxt0/1diZM5LWOHARak9MrX0WknE4ygoLskoGVyImde6jcufe1OFZor8X0oS7s+
A7YBnzGhmnbZWVSY/Uso92FogHYB4ujBuWunSyUffNV4g6MQBSLX2Xdx7DVo/NkP
HBxGM3sWbdIW4Hd6LmK7Smp4uwrTNoSf8dyFoSCpwPq9eeCFqAjdvA0lZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL97o8MiFy8zkvRv81QVlClvH1tEMB8GA1UdIwQY
MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt
MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1
LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6ifv/Tg
sEm0HieqGQmTe5JjoN0Zc4/WG99BanGKruq0z/5e+OF8avx8PJ3kgf5gIDeIy2KH
cMdvG3N8dbsL+FY3kU+h3r3cQZRBocLQKqbhlIag1q2P2OM2lYx+YbnBiKwRHMaI
9XMTJf+mH0bdIzslxzPhVnOMZpAprwZmE+YfIqTxM8xwgcBWlxi1gvWZMeeVYCqe
gP5vElXr5woNlqBaGf82rQF5ImBfT6MUF8clm/7AjbFdtH4K2m33w4qAl1Q1HCbi
eLGm3GyThSXwi0AkkENnK9abwGU3mdUiP6d/9QHZAbj3sZp2nkrqzCgPFyM374hp
C42bAb9jLkuzQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:04 2026 by rpki-client