Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File:                     6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier:          JP5/lYf5QS6TJg14gqY1k3kwrORyD8sMnKtxHnRuJws=
Subject key identifier:   5B:AF:9C:AF:73:D4:D1:FC:0D:9E:29:0E:E9:7E:36:D0:C6:0A:08:11
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer:       /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial:       019EBF23F3685F7DBCB472F547168C4AB1D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number:          0831
Signing time:             Sat 13 Jun 2026 04:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:04 +0000
Files and hashes:         1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: /WEsoC2oD9yFVpkqGqpKpDpLwplgbLpFMVNtAreq/eQ=)
                          2: Bo61RTRTOhfwB50Bqs5zl4FzjGE.asa (hash: fR/GqKb8wiw/0kJKnHBnbPsaaq7HXPxVfPXam3jXJ9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:f3:68:5f:7d:bc:b4:72:f5:47:16:8c:4a:b1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
        Validity
            Not Before: Jun 13 04:01:04 2026 GMT
            Not After : Jun 14 04:01:04 2026 GMT
        Subject: CN=5baf9caf73d4d1fc0d9e290ee97e36d0c60a0811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:7b:04:d6:75:68:29:26:ba:9b:25:8f:43:
                    1d:32:c6:bf:aa:84:51:21:ab:87:2f:c2:56:d9:c7:
                    99:28:93:e4:ec:67:c8:db:47:e4:60:ea:92:8b:34:
                    ff:a5:4b:38:30:4c:71:dc:57:8c:97:32:cd:72:7b:
                    ad:c6:a1:79:af:cf:68:08:af:aa:ed:75:83:16:a4:
                    25:8a:c1:68:8c:b1:a0:4c:d2:20:07:6a:38:7b:00:
                    bd:d5:30:76:02:06:15:fa:23:b1:32:68:c3:aa:7f:
                    da:1b:a5:fc:c4:10:7c:e7:ff:da:db:e0:7c:4e:30:
                    7f:d2:b4:06:a1:c6:b7:94:c3:71:57:42:b4:8d:5a:
                    aa:79:c2:f8:2d:dc:56:83:94:b7:79:ed:92:6f:d7:
                    5a:d5:a1:39:17:7c:fc:5a:b2:9b:42:81:85:75:14:
                    d1:f3:e7:36:8b:9b:c8:fe:e8:b8:56:eb:82:68:71:
                    95:f0:7f:f6:22:8b:b3:2a:98:65:4a:f9:4e:be:dd:
                    33:19:fa:ac:de:ae:9c:b3:ba:3a:c6:08:a0:2e:de:
                    ae:ff:a0:a2:07:3c:dc:4b:f3:74:8b:de:d4:42:24:
                    ba:03:b1:52:65:3a:9d:51:20:ea:ec:2e:16:4c:62:
                    20:2c:20:dc:eb:8c:99:d5:43:d0:0c:9a:ac:00:7d:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:9C:AF:73:D4:D1:FC:0D:9E:29:0E:E9:7E:36:D0:C6:0A:08:11
            X509v3 Authority Key Identifier:
                keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bc:14:93:16:df:da:3a:1d:67:5a:37:26:61:c5:c5:28:f4:
         6a:b3:c3:30:d1:a1:7e:82:e1:dd:2d:7c:1c:6c:ab:ed:0a:92:
         74:57:3f:7f:76:7c:c3:4c:89:bd:51:2d:8c:8a:7c:17:39:35:
         52:75:cc:05:d8:20:9f:35:35:e6:96:4a:06:75:8d:e1:dd:62:
         26:32:d8:44:9f:66:aa:11:3c:2b:04:fa:fb:e8:99:03:83:54:
         29:04:fb:23:89:fe:45:ee:04:fc:e3:a0:f9:d7:f8:68:00:be:
         18:a2:48:a5:d7:9f:db:2d:5e:e7:86:a3:31:ed:16:21:51:9f:
         85:60:00:6e:3a:88:f9:d6:5f:aa:95:5c:f1:bd:1a:49:9c:28:
         0a:8e:01:84:70:54:4e:f6:95:2a:5b:f0:45:b4:a1:d9:e9:66:
         ed:2a:b8:9c:7d:06:5e:32:da:ae:a6:27:0c:ab:39:6e:cc:8a:
         03:58:79:5a:30:71:4f:88:96:07:10:20:b0:e2:f2:44:a9:97:
         b4:92:0a:bd:81:47:be:14:80:3a:32:0a:7c:cd:96:a4:33:fc:
         16:6e:a7:ee:81:9b:a6:df:91:70:f0:3f:51:e8:8c:15:78:ba:
         1c:62:48:ff:e0:72:21:dd:9f:39:f8:26:d7:f7:f4:6b:a2:ce:
         f3:08:2d:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I/NoX328tHL1RxaMSrHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTRmZjZhY2IxODBlNjA0OTczYTUyODdlZjBhOTJlNjZk
ZmNjZTkwHhcNMjYwNjEzMDQwMTA0WhcNMjYwNjE0MDQwMTA0WjAzMTEwLwYDVQQD
Eyg1YmFmOWNhZjczZDRkMWZjMGQ5ZTI5MGVlOTdlMzZkMGM2MGEwODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmt7BNZ1aCkmupslj0MdMsa/qoRR
IauHL8JW2ceZKJPk7GfI20fkYOqSizT/pUs4MExx3FeMlzLNcnutxqF5r89oCK+q
7XWDFqQlisFojLGgTNIgB2o4ewC91TB2AgYV+iOxMmjDqn/aG6X8xBB85//a2+B8
TjB/0rQGoca3lMNxV0K0jVqqecL4LdxWg5S3ee2Sb9da1aE5F3z8WrKbQoGFdRTR
8+c2i5vI/ui4VuuCaHGV8H/2IouzKphlSvlOvt0zGfqs3q6cs7o6xgigLt6u/6Ci
BzzcS/N0i97UQiS6A7FSZTqdUSDq7C4WTGIgLCDc64yZ1UPQDJqsAH0Z8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuvnK9z1NH8DZ4pDul+NtDGCggRMB8GA1UdIwQY
MBaAFOpU/2rLGA5gSXOlKH7wqS5m38zpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kZjE5ODUtYWMzZS00NDA0LTgyMWMt
NDNjOGY4YjJjMzg0LzEvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kZjE5ODUtYWMzZS00NDA0LTgyMWMtNDNjOGY4YjJjMzg0
LzEvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLwUkxbf
2jodZ1o3JmHFxSj0arPDMNGhfoLh3S18HGyr7QqSdFc/f3Z8w0yJvVEtjIp8Fzk1
UnXMBdggnzU15pZKBnWN4d1iJjLYRJ9mqhE8KwT6++iZA4NUKQT7I4n+Re4E/OOg
+df4aAC+GKJIpdef2y1e54ajMe0WIVGfhWAAbjqI+dZfqpVc8b0aSZwoCo4BhHBU
TvaVKlvwRbSh2elm7Sq4nH0GXjLarqYnDKs5bsyKA1h5WjBxT4iWBxAgsOLyRKmX
tJIKvYFHvhSAOjIKfM2WpDP8Fm6n7oGbpt+RcPA/UeiMFXi6HGJI/+ById2fOfgm
1/f0a6LO8wgtSg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:56 2026 by rpki-client