Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File:                     Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier:          V6wcKrihlgDagzTWzlUzDXKZkjyYcvoaavt7up9zY+c=
Subject key identifier:   8F:63:2A:94:10:CB:D4:59:25:EC:6F:E8:45:3A:1C:F7:64:D5:28:8A
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer:       /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial:       019EC224A4FEB2D98EA2AB9259305C988BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number:          06D1
Signing time:             Sat 13 Jun 2026 18:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:41 +0000
Files and hashes:         1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: VM2EXytrYBP+lRE/UOs9yJpr7wx7lPMD0w4AGp4PvxA=)
                          2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:a4:fe:b2:d9:8e:a2:ab:92:59:30:5c:98:8b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
        Validity
            Not Before: Jun 13 18:00:41 2026 GMT
            Not After : Jun 14 18:00:41 2026 GMT
        Subject: CN=8f632a9410cbd45925ec6fe8453a1cf764d5288a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:74:6c:de:ad:82:0b:18:8a:14:29:31:f0:
                    09:9f:fa:79:f2:74:79:f4:a5:b6:a1:68:cd:02:be:
                    db:57:c6:df:1e:af:6c:6c:42:ba:37:2d:ce:30:f5:
                    26:60:65:9d:e6:ab:31:e7:da:c3:0b:38:20:9f:fa:
                    93:11:48:2a:d7:25:66:6b:bf:f3:ae:43:c9:58:b0:
                    90:7e:23:a2:0a:06:1d:10:8d:5a:23:61:20:7f:92:
                    47:d2:d0:75:40:ca:5c:49:98:da:ce:19:b5:3f:5e:
                    c2:f8:bb:d4:09:7b:05:7c:26:ea:ee:79:19:e4:bb:
                    b2:f4:2a:c1:b4:e6:5c:00:aa:ef:2a:15:07:13:76:
                    b6:b9:a5:d0:27:b9:35:f1:1c:2e:94:3c:93:ae:4c:
                    17:73:90:15:af:00:64:97:53:1b:b7:29:e6:1c:8b:
                    70:c2:26:42:c8:7d:ad:88:6c:37:cc:21:73:0f:ce:
                    65:da:7c:6f:78:e6:82:51:e8:34:fb:0d:5f:ba:b5:
                    14:ea:a4:fb:a1:be:41:16:cf:23:4f:f7:2b:9c:da:
                    0e:6e:81:be:ad:9f:8f:db:08:c0:3b:19:07:89:f6:
                    65:ec:a3:33:45:c3:4b:d9:dd:f1:1c:22:c3:8d:cc:
                    35:03:83:0c:e1:0c:ab:83:22:a1:c3:60:6a:1f:3e:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:63:2A:94:10:CB:D4:59:25:EC:6F:E8:45:3A:1C:F7:64:D5:28:8A
            X509v3 Authority Key Identifier:
                keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6c:aa:87:5d:dd:95:85:7b:b1:88:38:dc:bc:11:3a:60:7e:
         16:ea:f0:57:34:48:94:b0:b7:d5:b7:98:64:7a:9f:f9:7e:70:
         14:11:6e:2b:4d:3a:4f:3c:f0:4b:64:58:9f:9e:1b:ed:e2:8d:
         01:fe:1c:fe:de:f8:df:f7:29:72:ab:50:e6:3a:49:d4:a6:63:
         24:83:4a:03:b3:23:74:d1:99:2f:e0:41:d9:10:31:b6:7a:2b:
         2d:58:c9:52:2a:63:c7:a5:cd:a2:bd:ec:13:59:e6:9f:1f:29:
         a6:ed:ce:49:62:04:08:72:f5:63:6e:8d:bc:6f:89:a8:e4:c7:
         9e:73:40:10:f3:99:32:9d:b2:4f:d5:b0:1c:ca:1d:15:48:36:
         d1:fe:da:d4:9c:53:33:d8:be:3d:2c:2b:51:c8:9d:13:9a:3f:
         97:97:57:78:06:51:08:05:a8:ce:2c:ad:0b:1a:2b:a7:eb:4c:
         eb:c8:9d:c6:c2:f7:28:2d:b6:ed:8a:1d:64:27:ca:04:20:ca:
         99:f2:39:d0:00:f1:03:82:0f:4d:bc:e3:b1:8b:26:93:87:f5:
         f7:79:5a:3e:d9:0f:ba:d2:33:17:06:dd:eb:50:fa:dc:9c:2e:
         d2:bc:f2:4e:57:93:36:a4:3b:d5:78:17:b6:6f:50:d9:cd:74:
         c3:28:ab:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJKT+stmOoquSWTBcmIu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz
MTFkOGMwHhcNMjYwNjEzMTgwMDQxWhcNMjYwNjE0MTgwMDQxWjAzMTEwLwYDVQQD
Eyg4ZjYzMmE5NDEwY2JkNDU5MjVlYzZmZTg0NTNhMWNmNzY0ZDUyODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUR0bN6tggsYihQpMfAJn/p58nR5
9KW2oWjNAr7bV8bfHq9sbEK6Ny3OMPUmYGWd5qsx59rDCzggn/qTEUgq1yVma7/z
rkPJWLCQfiOiCgYdEI1aI2Egf5JH0tB1QMpcSZjazhm1P17C+LvUCXsFfCbq7nkZ
5Luy9CrBtOZcAKrvKhUHE3a2uaXQJ7k18RwulDyTrkwXc5AVrwBkl1MbtynmHItw
wiZCyH2tiGw3zCFzD85l2nxveOaCUeg0+w1furUU6qT7ob5BFs8jT/crnNoOboG+
rZ+P2wjAOxkHifZl7KMzRcNL2d3xHCLDjcw1A4MM4QyrgyKhw2BqHz79QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9jKpQQy9RZJexv6EU6HPdk1SiKMB8GA1UdIwQY
MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt
MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx
LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGyqh13d
lYV7sYg43LwROmB+FurwVzRIlLC31beYZHqf+X5wFBFuK006TzzwS2RYn54b7eKN
Af4c/t743/cpcqtQ5jpJ1KZjJINKA7MjdNGZL+BB2RAxtnorLVjJUipjx6XNor3s
E1nmnx8ppu3OSWIECHL1Y26NvG+JqOTHnnNAEPOZMp2yT9WwHModFUg20f7a1JxT
M9i+PSwrUcidE5o/l5dXeAZRCAWoziytCxorp+tM68idxsL3KC227YodZCfKBCDK
mfI50ADxA4IPTbzjsYsmk4f193laPtkPutIzFwbd61D63Jwu0rzyTleTNqQ71XgX
tm9Q2c10wyirWw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:30 2026 by rpki-client