Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
File:                     scmBDnrcyQAMDFlgEZoS7sbzvYY.mft (raw, json)
Hash identifier:          UxhFsA7CXNOGnoWMMRx/ycyAT8LOyYe0aeZ/pq/o71c=
Subject key identifier:   AD:1D:82:5A:70:EF:99:A4:DD:2B:E2:8B:EE:36:54:2C:01:6D:53:A4
Authority key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Certificate issuer:       /CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Certificate serial:       019EBE7F69D2682BB59F3E6131FBB1498CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
Manifest number:          B3
Signing time:             Sat 13 Jun 2026 01:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:21 +0000
Files and hashes:         1: YUg_MdZJ_6lF6Qpxti_zYM3Wmv4.asa (hash: iwOMR1VHsxe5VawZKy+EqitcK6kizlZazlcOwvAKuPk=)
                          2: scmBDnrcyQAMDFlgEZoS7sbzvYY.crl (hash: X0hvhir8Xf6p+GWVofc9sdGdwTkRtjue5ayBNwXtJmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:69:d2:68:2b:b5:9f:3e:61:31:fb:b1:49:8c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
        Validity
            Not Before: Jun 13 01:01:21 2026 GMT
            Not After : Jun 14 01:01:21 2026 GMT
        Subject: CN=ad1d825a70ef99a4dd2be28bee36542c016d53a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:a8:b7:20:04:40:bf:27:a6:a8:62:cd:a5:
                    9b:c8:7b:4c:75:87:7a:49:9a:4a:4f:ee:fd:89:80:
                    c8:55:d4:40:c8:0a:2b:91:35:f4:a0:aa:e2:73:b8:
                    ea:85:4d:a8:c3:f9:f7:1c:a8:82:18:cb:4d:76:c5:
                    85:dc:2b:1a:d6:08:19:da:5c:ad:2c:f5:db:9c:0b:
                    23:c4:63:92:23:de:a3:64:1f:da:98:0b:16:11:06:
                    6d:23:f2:4a:c2:e2:83:b6:76:63:9e:c6:47:49:e5:
                    a4:ff:a2:f3:0f:99:e0:32:a3:49:1e:fb:b7:40:2a:
                    15:1e:ff:13:05:3c:99:1d:e1:0d:e1:3c:09:10:7d:
                    c8:c2:8a:e1:f7:1a:dc:d3:c4:c8:15:72:b9:9c:67:
                    da:71:7c:98:70:d4:d6:67:9a:e2:ae:21:11:ec:59:
                    02:cb:69:eb:a0:70:97:9f:fa:98:be:9c:f5:da:12:
                    b7:15:8f:a2:c7:8e:a3:cd:a7:77:eb:e3:9c:df:ff:
                    93:a3:42:1d:98:ee:b9:a2:ab:ec:f5:bd:08:cf:32:
                    ec:6b:35:e6:8b:da:da:65:d0:0d:da:c7:94:1b:69:
                    c2:3d:f7:27:d8:74:2b:de:c7:9e:4f:65:40:79:f7:
                    ce:89:53:bd:90:9f:e2:50:c1:61:a0:31:5e:49:ea:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1D:82:5A:70:EF:99:A4:DD:2B:E2:8B:EE:36:54:2C:01:6D:53:A4
            X509v3 Authority Key Identifier:
                keyid:B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c9:1d:de:f3:c7:e3:0c:ca:aa:52:74:fd:c3:ba:33:ef:09:
         80:af:2f:e5:16:55:13:cf:1e:79:cf:64:15:42:a9:c4:fd:7c:
         3b:f1:8d:4a:b3:d3:e4:14:48:ca:71:16:90:2e:d9:90:63:44:
         2c:1a:9a:33:c8:0b:0a:ca:d3:b1:96:a0:5c:cb:e2:77:a6:50:
         ba:34:17:a3:e8:a7:76:8d:13:42:7f:84:e5:1f:14:b1:13:43:
         ba:a8:3d:d3:54:df:32:38:df:01:14:0a:de:31:aa:57:20:d4:
         cd:26:70:33:70:74:18:98:0f:34:93:d6:cb:3b:14:33:12:97:
         b8:94:97:7b:6f:a1:cd:fd:e9:31:d1:73:c2:19:74:8b:d4:53:
         bd:b8:6a:64:68:ec:c7:5a:58:e8:ad:71:8f:e1:24:e4:fb:b7:
         9b:9f:1b:af:6d:f4:96:54:e0:8f:a1:e9:78:ab:9a:fd:4f:2a:
         29:17:4b:78:9d:04:0b:ce:b9:e8:ae:a3:73:7c:f2:d4:26:c3:
         15:59:cd:e5:0b:0e:11:49:a0:f7:21:0d:5b:99:0a:1a:5c:ce:
         e4:75:21:54:2e:5f:0e:78:07:f3:a0:67:ab:86:df:81:d4:d7:
         08:e5:dd:b0:66:e4:4c:70:2b:03:a8:bd:a1:d1:fe:74:df:57:
         be:b3:51:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f2nSaCu1nz5hMfuxSYzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzk4MTBlN2FkY2M5MDAwYzBjNTk2MDExOWExMmVlYzZm
M2JkODYwHhcNMjYwNjEzMDEwMTIxWhcNMjYwNjE0MDEwMTIxWjAzMTEwLwYDVQQD
EyhhZDFkODI1YTcwZWY5OWE0ZGQyYmUyOGJlZTM2NTQyYzAxNmQ1M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVGotyAEQL8npqhizaWbyHtMdYd6
SZpKT+79iYDIVdRAyAorkTX0oKric7jqhU2ow/n3HKiCGMtNdsWF3Csa1ggZ2lyt
LPXbnAsjxGOSI96jZB/amAsWEQZtI/JKwuKDtnZjnsZHSeWk/6LzD5ngMqNJHvu3
QCoVHv8TBTyZHeEN4TwJEH3Iworh9xrc08TIFXK5nGfacXyYcNTWZ5ririER7FkC
y2nroHCXn/qYvpz12hK3FY+ix46jzad36+Oc3/+To0IdmO65oqvs9b0IzzLsazXm
i9raZdAN2seUG2nCPfcn2HQr3seeT2VAeffOiVO9kJ/iUMFhoDFeSepAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0dglpw75mk3Svii+42VCwBbVOkMB8GA1UdIwQY
MBaAFLHJgQ563MkADAxZYBGaEu7G872GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lMTRjMWItNGQ4YS00MzA5LTlhMDEt
NWQ3ZDI2NzRiZTdjLzEvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lMTRjMWItNGQ4YS00MzA5LTlhMDEtNWQ3ZDI2NzRiZTdj
LzEvc2NtQkRucmN5UUFNREZsZ0Vab1M3c2J6dllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASskd3vPH
4wzKqlJ0/cO6M+8JgK8v5RZVE88eec9kFUKpxP18O/GNSrPT5BRIynEWkC7ZkGNE
LBqaM8gLCsrTsZagXMvid6ZQujQXo+indo0TQn+E5R8UsRNDuqg901TfMjjfARQK
3jGqVyDUzSZwM3B0GJgPNJPWyzsUMxKXuJSXe2+hzf3pMdFzwhl0i9RTvbhqZGjs
x1pY6K1xj+Ek5Pu3m58br230llTgj6HpeKua/U8qKRdLeJ0EC8656K6jc3zy1CbD
FVnN5QsOEUmg9yENW5kKGlzO5HUhVC5fDngH86Bnq4bfgdTXCOXdsGbkTHArA6i9
odH+dN9XvrNR2A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:01 2026 by rpki-client