Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File:                     DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier:          nvJH32hGYzqDXJdG8qAO21PbvIq1rnfOXLDC1GIeWKs=
Subject key identifier:   01:A6:08:20:37:4B:7D:C9:FD:6F:1C:CF:8B:6E:F4:EB:59:C5:E6:8F
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer:       /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial:       019EBFC91E6B84AC9CDDFAD5E7DD9064C3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 07:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:29 +0000
Files and hashes:         1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: /CbC9toR7tddTUFihnUxdaquUECWikVdEun5lrhuCJE=)
                          2: euykxJ3WjspN-qBMxs7ZONHmb7U.roa (hash: TMaFLPTY6eGm7WPriyY/nMPS56Sk9q9sf1AwuMKPgDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:1e:6b:84:ac:9c:dd:fa:d5:e7:dd:90:64:c3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
        Validity
            Not Before: Jun 13 07:01:29 2026 GMT
            Not After : Jun 14 07:01:29 2026 GMT
        Subject: CN=01a60820374b7dc9fd6f1ccf8b6ef4eb59c5e68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:64:a6:17:dc:fa:4a:a0:4d:2d:63:58:4f:c6:
                    f8:b0:89:79:0d:fa:d2:80:21:c6:2b:7f:24:11:8d:
                    e6:88:d6:10:37:0a:5c:eb:8f:11:a1:61:a9:fb:84:
                    c8:31:e9:2c:72:03:d9:20:3b:f7:f5:60:38:a0:80:
                    7a:56:c0:6a:a7:f4:66:53:5b:3e:bd:1d:1b:e8:0f:
                    28:6e:56:e6:d6:f2:3a:4c:76:42:35:66:3b:02:f7:
                    ae:20:3b:b7:4e:34:6f:e5:e5:62:9a:c5:79:58:8f:
                    6d:8e:bd:aa:12:b5:69:a0:45:a0:bf:d9:6b:43:9c:
                    27:85:92:fc:7b:c7:89:e3:bf:f5:12:f0:8f:a3:59:
                    2a:a6:9b:0c:0f:58:91:4c:8b:1f:c3:c5:fe:36:2a:
                    d1:c4:08:70:76:d4:aa:3a:32:a6:ff:28:ff:ff:b6:
                    7a:7d:5b:dc:c4:ad:e5:b8:af:82:86:f4:69:f5:dd:
                    18:76:2a:e0:35:27:f7:98:ef:77:2d:60:71:74:b4:
                    b3:16:d7:8a:86:00:83:58:9a:05:2e:1c:de:6e:e5:
                    4d:c4:ae:81:43:a0:30:2a:54:70:5d:85:b9:bc:85:
                    9a:e6:6c:17:34:e3:6a:d9:34:2d:37:0d:ae:7a:ee:
                    ea:80:b8:ff:f7:7d:fe:1f:1e:74:2e:35:94:f0:1c:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A6:08:20:37:4B:7D:C9:FD:6F:1C:CF:8B:6E:F4:EB:59:C5:E6:8F
            X509v3 Authority Key Identifier:
                keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7d:b5:9f:0a:89:39:0f:86:97:66:32:b0:48:f1:d2:54:e4:
         da:c4:cc:56:73:cd:19:42:a6:32:87:ca:19:a1:24:c5:29:f3:
         d1:13:bf:a5:dc:92:f5:df:ab:ea:31:fb:ff:42:60:79:bc:7a:
         9e:31:74:b1:a7:73:76:d3:04:fc:db:99:2a:d7:d1:ba:29:c2:
         74:4f:6e:47:10:c3:6f:f0:c2:d9:e2:80:ef:ea:e2:3d:3c:d2:
         c9:1b:83:a8:2b:27:6b:6b:f3:6c:04:bb:64:38:41:61:5f:6b:
         8f:ef:30:7e:cf:1f:b6:cc:fe:73:f7:69:7b:5a:b2:9d:0a:7a:
         3f:c8:c8:25:ce:33:97:94:2d:8c:63:0a:ee:e0:56:88:1a:c3:
         7a:56:74:4d:4d:a0:c8:56:0d:98:26:1c:26:6d:51:d8:f3:cc:
         64:09:08:d1:96:97:64:e4:48:67:62:18:ea:c5:74:31:f3:19:
         6f:2a:f5:20:eb:47:75:54:43:29:23:3e:af:57:39:da:73:da:
         1e:dd:0c:91:23:7e:fb:84:99:f2:b1:93:a1:bc:05:09:19:c5:
         d7:8f:47:d3:85:76:ba:af:a8:43:f2:6e:76:82:3c:03:fd:0e:
         09:6d:19:89:2f:a1:e7:ce:47:b7:d7:e7:1c:31:4d:75:c5:fa:
         56:47:0f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yR5rhKyc3frV592QZMOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDVlNmNlYTRiMzkzNDVjZTI5MDJjOTdhMWRiYWJjYjQ2
ZDJhM2IwHhcNMjYwNjEzMDcwMTI5WhcNMjYwNjE0MDcwMTI5WjAzMTEwLwYDVQQD
EygwMWE2MDgyMDM3NGI3ZGM5ZmQ2ZjFjY2Y4YjZlZjRlYjU5YzVlNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mSmF9z6SqBNLWNYT8b4sIl5DfrS
gCHGK38kEY3miNYQNwpc648RoWGp+4TIMekscgPZIDv39WA4oIB6VsBqp/RmU1s+
vR0b6A8oblbm1vI6THZCNWY7AveuIDu3TjRv5eVimsV5WI9tjr2qErVpoEWgv9lr
Q5wnhZL8e8eJ47/1EvCPo1kqppsMD1iRTIsfw8X+NirRxAhwdtSqOjKm/yj//7Z6
fVvcxK3luK+ChvRp9d0YdirgNSf3mO93LWBxdLSzFteKhgCDWJoFLhzebuVNxK6B
Q6AwKlRwXYW5vIWa5mwXNONq2TQtNw2ueu7qgLj/933+Hx50LjWU8Bxd2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGmCCA3S33J/W8cz4tu9OtZxeaPMB8GA1UdIwQY
MBaAFA4F5s6ks5NFzikCyXodury0bSo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNmQ3MGMtNThmMC00NWJiLWE4ZjEt
NzdlZWFiMjhiZTI2LzEvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zNmQ3MGMtNThmMC00NWJiLWE4ZjEtNzdlZWFiMjhiZTI2
LzEvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeH21nwqJ
OQ+Gl2YysEjx0lTk2sTMVnPNGUKmMofKGaEkxSnz0RO/pdyS9d+r6jH7/0Jgebx6
njF0sadzdtME/NuZKtfRuinCdE9uRxDDb/DC2eKA7+riPTzSyRuDqCsna2vzbAS7
ZDhBYV9rj+8wfs8ftsz+c/dpe1qynQp6P8jIJc4zl5QtjGMK7uBWiBrDelZ0TU2g
yFYNmCYcJm1R2PPMZAkI0ZaXZORIZ2IY6sV0MfMZbyr1IOtHdVRDKSM+r1c52nPa
Ht0MkSN++4SZ8rGTobwFCRnF149H04V2uq+oQ/JudoI8A/0OCW0ZiS+h585Ht9fn
HDFNdcX6VkcPhg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:13 2026 by rpki-client