Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
File:                     PUzic0DX-A7zynKKy_oqO7CrjV4.mft (raw, json)
Hash identifier:          2ltfEGisDwOJIAi/8iqXE2hDy9+Vkxwdu4dRbQny/c4=
Subject key identifier:   95:1B:E9:AB:B1:FE:A9:4F:63:55:71:5D:47:A9:1D:A5:06:65:B2:20
Authority key identifier: 3D:4C:E2:73:40:D7:F8:0E:F3:CA:72:8A:CB:FA:2A:3B:B0:AB:8D:5E
Certificate issuer:       /CN=3d4ce27340d7f80ef3ca728acbfa2a3bb0ab8d5e
Certificate serial:       019EC224D7B7FF50E9BD12E9538741A9230A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
Manifest number:          34
Signing time:             Sat 13 Jun 2026 18:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:54 +0000
Files and hashes:         1: 4tc9b1J3g8HKGW78h2gsUdsi-So.roa (hash: N3RkDkRR8pXlGO0DiXAf3GkUlZHp63KpZjhj0rT9HOU=)
                          2: PUzic0DX-A7zynKKy_oqO7CrjV4.crl (hash: tnFwhyRCcsB4kS/us6gzG2VTzBjy8Q4SeU/c3yZyJys=)
                          3: ZZ7D7ygHIGH4aGXCmcYzhDarmXM.asa (hash: nOY/COT+cSwrFiUqzjbJas1fTKduZg1xMeptISqPNwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:d7:b7:ff:50:e9:bd:12:e9:53:87:41:a9:23:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4ce27340d7f80ef3ca728acbfa2a3bb0ab8d5e
        Validity
            Not Before: Jun 13 18:00:54 2026 GMT
            Not After : Jun 14 18:00:54 2026 GMT
        Subject: CN=951be9abb1fea94f6355715d47a91da50665b220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:45:87:f8:9d:4f:69:43:d4:aa:7e:b7:53:
                    6c:cb:51:2c:1c:4f:41:73:7a:30:8f:eb:a7:b0:72:
                    3b:a4:99:dc:d8:70:cd:8b:a4:87:82:86:4d:80:16:
                    e9:86:2c:7c:56:80:c4:99:36:0b:67:9e:bb:17:02:
                    2d:dc:80:f8:94:73:bb:33:40:94:f7:ef:e1:b3:e3:
                    58:cb:50:34:b0:33:27:46:41:76:77:2c:b5:7a:ce:
                    10:d1:6c:80:2b:f8:5b:6f:06:0c:95:ab:fc:10:10:
                    f3:b1:53:ff:9c:8e:f2:47:34:3d:5f:07:ef:a2:fe:
                    b8:76:97:86:5a:32:70:b3:5f:07:9b:9b:b8:52:63:
                    d0:b7:89:30:13:1f:83:3b:07:92:ce:4e:de:e1:48:
                    99:74:35:16:ab:ec:2c:71:57:c2:95:e3:b7:42:60:
                    e9:d2:55:71:06:2b:c0:a3:59:85:c8:c1:e4:81:4f:
                    88:25:36:a1:1f:5e:44:3b:3d:a5:96:a5:dd:21:ee:
                    79:5f:90:38:b1:34:b5:20:c9:d3:8d:88:dc:d3:f9:
                    11:55:57:e1:30:c8:92:e4:56:7d:dd:f7:0e:3f:4f:
                    92:82:13:d8:30:bb:78:4b:f4:b8:97:2f:72:b1:8c:
                    a7:a8:30:89:83:e0:46:c6:8f:56:ea:e4:2a:e7:2a:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1B:E9:AB:B1:FE:A9:4F:63:55:71:5D:47:A9:1D:A5:06:65:B2:20
            X509v3 Authority Key Identifier:
                keyid:3D:4C:E2:73:40:D7:F8:0E:F3:CA:72:8A:CB:FA:2A:3B:B0:AB:8D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:c6:27:f1:1f:47:38:40:d7:2e:e3:2e:09:16:05:76:31:
         ed:10:90:3b:dc:f2:e6:10:7e:ca:e1:f9:a9:dd:57:0c:fc:a4:
         fd:8d:99:7e:1d:0d:92:80:73:9c:4e:f3:43:62:53:70:c4:22:
         67:da:02:55:90:2a:6b:d4:59:cb:3f:b0:af:9f:1d:25:b7:11:
         59:93:41:11:8d:ec:5a:ce:f7:ae:a4:9d:c7:aa:98:b1:91:3b:
         20:7f:ca:52:8a:8f:48:05:59:44:6a:7d:74:1e:de:3b:6f:b5:
         da:86:47:d4:05:5f:70:df:b0:90:9f:b6:a7:f8:07:12:99:72:
         b0:e3:93:f6:d1:a0:ce:b0:ae:b3:92:16:bf:da:e8:88:c5:6d:
         26:9d:34:bc:fb:9e:c4:6e:1f:ad:02:3e:71:53:83:3e:1a:83:
         3e:32:06:74:37:ca:6f:14:be:37:75:0b:b6:64:fd:48:c3:08:
         07:0c:8f:29:4b:aa:4e:52:e5:de:81:55:6f:92:f2:30:98:e1:
         28:81:b5:56:1b:98:80:0c:44:a0:9f:53:3f:1d:ca:11:74:91:
         0d:1a:a3:45:67:dd:d0:eb:2a:7a:f8:2e:77:9e:22:96:76:4f:
         f4:6b:d4:b4:0c:fc:30:de:46:48:28:16:4c:95:9f:f3:a6:74:
         d3:d5:67:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJNe3/1DpvRLpU4dBqSMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNGNlMjczNDBkN2Y4MGVmM2NhNzI4YWNiZmEyYTNiYjBh
YjhkNWUwHhcNMjYwNjEzMTgwMDU0WhcNMjYwNjE0MTgwMDU0WjAzMTEwLwYDVQQD
Eyg5NTFiZTlhYmIxZmVhOTRmNjM1NTcxNWQ0N2E5MWRhNTA2NjViMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwItFh/idT2lD1Kp+t1Nsy1EsHE9B
c3owj+unsHI7pJnc2HDNi6SHgoZNgBbphix8VoDEmTYLZ567FwIt3ID4lHO7M0CU
9+/hs+NYy1A0sDMnRkF2dyy1es4Q0WyAK/hbbwYMlav8EBDzsVP/nI7yRzQ9Xwfv
ov64dpeGWjJws18Hm5u4UmPQt4kwEx+DOweSzk7e4UiZdDUWq+wscVfCleO3QmDp
0lVxBivAo1mFyMHkgU+IJTahH15EOz2llqXdIe55X5A4sTS1IMnTjYjc0/kRVVfh
MMiS5FZ93fcOP0+SghPYMLt4S/S4ly9ysYynqDCJg+BGxo9W6uQq5yqjeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUb6aux/qlPY1VxXUepHaUGZbIgMB8GA1UdIwQY
MBaAFD1M4nNA1/gO88pyisv6Kjuwq41eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFV6aWMwRFgtQTd6eW5LS3lfb3FPN0NyalY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83NmI1NWItNzYzNi00NGFhLTgxMDQt
ODUyNDg3OGNhMzA3LzEvUFV6aWMwRFgtQTd6eW5LS3lfb3FPN0NyalY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83NmI1NWItNzYzNi00NGFhLTgxMDQtODUyNDg3OGNhMzA3
LzEvUFV6aWMwRFgtQTd6eW5LS3lfb3FPN0NyalY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAR7GJ/Ef
RzhA1y7jLgkWBXYx7RCQO9zy5hB+yuH5qd1XDPyk/Y2Zfh0NkoBznE7zQ2JTcMQi
Z9oCVZAqa9RZyz+wr58dJbcRWZNBEY3sWs73rqSdx6qYsZE7IH/KUoqPSAVZRGp9
dB7eO2+12oZH1AVfcN+wkJ+2p/gHEplysOOT9tGgzrCus5IWv9roiMVtJp00vPue
xG4frQI+cVODPhqDPjIGdDfKbxS+N3ULtmT9SMMIBwyPKUuqTlLl3oFVb5LyMJjh
KIG1VhuYgAxEoJ9TPx3KEXSRDRqjRWfd0Osqevgud54ilnZP9GvUtAz8MN5GSCgW
TJWf86Z009VnJg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:03:38 2026 by rpki-client