Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File:                     lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier:          j3xLoL2/ZvTSiHeMCJqO5jKX4RwcPIug4cgRCwlLnok=
Subject key identifier:   80:1A:BE:A1:FB:10:44:EC:FC:4C:05:7A:7B:9B:BE:6A:6B:DD:E2:53
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer:       /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial:       019EC1B766385196EF6B7C74A90D0CBB3A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number:          1382
Signing time:             Sat 13 Jun 2026 16:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:22 +0000
Files and hashes:         1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
                          2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: SdVgYmStBYYKYG9QtJIvZ/2pkHDkHguz1DlAKR7YQ1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:66:38:51:96:ef:6b:7c:74:a9:0d:0c:bb:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
        Validity
            Not Before: Jun 13 16:01:22 2026 GMT
            Not After : Jun 14 16:01:22 2026 GMT
        Subject: CN=801abea1fb1044ecfc4c057a7b9bbe6a6bdde253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:f6:94:16:da:bd:44:8b:93:c6:ab:00:81:
                    ad:fb:5a:50:27:1d:6d:1a:b2:1c:d5:79:a0:ac:62:
                    20:99:42:2d:ef:cd:0a:4c:d6:db:73:e4:39:7b:4c:
                    f3:14:a0:53:87:22:ae:b3:ea:16:5e:fa:52:3e:42:
                    68:81:24:f4:c6:9d:3f:02:81:83:4c:3d:c1:02:92:
                    e7:c4:7c:10:be:56:12:5e:d3:29:0d:40:5f:55:06:
                    e4:1f:ac:c3:47:3d:33:45:55:45:da:e6:ff:d4:9c:
                    2f:56:b1:69:05:51:12:d3:db:48:e9:7f:25:96:d7:
                    bb:de:79:09:75:18:d6:de:bf:3c:f7:60:9a:ab:d6:
                    9f:5f:0a:cc:1f:ab:2e:51:b1:a4:06:3f:10:2a:8f:
                    07:e7:c5:fb:32:ed:63:cf:97:8a:e3:3a:9e:ff:95:
                    95:ae:71:65:64:62:7a:fc:ad:49:cd:9f:4c:92:eb:
                    3c:c9:df:37:08:b3:2d:74:92:54:be:d7:d2:0e:9d:
                    24:89:6a:93:89:bd:c6:e2:62:29:e4:74:51:df:53:
                    6f:2c:86:76:76:d6:2f:6f:a7:ce:75:30:9f:5f:ff:
                    92:3d:21:f6:4c:af:9f:8a:ef:5d:b1:32:09:46:72:
                    8a:23:f5:75:f3:3d:b9:b4:c1:88:58:f8:d0:5b:21:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1A:BE:A1:FB:10:44:EC:FC:4C:05:7A:7B:9B:BE:6A:6B:DD:E2:53
            X509v3 Authority Key Identifier:
                keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:39:ef:36:d0:a9:03:f4:a4:2e:08:0f:3f:95:28:6b:e6:
         bd:3b:24:0f:61:ae:31:0e:97:20:2e:19:da:1c:67:5d:dd:f8:
         98:ce:ed:44:32:0f:b6:d5:cc:af:9c:97:7d:af:f5:40:a9:a9:
         e4:dd:64:85:c8:40:fa:aa:4a:55:c2:00:74:59:b3:b5:d5:b8:
         9c:1a:99:74:30:62:03:5c:ea:2a:ba:89:a6:ff:15:a6:72:5b:
         09:7a:d2:44:b7:1a:f1:84:d5:6b:93:cc:ed:90:0e:41:6e:d4:
         3d:19:af:d1:6d:5a:d5:1a:fa:b1:08:25:59:ff:29:1a:15:0b:
         d1:26:1f:9b:dc:38:28:67:a7:3e:fd:1c:3a:3b:15:3e:7c:6f:
         bf:86:47:4b:db:82:df:f5:18:4d:08:26:b5:ab:bd:16:ec:20:
         30:b8:a3:70:9e:e9:98:90:20:4c:cd:30:a8:4e:d7:c7:9f:61:
         63:66:15:b4:1d:24:16:cd:64:36:02:60:53:d6:75:15:55:2e:
         6a:51:40:3c:cf:0a:75:b1:05:03:cf:49:94:f4:f6:8d:28:16:
         28:ff:33:bb:49:e5:ae:18:16:fe:2b:52:52:9a:0c:af:4a:d0:
         08:21:1e:9d:bd:c7:74:e2:25:a4:24:90:e7:79:e2:4c:39:b1:
         a6:73:d6:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt2Y4UZbva3x0qQ0MuzpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2JjNTc2NzMyMzc0ZThkODlkNzAxM2FiMzYzMGI2ZTBh
OWYxOWEwHhcNMjYwNjEzMTYwMTIyWhcNMjYwNjE0MTYwMTIyWjAzMTEwLwYDVQQD
Eyg4MDFhYmVhMWZiMTA0NGVjZmM0YzA1N2E3YjliYmU2YTZiZGRlMjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugX2lBbavUSLk8arAIGt+1pQJx1t
GrIc1XmgrGIgmUIt780KTNbbc+Q5e0zzFKBThyKus+oWXvpSPkJogST0xp0/AoGD
TD3BApLnxHwQvlYSXtMpDUBfVQbkH6zDRz0zRVVF2ub/1JwvVrFpBVES09tI6X8l
lte73nkJdRjW3r8892Caq9afXwrMH6suUbGkBj8QKo8H58X7Mu1jz5eK4zqe/5WV
rnFlZGJ6/K1JzZ9Mkus8yd83CLMtdJJUvtfSDp0kiWqTib3G4mIp5HRR31NvLIZ2
dtYvb6fOdTCfX/+SPSH2TK+fiu9dsTIJRnKKI/V18z25tMGIWPjQWyHIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAavqH7EETs/EwFenubvmpr3eJTMB8GA1UdIwQY
MBaAFJQ7xXZzI3To2J1wE6s2MLbgqfGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEt
NzZhYjNmY2ExZjMyLzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEtNzZhYjNmY2ExZjMy
LzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5057zbQ
qQP0pC4IDz+VKGvmvTskD2GuMQ6XIC4Z2hxnXd34mM7tRDIPttXMr5yXfa/1QKmp
5N1khchA+qpKVcIAdFmztdW4nBqZdDBiA1zqKrqJpv8VpnJbCXrSRLca8YTVa5PM
7ZAOQW7UPRmv0W1a1Rr6sQglWf8pGhUL0SYfm9w4KGenPv0cOjsVPnxvv4ZHS9uC
3/UYTQgmtau9FuwgMLijcJ7pmJAgTM0wqE7Xx59hY2YVtB0kFs1kNgJgU9Z1FVUu
alFAPM8KdbEFA89JlPT2jSgWKP8zu0nlrhgW/itSUpoMr0rQCCEenb3HdOIlpCSQ
53niTDmxpnPW2Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:08 2026 by rpki-client