Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File:                     rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier:          y4Dfk1bLd87MP8f+SPV65gw9xfDLqTWJPL3BxBdSFTU=
Subject key identifier:   E2:56:18:FB:2A:E9:9E:27:B0:25:03:FB:49:28:8A:5E:63:1E:DA:06
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer:       /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial:       019ED34F4F276BFC0669AE951947AC799EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number:          07AF
Signing time:             Wed 17 Jun 2026 02:00:50 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:50 +0000
Manifest next update:     Thu 18 Jun 2026 02:00:50 +0000
Files and hashes:         1: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: kfab1/xTym8QWC1i6yUp2KXJ/LHJjbcxuo08Gyqy760=)
                          2: vomEUArk8PuYIYbTC4XbIk0d7Gw.roa (hash: zYSw8Jy0jy+EoxtEcsz4ao8v/Mpz2r8TG2Vb6dYscW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:4f:27:6b:fc:06:69:ae:95:19:47:ac:79:9e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
        Validity
            Not Before: Jun 17 02:00:50 2026 GMT
            Not After : Jun 18 02:00:50 2026 GMT
        Subject: CN=e25618fb2ae99e27b02503fb49288a5e631eda06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:01:0a:6b:39:6f:b1:7c:57:bf:21:6e:65:
                    b4:41:86:0c:5f:94:f9:00:1e:82:3c:8f:91:01:4a:
                    d8:3f:8c:22:46:04:6b:1c:12:25:7e:17:e1:31:b7:
                    53:4f:00:d5:6f:46:58:74:bc:8d:64:d6:ea:5f:59:
                    bc:ad:e0:f9:11:3f:63:2b:2b:41:68:7c:a8:a5:a2:
                    f8:03:cf:84:a4:2b:32:80:e4:ad:76:75:3c:34:b9:
                    c3:b3:a5:b0:92:b2:12:5c:39:5e:39:00:5b:f7:53:
                    d6:66:94:dc:f2:c1:2b:af:39:89:43:fa:cc:b7:c4:
                    24:59:7c:2f:46:93:b7:e7:1c:f8:87:42:29:2e:42:
                    7b:3f:54:d4:31:1f:52:df:2d:3e:d0:b5:98:69:60:
                    83:8a:e9:bd:0a:d5:f6:8e:ec:37:6f:80:03:a8:27:
                    f9:59:73:d5:4d:7c:82:65:43:9c:0a:bb:4c:81:4e:
                    d5:49:8e:02:f7:42:93:c0:5f:df:97:55:3b:1f:31:
                    77:db:1f:b9:a3:5c:c2:45:c2:37:c1:44:75:ca:69:
                    3d:67:ff:a5:7d:5c:df:ad:6c:e9:26:2b:82:d5:9a:
                    46:9f:ee:28:77:6d:fb:81:40:fa:09:5a:8b:86:f3:
                    40:fb:05:d8:ed:54:c7:f4:d7:40:57:fb:0e:b0:aa:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:18:FB:2A:E9:9E:27:B0:25:03:FB:49:28:8A:5E:63:1E:DA:06
            X509v3 Authority Key Identifier:
                keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:20:4d:ca:eb:c2:8b:0f:52:8c:cd:79:f9:ba:80:31:fa:49:
         23:89:91:39:01:47:c2:b4:1b:d8:42:c8:69:bc:57:ad:4a:23:
         e9:d1:be:4a:87:81:af:f6:9e:22:4f:db:dd:19:3f:5f:3c:eb:
         f5:b4:96:21:41:66:73:1a:a4:7e:99:47:aa:21:e1:c2:48:49:
         8f:9a:a3:6d:a1:4e:6f:09:bf:8a:79:ba:0a:48:60:a7:48:26:
         2b:3a:57:86:8d:13:63:47:0b:45:b9:ba:8b:e4:cd:01:a2:21:
         3a:77:ef:80:c1:09:2b:3e:f3:55:70:1f:86:d7:b8:3c:be:2a:
         de:2f:4f:1b:60:72:f1:02:dc:e5:59:99:af:85:ec:f6:7c:69:
         a6:a4:30:7d:f1:59:3a:59:85:75:86:2a:6d:0a:22:dd:a4:07:
         55:e0:ba:81:b1:c7:81:ff:09:9f:78:31:ba:25:d6:57:ad:b3:
         16:73:d4:35:48:ac:30:f3:59:18:a8:ab:ba:b7:a2:5b:66:e4:
         a2:92:de:a0:53:1d:8c:15:0e:8c:75:21:9e:31:d4:79:e9:36:
         a6:da:69:8b:c8:d6:54:9b:ec:bc:7b:73:1e:f0:d6:73:f1:f8:
         b3:74:b8:72:f0:40:c5:95:64:6e:6b:93:03:fc:5a:b8:8a:81:
         98:59:82:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TT08na/wGaa6VGUeseZ6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl
ZjEyY2QwHhcNMjYwNjE3MDIwMDUwWhcNMjYwNjE4MDIwMDUwWjAzMTEwLwYDVQQD
EyhlMjU2MThmYjJhZTk5ZTI3YjAyNTAzZmI0OTI4OGE1ZTYzMWVkYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RwBCms5b7F8V78hbmW0QYYMX5T5
AB6CPI+RAUrYP4wiRgRrHBIlfhfhMbdTTwDVb0ZYdLyNZNbqX1m8reD5ET9jKytB
aHyopaL4A8+EpCsygOStdnU8NLnDs6WwkrISXDleOQBb91PWZpTc8sErrzmJQ/rM
t8QkWXwvRpO35xz4h0IpLkJ7P1TUMR9S3y0+0LWYaWCDium9CtX2juw3b4ADqCf5
WXPVTXyCZUOcCrtMgU7VSY4C90KTwF/fl1U7HzF32x+5o1zCRcI3wUR1ymk9Z/+l
fVzfrWzpJiuC1ZpGn+4od237gUD6CVqLhvNA+wXY7VTH9NdAV/sOsKq45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJWGPsq6Z4nsCUD+0koil5jHtoGMB8GA1UdIwQY
MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt
MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2
LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyBNyuvC
iw9SjM15+bqAMfpJI4mROQFHwrQb2ELIabxXrUoj6dG+SoeBr/aeIk/b3Rk/Xzzr
9bSWIUFmcxqkfplHqiHhwkhJj5qjbaFObwm/inm6Ckhgp0gmKzpXho0TY0cLRbm6
i+TNAaIhOnfvgMEJKz7zVXAfhte4PL4q3i9PG2By8QLc5VmZr4Xs9nxppqQwffFZ
OlmFdYYqbQoi3aQHVeC6gbHHgf8Jn3gxuiXWV62zFnPUNUisMPNZGKirureiW2bk
opLeoFMdjBUOjHUhnjHUeek2ptppi8jWVJvsvHtzHvDWc/H4s3S4cvBAxZVkbmuT
A/xauIqBmFmCmw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:02:43 2026 by rpki-client