Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          FT5CeSGxc+NZbI/Iyv1+EQVqHU1RdmA93Ooos3n4Zv8=
Subject key identifier:   FC:88:3D:90:A1:A1:98:22:28:AE:78:38:CF:D2:00:B3:0B:C5:B8:FB
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       019EBE476EF2C949D48D0BB0D1155F06844D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          0D68
Signing time:             Sat 13 Jun 2026 00:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:12 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: rF8pWKxlk7mmurRCIJ9g/uNmagaVfcSB2imd1ovysns=)
                          2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:6e:f2:c9:49:d4:8d:0b:b0:d1:15:5f:06:84:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: Jun 13 00:00:12 2026 GMT
            Not After : Jun 14 00:00:12 2026 GMT
        Subject: CN=fc883d90a1a1982228ae7838cfd200b30bc5b8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:df:db:04:a1:5a:b8:31:16:a6:42:94:10:
                    ac:00:de:a9:65:5f:77:c5:33:89:f9:38:90:66:34:
                    ed:d4:53:2f:f6:85:be:4d:e9:b8:c8:f2:91:86:12:
                    c3:cf:a6:9f:82:c2:63:0e:c9:0a:41:63:65:00:78:
                    e4:31:ac:f9:6f:b7:39:2b:2a:10:8d:2f:88:07:b1:
                    d0:1e:64:33:42:42:23:56:cf:24:c1:31:1e:90:03:
                    f5:af:71:54:b2:9d:da:24:f4:95:a7:14:cb:f1:e6:
                    06:c0:e1:7f:9c:6f:cc:c7:10:56:53:3e:b5:e7:3d:
                    48:70:2e:65:9d:b9:56:c3:54:e1:10:85:1a:ab:f7:
                    69:9b:d6:e6:83:56:71:87:ce:a1:41:99:30:69:8b:
                    01:05:9a:13:df:5f:ca:a1:82:07:a1:97:cf:8f:12:
                    bf:78:36:bd:fa:82:51:67:ae:bf:10:3f:dc:45:3a:
                    9b:cd:c5:79:12:85:a1:7d:18:ce:a0:55:86:9c:1d:
                    8c:9b:d4:f0:45:dc:ed:f3:25:d7:9c:89:3c:5d:90:
                    87:7a:ee:2d:24:88:c3:80:6d:72:2b:0c:ec:d9:81:
                    01:7a:85:79:d0:18:b7:a1:19:30:65:71:15:94:48:
                    66:5c:b1:9e:4e:d1:82:89:b9:75:d0:fa:7f:35:fe:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:88:3D:90:A1:A1:98:22:28:AE:78:38:CF:D2:00:B3:0B:C5:B8:FB
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:5e:78:17:c5:0b:4e:04:b1:2f:de:7b:61:31:ea:8c:fc:
         ae:da:51:6e:20:b5:56:9f:ec:de:a9:6e:ce:ea:bb:26:aa:d2:
         be:76:91:93:ab:4b:a7:00:99:95:7d:1b:eb:95:cc:ec:99:36:
         b5:29:07:c6:16:19:34:ff:b3:57:f8:33:e1:5b:e6:c0:1a:ac:
         3c:c7:a4:04:f8:25:b4:a7:13:5c:40:bf:5e:07:d4:ac:26:1b:
         cf:b8:8e:6f:41:81:28:15:8c:bd:1e:f7:86:62:d3:28:f2:f9:
         d5:13:0b:18:6f:32:58:98:84:f4:83:8b:90:3f:d9:9f:a6:3e:
         24:de:d2:ff:56:57:5c:c4:d2:ca:e7:60:40:9d:04:7b:95:17:
         44:f2:f9:0b:cb:ae:e3:4b:46:94:27:57:e7:cd:3d:79:05:cf:
         c4:99:94:7c:16:67:a6:3c:ed:e5:25:12:d8:b3:75:0f:90:81:
         ce:d1:40:1c:d6:93:92:59:ab:3d:36:e0:9e:0d:5e:d4:b9:75:
         59:f8:03:10:11:7e:2c:c5:50:11:8b:a1:a2:e3:06:6e:16:62:
         dc:b8:11:2d:13:c5:25:a4:1e:7f:6c:bb:01:21:49:fb:99:20:
         da:87:f1:0e:81:0e:5e:66:ff:4c:08:9e:81:f6:ff:03:46:26:
         0e:07:2d:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R27yyUnUjQuw0RVfBoRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1
ODE4MGMwHhcNMjYwNjEzMDAwMDEyWhcNMjYwNjE0MDAwMDEyWjAzMTEwLwYDVQQD
EyhmYzg4M2Q5MGExYTE5ODIyMjhhZTc4MzhjZmQyMDBiMzBiYzViOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopff2wShWrgxFqZClBCsAN6pZV93
xTOJ+TiQZjTt1FMv9oW+Tem4yPKRhhLDz6afgsJjDskKQWNlAHjkMaz5b7c5KyoQ
jS+IB7HQHmQzQkIjVs8kwTEekAP1r3FUsp3aJPSVpxTL8eYGwOF/nG/MxxBWUz61
5z1IcC5lnblWw1ThEIUaq/dpm9bmg1Zxh86hQZkwaYsBBZoT31/KoYIHoZfPjxK/
eDa9+oJRZ66/ED/cRTqbzcV5EoWhfRjOoFWGnB2Mm9TwRdzt8yXXnIk8XZCHeu4t
JIjDgG1yKwzs2YEBeoV50Bi3oRkwZXEVlEhmXLGeTtGCibl10Pp/Nf5PHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyIPZChoZgiKK54OM/SALMLxbj7MB8GA1UdIwQY
MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt
MmUxZjliZTk1NTczLzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz
LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiz9eeBfF
C04EsS/ee2Ex6oz8rtpRbiC1Vp/s3qluzuq7JqrSvnaRk6tLpwCZlX0b65XM7Jk2
tSkHxhYZNP+zV/gz4VvmwBqsPMekBPgltKcTXEC/XgfUrCYbz7iOb0GBKBWMvR73
hmLTKPL51RMLGG8yWJiE9IOLkD/Zn6Y+JN7S/1ZXXMTSyudgQJ0Ee5UXRPL5C8uu
40tGlCdX5809eQXPxJmUfBZnpjzt5SUS2LN1D5CBztFAHNaTklmrPTbgng1e1Ll1
WfgDEBF+LMVQEYuhouMGbhZi3LgRLRPFJaQef2y7ASFJ+5kg2ofxDoEOXmb/TAie
gfb/A0YmDgctSg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:13 2026 by rpki-client