Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File:                     cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier:          lqGRDIYCn4IQullq1YL697uTVl4H7lsgpLuCIFPnVBk=
Subject key identifier:   49:42:57:D5:FD:D6:0A:2E:AB:87:E8:79:96:90:48:35:F5:54:B3:C2
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer:       /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial:       019EC337076F2D115C4D81377E77792A4C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number:          0766
Signing time:             Sat 13 Jun 2026 23:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:23 +0000
Files and hashes:         1: W00kh9cFoXYEts6Z_wNoICvROmI.roa (hash: 6F92izfRGMl8gegm30l362lw0oFK4K1whATYCIM0f9A=)
                          2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: XLI67E2VfIG10b+x3ymepTuqbBEwl6JcXphDD6s1RAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:07:6f:2d:11:5c:4d:81:37:7e:77:79:2a:4c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
        Validity
            Not Before: Jun 13 23:00:23 2026 GMT
            Not After : Jun 14 23:00:23 2026 GMT
        Subject: CN=494257d5fdd60a2eab87e87996904835f554b3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:8a:02:c3:95:22:f5:53:a7:1b:78:84:c5:
                    cf:21:86:e8:ac:e5:4f:ff:5b:83:b1:92:76:7b:a9:
                    be:ec:43:3d:d9:6c:85:31:66:f5:e2:d6:61:c7:3f:
                    0f:0f:71:7c:c0:64:a3:08:45:21:a9:f3:1b:3f:b7:
                    44:84:27:6b:ed:92:91:bc:ca:9f:8b:6d:5b:1c:2f:
                    f1:6e:24:8e:4d:6d:18:6c:b5:2e:0d:50:9a:ab:71:
                    34:6e:2d:87:7d:8a:02:f1:ce:ec:e3:18:f5:f5:c0:
                    72:0b:c3:bf:86:79:e0:e0:5b:2d:f6:25:d3:5b:11:
                    9d:b2:95:ad:7d:26:f9:27:75:fb:31:a8:3f:5e:02:
                    f6:5b:ed:a0:f6:76:a1:7b:c9:48:8d:cb:90:3f:10:
                    f6:35:46:a3:91:89:b2:04:80:57:cf:58:db:29:f7:
                    5c:61:09:2d:77:4c:aa:64:28:fa:bc:8c:e5:b0:c2:
                    28:54:81:f9:f6:d1:c4:d5:52:39:e4:c0:45:15:5e:
                    a5:e8:6f:b6:4f:5c:8c:fa:f6:dd:51:9c:63:d3:4a:
                    76:94:60:9d:d2:95:51:cb:80:97:d7:a8:47:3e:8b:
                    c0:11:3d:63:63:5a:2c:d9:f7:77:48:f3:80:e5:47:
                    74:7c:62:ad:91:41:be:a8:e8:ce:9b:ac:42:70:20:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:42:57:D5:FD:D6:0A:2E:AB:87:E8:79:96:90:48:35:F5:54:B3:C2
            X509v3 Authority Key Identifier:
                keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:93:37:ff:72:f2:33:ff:20:ef:b3:c9:19:51:b9:7b:19:
         0c:d5:34:5c:70:5c:82:b8:39:55:b4:3b:43:34:34:68:ef:57:
         15:32:51:44:d9:0d:f3:b9:4a:18:ad:fa:f7:13:11:bd:5d:1a:
         44:58:ac:ea:ad:65:cd:06:df:b9:fe:02:c7:98:3f:f4:82:c6:
         74:45:1e:86:1c:2d:0a:9f:35:aa:06:3e:56:a1:0c:c4:27:d7:
         bc:b5:b5:95:f7:b6:12:23:07:16:cb:59:0f:48:04:b5:6f:f9:
         4b:b9:a3:45:99:f3:da:32:a0:d3:4e:67:ba:71:a8:bd:24:03:
         20:8e:1a:73:39:f7:61:19:02:2a:a1:4f:a5:45:ff:16:65:a6:
         dd:48:d9:98:8b:6b:3c:23:6d:16:51:74:a0:53:42:ad:26:ef:
         57:2e:be:72:3a:65:51:f7:7e:9a:d8:a9:22:1a:aa:39:11:03:
         af:e7:57:46:a6:b3:7a:b4:12:34:c2:80:2e:f5:7e:ce:e7:99:
         6b:96:16:15:b6:8e:7b:23:53:6d:9f:7f:bb:81:42:08:05:1f:
         30:4a:74:0c:5d:b5:67:f6:1a:bc:55:0a:d8:13:03:ce:55:58:
         f4:77:eb:bb:8f:63:58:f4:a7:1c:9f:de:63:e9:41:5d:55:da:
         5e:a4:f3:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DNwdvLRFcTYE3fnd5KkxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTY3NzJlZmNlMmExMzNmYjdmODcyMDkyOWQwNTYwY2Vm
MWRiNDYwHhcNMjYwNjEzMjMwMDIzWhcNMjYwNjE0MjMwMDIzWjAzMTEwLwYDVQQD
Eyg0OTQyNTdkNWZkZDYwYTJlYWI4N2U4Nzk5NjkwNDgzNWY1NTRiM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleyKAsOVIvVTpxt4hMXPIYborOVP
/1uDsZJ2e6m+7EM92WyFMWb14tZhxz8PD3F8wGSjCEUhqfMbP7dEhCdr7ZKRvMqf
i21bHC/xbiSOTW0YbLUuDVCaq3E0bi2HfYoC8c7s4xj19cByC8O/hnng4Fst9iXT
WxGdspWtfSb5J3X7Mag/XgL2W+2g9nahe8lIjcuQPxD2NUajkYmyBIBXz1jbKfdc
YQktd0yqZCj6vIzlsMIoVIH59tHE1VI55MBFFV6l6G+2T1yM+vbdUZxj00p2lGCd
0pVRy4CX16hHPovAET1jY1os2fd3SPOA5Ud0fGKtkUG+qOjOm6xCcCDPKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElCV9X91gouq4foeZaQSDX1VLPCMB8GA1UdIwQY
MBaAFHMWdy784qEz+3+HIJKdBWDO8dtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYt
MWM4NzZkYjQ0ZmUyLzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYtMWM4NzZkYjQ0ZmUy
LzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyKTN/9y
8jP/IO+zyRlRuXsZDNU0XHBcgrg5VbQ7QzQ0aO9XFTJRRNkN87lKGK369xMRvV0a
RFis6q1lzQbfuf4Cx5g/9ILGdEUehhwtCp81qgY+VqEMxCfXvLW1lfe2EiMHFstZ
D0gEtW/5S7mjRZnz2jKg005nunGovSQDII4aczn3YRkCKqFPpUX/FmWm3UjZmItr
PCNtFlF0oFNCrSbvVy6+cjplUfd+mtipIhqqOREDr+dXRqazerQSNMKALvV+zueZ
a5YWFbaOeyNTbZ9/u4FCCAUfMEp0DF21Z/YavFUK2BMDzlVY9Hfru49jWPSnHJ/e
Y+lBXVXaXqTzRA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:18:48 2026 by rpki-client