Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File:                     7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier:          VGQ/amkw1X19sCt7J9UtSbiZlloQeFLbUXpOawoP4sM=
Subject key identifier:   7D:24:BC:D5:B4:1D:93:EA:C8:DD:51:D6:73:0B:77:07:92:43:59:95
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer:       /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial:       019EBF9120B3A5CC18D53109531928AC3286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number:          01DC
Signing time:             Sat 13 Jun 2026 06:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:19 +0000
Files and hashes:         1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: tjvxK+xUklJ6zpP5PHABWw+33Hy5GIkEBGPtwlTEFN4=)
                          2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:20:b3:a5:cc:18:d5:31:09:53:19:28:ac:32:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
        Validity
            Not Before: Jun 13 06:00:19 2026 GMT
            Not After : Jun 14 06:00:19 2026 GMT
        Subject: CN=7d24bcd5b41d93eac8dd51d6730b770792435995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:b6:e4:8f:c5:19:a5:92:94:f6:c4:49:f2:
                    8a:fe:55:4a:f8:6b:01:3b:90:7e:fa:d8:71:64:c7:
                    92:4a:55:03:11:aa:c5:d5:0e:dd:66:b3:f8:37:9f:
                    f9:7c:6d:a3:16:58:c1:ae:0c:a4:79:7e:fb:6e:64:
                    61:6c:16:3f:cf:f4:92:df:49:b0:e0:3e:a8:44:de:
                    80:7d:93:2f:a9:81:82:20:34:14:75:42:d1:a5:3c:
                    d1:e3:cd:c9:2a:92:a4:94:65:45:75:53:d1:a0:82:
                    39:a4:f3:9d:9e:94:e5:0e:2a:5e:e2:74:0e:33:09:
                    84:77:18:a8:eb:21:ea:2b:07:7b:3d:50:77:0a:5e:
                    d3:76:cf:f5:2e:4e:68:9e:a2:07:75:c4:e9:9d:11:
                    ad:63:b1:5b:f6:73:33:3b:32:29:8d:4e:10:b0:f9:
                    3b:4f:7a:1b:99:bc:4e:69:d7:76:2f:55:82:c4:15:
                    02:03:e3:ea:48:e0:75:b7:2f:4b:70:00:1f:a6:b7:
                    e6:ed:49:48:c5:ff:cc:19:bd:ac:40:44:8f:13:ae:
                    fd:31:5c:ed:eb:78:32:3e:e6:bf:7c:5a:ea:8a:5a:
                    39:ce:73:6e:bb:1f:a1:e3:fe:73:9a:b1:0c:d4:11:
                    2a:5c:e4:6b:b4:05:3c:a9:67:0c:12:f1:4e:3d:01:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:24:BC:D5:B4:1D:93:EA:C8:DD:51:D6:73:0B:77:07:92:43:59:95
            X509v3 Authority Key Identifier:
                keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e2:78:e6:39:cd:4c:71:a2:3f:20:45:8c:66:49:ac:9d:25:
         1f:47:14:02:c8:d7:1e:99:0c:f8:ed:ff:14:8c:97:41:bd:02:
         18:72:35:f2:27:c0:26:4a:ba:67:e2:81:96:17:1a:5a:2d:de:
         cd:c2:46:5c:f6:1b:32:f7:cf:57:67:61:67:e5:87:18:e1:1d:
         11:0e:67:95:49:0b:a6:c2:74:f8:fa:53:24:b3:44:5d:ef:bc:
         51:26:e1:a0:08:74:ea:ff:16:61:db:5e:65:65:64:8b:2e:93:
         b4:4a:09:79:83:6e:e0:53:cf:5d:e6:e1:00:74:0d:a3:83:fe:
         73:26:4e:6e:a2:3b:6b:6e:f4:b6:11:22:be:23:1c:9e:ca:49:
         98:99:f6:f9:fe:75:d7:21:1b:86:a4:ea:6d:3d:dc:69:f4:a8:
         a6:75:ce:84:29:dc:c8:ea:b5:90:72:be:db:8e:75:4a:a7:63:
         10:fc:96:fc:51:80:93:7c:7c:51:39:36:09:76:10:e6:85:4f:
         90:d9:a8:15:a9:fc:68:37:48:2e:42:e4:b0:3a:8b:d6:95:6f:
         f4:98:c2:44:8a:bd:d4:dd:d2:04:9a:92:b2:d5:82:44:b0:62:
         99:39:4e:d4:49:ff:45:92:d7:17:cc:9d:09:ab:1b:3e:4a:2b:
         50:b1:0f:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kSCzpcwY1TEJUxkorDKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODJmMzIzMzU5MzgyZDgwMWVkMGI5M2VjMWJmYTAzMGRl
NjM2MjIwHhcNMjYwNjEzMDYwMDE5WhcNMjYwNjE0MDYwMDE5WjAzMTEwLwYDVQQD
Eyg3ZDI0YmNkNWI0MWQ5M2VhYzhkZDUxZDY3MzBiNzcwNzkyNDM1OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5225I/FGaWSlPbESfKK/lVK+GsB
O5B++thxZMeSSlUDEarF1Q7dZrP4N5/5fG2jFljBrgykeX77bmRhbBY/z/SS30mw
4D6oRN6AfZMvqYGCIDQUdULRpTzR483JKpKklGVFdVPRoII5pPOdnpTlDipe4nQO
MwmEdxio6yHqKwd7PVB3Cl7Tds/1Lk5onqIHdcTpnRGtY7Fb9nMzOzIpjU4QsPk7
T3obmbxOadd2L1WCxBUCA+PqSOB1ty9LcAAfprfm7UlIxf/MGb2sQESPE679MVzt
63gyPua/fFrqilo5znNuux+h4/5zmrEM1BEqXORrtAU8qWcMEvFOPQHG6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0kvNW0HZPqyN1R1nMLdweSQ1mVMB8GA1UdIwQY
MBaAFO2C8yM1k4LYAe0Lk+wb+gMN5jYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUt
MTY3ZGQxNWRjYjU5LzEvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUtMTY3ZGQxNWRjYjU5
LzEvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuJ45jnN
THGiPyBFjGZJrJ0lH0cUAsjXHpkM+O3/FIyXQb0CGHI18ifAJkq6Z+KBlhcaWi3e
zcJGXPYbMvfPV2dhZ+WHGOEdEQ5nlUkLpsJ0+PpTJLNEXe+8USbhoAh06v8WYdte
ZWVkiy6TtEoJeYNu4FPPXebhAHQNo4P+cyZObqI7a270thEiviMcnspJmJn2+f51
1yEbhqTqbT3cafSopnXOhCncyOq1kHK+2451SqdjEPyW/FGAk3x8UTk2CXYQ5oVP
kNmoFan8aDdILkLksDqL1pVv9JjCRIq91N3SBJqSstWCRLBimTlO1En/RZLXF8yd
CasbPkorULEPjg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:51:15 2026 by rpki-client