Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          7Zu8gyY1EyyGAU4YZN+707u8diEXX7Rt/xD68UJwn8g=
Subject key identifier:   0E:7E:0F:78:9F:63:A3:03:D2:7C:00:9D:7F:07:CB:DB:BA:42:FA:FE
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       019EC06E2B0C28AC2982AFBB59DA39229E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          10E4
Signing time:             Sat 13 Jun 2026 10:01:45 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:45 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:45 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: BwJ4f4NvrfmHpAbw8ZcfwACjxcfh0+V9iUEl/lnyPwc=)
                          2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:2b:0c:28:ac:29:82:af:bb:59:da:39:22:9e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: Jun 13 10:01:45 2026 GMT
            Not After : Jun 14 10:01:45 2026 GMT
        Subject: CN=0e7e0f789f63a303d27c009d7f07cbdbba42fafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:2d:1c:b8:a7:cf:9e:47:15:39:cd:5c:ec:
                    c2:57:8c:a2:39:6b:1a:bc:6f:46:e5:19:0c:df:20:
                    d5:a1:4d:e6:c1:b7:c4:9e:eb:dd:7d:10:5b:7f:c1:
                    68:6f:95:a0:67:d2:a9:a4:47:83:f7:f5:2b:ad:c4:
                    ad:56:fb:f4:90:9a:d2:d2:92:68:0d:b9:af:45:2c:
                    42:ec:2b:f9:fe:71:d4:09:39:05:2b:fb:a9:0b:5f:
                    3f:4d:59:99:f9:22:30:7d:91:94:0f:75:70:78:43:
                    a3:16:56:09:db:75:d5:79:17:59:90:6f:68:00:10:
                    d5:a0:87:b2:5c:38:82:49:38:29:81:7d:d0:0e:31:
                    ed:c4:2a:99:1e:c6:4e:56:d7:41:03:85:bb:4d:79:
                    45:21:bf:9b:9d:37:7a:7b:69:7b:ab:3b:70:81:14:
                    02:b8:5e:37:92:a9:16:84:e2:92:41:a6:11:65:d3:
                    4c:66:5e:0c:bc:93:9e:2d:94:11:90:ea:a2:24:9e:
                    76:df:d9:b9:5e:f6:00:61:30:b2:31:cb:c0:41:08:
                    e3:11:27:d3:92:82:15:cb:11:0e:52:0b:38:1b:05:
                    df:2b:25:7e:b0:e0:0d:05:55:cf:38:68:6d:1d:af:
                    27:47:e2:2c:a4:12:72:89:f4:78:5d:48:0f:9e:ab:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7E:0F:78:9F:63:A3:03:D2:7C:00:9D:7F:07:CB:DB:BA:42:FA:FE
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:00:e4:c1:61:60:d9:4a:f8:73:af:fa:4c:50:52:78:7f:3f:
         0a:f0:11:1f:e0:4d:6d:87:f3:7d:21:00:5f:14:93:23:6a:f7:
         1f:0e:51:0b:f3:d0:51:cd:d0:95:2c:da:af:14:2e:01:d3:b7:
         03:fc:13:02:ec:cf:31:56:4d:36:b9:43:bc:30:c6:96:a3:6e:
         60:4b:f8:d0:88:24:ba:2b:0c:9c:d9:ed:3a:0f:b6:82:c7:3c:
         89:f2:44:66:6e:d0:f2:ac:df:2b:64:33:90:75:ec:40:91:16:
         36:e7:99:6c:46:a4:99:8c:19:31:4b:8c:37:97:7e:cf:8d:44:
         90:44:9b:94:bc:b2:3c:e4:dc:7c:51:4e:68:4a:c7:2a:0f:e3:
         6a:b5:0b:59:2b:bd:14:5d:0c:26:6c:8f:1c:c2:bc:f5:c7:30:
         d2:ec:84:22:6d:b2:41:a7:71:63:ae:2b:b9:0a:a4:ef:11:6b:
         7e:de:f9:f3:0d:ac:7c:c3:e9:b1:fb:8a:1c:35:93:d2:56:06:
         ca:ce:b6:45:9e:6c:03:29:42:0a:0b:2e:23:a9:31:93:42:1b:
         6a:93:2e:2d:a0:3d:00:9d:84:8e:c1:d7:f1:e3:27:9a:05:7a:
         2d:d3:56:f0:b7:cb:a6:03:df:81:de:a0:b5:33:23:52:b9:d3:
         f9:dd:3c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbisMKKwpgq+7Wdo5Ip5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4
NGY2ZGMwHhcNMjYwNjEzMTAwMTQ1WhcNMjYwNjE0MTAwMTQ1WjAzMTEwLwYDVQQD
EygwZTdlMGY3ODlmNjNhMzAzZDI3YzAwOWQ3ZjA3Y2JkYmJhNDJmYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT0tHLinz55HFTnNXOzCV4yiOWsa
vG9G5RkM3yDVoU3mwbfEnuvdfRBbf8Fob5WgZ9KppEeD9/UrrcStVvv0kJrS0pJo
DbmvRSxC7Cv5/nHUCTkFK/upC18/TVmZ+SIwfZGUD3VweEOjFlYJ23XVeRdZkG9o
ABDVoIeyXDiCSTgpgX3QDjHtxCqZHsZOVtdBA4W7TXlFIb+bnTd6e2l7qztwgRQC
uF43kqkWhOKSQaYRZdNMZl4MvJOeLZQRkOqiJJ5239m5XvYAYTCyMcvAQQjjESfT
koIVyxEOUgs4GwXfKyV+sOANBVXPOGhtHa8nR+IspBJyifR4XUgPnqtuvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5+D3ifY6MD0nwAnX8Hy9u6Qvr+MB8GA1UdIwQY
MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt
MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0
LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwDkwWFg
2Ur4c6/6TFBSeH8/CvARH+BNbYfzfSEAXxSTI2r3Hw5RC/PQUc3QlSzarxQuAdO3
A/wTAuzPMVZNNrlDvDDGlqNuYEv40IgkuisMnNntOg+2gsc8ifJEZm7Q8qzfK2Qz
kHXsQJEWNueZbEakmYwZMUuMN5d+z41EkESblLyyPOTcfFFOaErHKg/jarULWSu9
FF0MJmyPHMK89ccw0uyEIm2yQadxY64ruQqk7xFrft758w2sfMPpsfuKHDWT0lYG
ys62RZ5sAylCCgsuI6kxk0IbapMuLaA9AJ2EjsHX8eMnmgV6LdNW8LfLpgPfgd6g
tTMjUrnT+d085g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:17 2026 by rpki-client