Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
File:                     9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json)
Hash identifier:          7ZYMHG0ObScNQXtTozlNGnmyTmLjdugnyyjKyc9roDs=
Subject key identifier:   35:B4:B2:A6:4F:87:CF:07:40:02:ED:67:44:B1:65:25:07:9D:FB:14
Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
Certificate issuer:       /CN=f510c7b9dcc925983e59b586cd59ab554be25982
Certificate serial:       019EC2C9571D2C03A49C23F55FB2DB451648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
Manifest number:          01F4
Signing time:             Sat 13 Jun 2026 21:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:35 +0000
Files and hashes:         1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: uDoXL4cEZVU38XHCjG8W3ZLCQxZ8RJYaldpJb5luJ3c=)
                          2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:57:1d:2c:03:a4:9c:23:f5:5f:b2:db:45:16:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982
        Validity
            Not Before: Jun 13 21:00:35 2026 GMT
            Not After : Jun 14 21:00:35 2026 GMT
        Subject: CN=35b4b2a64f87cf074002ed6744b16525079dfb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:61:b7:29:ab:d0:b2:de:07:9f:0f:16:63:
                    af:34:4a:6b:b5:ed:fc:84:30:b2:77:02:00:d3:f9:
                    1b:2b:48:2a:bb:b0:69:8e:7c:3d:a2:7b:66:82:37:
                    72:69:77:24:12:2e:8b:92:7a:a2:ce:84:c4:05:45:
                    28:75:07:aa:e7:8b:1b:d4:a6:16:55:9b:b1:c8:bd:
                    f7:10:6d:18:d6:79:dc:d9:cc:50:8e:b1:fe:ce:cc:
                    ea:4b:b6:9e:3d:c2:8f:ad:fa:14:54:14:50:82:d7:
                    8f:8a:83:06:46:de:b8:ee:af:2a:71:09:74:7b:30:
                    f9:4d:b7:63:b7:c1:df:a1:de:65:8c:d3:4a:f5:cf:
                    79:0a:33:3b:27:cb:2d:59:ac:a2:d5:5d:11:52:c9:
                    d7:a9:72:b2:91:70:49:91:8e:02:53:c2:b6:10:4d:
                    62:8e:c7:5c:0c:39:3d:23:9e:79:09:31:00:ca:fb:
                    89:35:ff:75:91:a4:53:bd:2e:1c:51:b0:f2:bf:58:
                    fd:97:3a:b2:12:7a:f3:5c:20:4d:0c:97:32:c6:bb:
                    f4:b6:13:59:46:dc:cf:65:49:3c:a9:70:db:12:47:
                    2b:2f:b8:d7:8c:3c:42:15:7b:e6:f2:68:1a:43:ff:
                    06:06:b1:d7:b9:19:84:a7:26:65:43:cb:88:f0:f0:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B4:B2:A6:4F:87:CF:07:40:02:ED:67:44:B1:65:25:07:9D:FB:14
            X509v3 Authority Key Identifier:
                keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:39:45:bd:23:b3:a0:08:25:0d:90:61:9b:46:2b:90:1e:1a:
         90:49:8f:cf:06:21:9d:c1:73:4c:74:f6:ba:a7:39:c3:10:c5:
         8e:53:83:03:f7:89:7b:b3:70:2f:21:b1:23:f8:5d:e9:27:aa:
         dd:af:f3:9f:9c:48:e8:7c:82:4f:6d:bc:b2:aa:55:2d:09:31:
         87:49:3f:aa:5b:37:a6:5b:19:cf:da:a5:ab:ce:ba:74:71:04:
         29:58:55:64:17:c3:1a:8f:30:8b:c2:5b:e5:28:e1:d3:b1:b2:
         89:d8:a9:fb:42:b1:ca:4a:26:e8:71:fa:48:19:9a:74:8e:52:
         1e:cf:b7:af:88:d6:ae:a9:bd:0a:1c:fe:47:96:45:e0:26:38:
         68:b8:a1:fa:07:14:65:e3:59:96:51:6d:8d:3f:65:a6:98:02:
         c3:58:16:4f:93:79:3f:fc:38:6d:46:2c:af:e1:13:1a:ad:0e:
         79:fb:ac:ff:07:8f:ae:33:d9:a4:6e:16:b8:17:90:c3:bf:93:
         f4:9f:ea:75:b5:eb:cb:48:ca:ba:22:62:f4:1e:8a:2e:e7:e2:
         3b:42:66:3e:b8:21:2d:06:21:ca:fa:cc:53:2e:08:1d:9c:b8:
         d4:d7:2e:59:65:88:c9:e2:ab:ea:67:13:0d:42:cb:dc:ff:4e:
         d7:af:5a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyVcdLAOknCP1X7LbRRZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl
MjU5ODIwHhcNMjYwNjEzMjEwMDM1WhcNMjYwNjE0MjEwMDM1WjAzMTEwLwYDVQQD
EygzNWI0YjJhNjRmODdjZjA3NDAwMmVkNjc0NGIxNjUyNTA3OWRmYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp5htymr0LLeB58PFmOvNEprte38
hDCydwIA0/kbK0gqu7Bpjnw9ontmgjdyaXckEi6LknqizoTEBUUodQeq54sb1KYW
VZuxyL33EG0Y1nnc2cxQjrH+zszqS7aePcKPrfoUVBRQgtePioMGRt647q8qcQl0
ezD5Tbdjt8Hfod5ljNNK9c95CjM7J8stWayi1V0RUsnXqXKykXBJkY4CU8K2EE1i
jsdcDDk9I555CTEAyvuJNf91kaRTvS4cUbDyv1j9lzqyEnrzXCBNDJcyxrv0thNZ
RtzPZUk8qXDbEkcrL7jXjDxCFXvm8mgaQ/8GBrHXuRmEpyZlQ8uI8PCR/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW0sqZPh88HQALtZ0SxZSUHnfsUMB8GA1UdIwQY
MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt
YTFiMmI2YTcwMjcyLzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy
LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDlFvSOz
oAglDZBhm0YrkB4akEmPzwYhncFzTHT2uqc5wxDFjlODA/eJe7NwLyGxI/hd6Seq
3a/zn5xI6HyCT228sqpVLQkxh0k/qls3plsZz9qlq866dHEEKVhVZBfDGo8wi8Jb
5Sjh07Gyidip+0Kxykom6HH6SBmadI5SHs+3r4jWrqm9Chz+R5ZF4CY4aLih+gcU
ZeNZllFtjT9lppgCw1gWT5N5P/w4bUYsr+ETGq0Oefus/wePrjPZpG4WuBeQw7+T
9J/qdbXry0jKuiJi9B6KLufiO0JmPrghLQYhyvrMUy4IHZy41NcuWWWIyeKr6mcT
DULL3P9O169a+A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:20:14 2026 by rpki-client