Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          QchD/SoGOokYndlvJU0KLCVlaiYxEI3Hl9+Q1mhCcw4=
Subject key identifier:   BA:75:BB:93:9A:1A:57:F5:8F:13:97:94:E8:9B:7F:C0:95:14:E6:99
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       019EBE47B8DCF10FFD0FFFFE841C98DD34DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          1670
Signing time:             Sat 13 Jun 2026 00:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:31 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: 5bGutKTuMsEPBldK59R0opBrfsxK30fLY8QedjCFB/A=)
                          2: I6B11vAuliEHXkaj56Cx_nMNtzM.roa (hash: zwWKRvjHFcgx4AfaFVQj5qA+i2zTNLuDDbo0ohM5s9o=)
                          3: aFA8TdWBrL0sKL1WgCpchD-t0-E.roa (hash: yrp0PGLJIdfIoFJTh2LRDBtU78Dj8mCkVBqMsQkNwT0=)
                          4: zbElgd4kOsYPerCSi4Ys9upL4XA.roa (hash: i1lrAyqBTfs/DpcBlpdmtWLhCahW3WY5O3LNfMBqc9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:b8:dc:f1:0f:fd:0f:ff:fe:84:1c:98:dd:34:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Jun 13 00:00:31 2026 GMT
            Not After : Jun 14 00:00:31 2026 GMT
        Subject: CN=ba75bb939a1a57f58f139794e89b7fc09514e699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:21:96:da:04:27:ae:0c:3e:67:e6:32:e5:
                    2d:c6:0e:07:4b:5a:05:83:5d:d3:f0:d6:2a:80:52:
                    b3:ed:66:c2:34:42:e0:4a:cf:a2:7c:bf:55:d6:81:
                    fa:84:8e:45:15:68:b8:2d:92:aa:a8:02:c7:c4:b3:
                    13:9b:4b:79:1b:b0:58:2e:29:6f:2a:0b:29:9e:ca:
                    21:38:85:8c:8f:4c:c6:82:9a:0e:76:4c:fc:85:c9:
                    d4:13:b1:25:da:32:5d:28:71:23:f8:52:ae:bc:bf:
                    fa:d3:f8:69:d5:05:13:5e:31:0a:30:80:73:71:a9:
                    1a:c6:dd:7c:88:a6:86:e7:26:c8:db:8f:d3:84:d8:
                    c6:09:1d:75:91:fc:48:e9:f8:10:8d:84:6b:b5:5f:
                    1d:ff:e9:2c:f0:33:dd:07:cc:45:0d:fa:ec:53:94:
                    27:c9:6a:e5:4f:2f:6f:b1:e8:85:8d:a7:81:4f:65:
                    5c:c7:5e:2e:db:68:b1:40:6d:e9:53:ba:38:4b:18:
                    ee:e6:ac:54:ae:e2:c6:cc:1a:cd:be:34:d3:5d:3d:
                    7c:71:b0:f4:06:0b:57:72:b0:ae:ce:d0:0a:01:e7:
                    ae:b7:9b:5a:ff:f7:39:e9:29:cb:f2:90:c3:c8:76:
                    b2:e5:3f:21:d0:47:c7:96:f5:25:ca:87:7c:2b:9a:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:BB:93:9A:1A:57:F5:8F:13:97:94:E8:9B:7F:C0:95:14:E6:99
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:90:c6:1c:27:ab:ca:df:40:e4:4a:a2:04:30:09:1a:c7:76:
         e5:b6:30:07:75:2d:c3:de:68:ff:0a:b6:75:f7:cc:05:45:63:
         9a:ba:45:f0:62:bf:46:03:9c:63:8b:b0:62:c6:16:4a:9b:26:
         df:5f:b7:ee:4b:c9:06:3d:c6:0e:f7:dd:92:91:e8:9a:c1:2a:
         21:0a:4e:91:4c:46:7a:8b:d3:b7:d2:6e:95:d6:2c:56:f5:60:
         4b:b2:cc:75:10:93:d9:d5:0c:ae:d6:2d:d0:20:1a:fb:22:cb:
         69:4f:f5:1e:3f:21:13:c0:04:fc:7d:d5:87:bc:58:bc:3d:a4:
         ba:be:4d:a9:28:32:a7:9f:69:5d:8a:b1:04:4f:d8:7a:3b:a2:
         d2:f3:c7:5e:ae:c0:07:f1:1a:a0:88:a0:69:9d:c4:3e:f5:a2:
         b5:94:ef:ac:f1:f9:45:ad:d0:a5:b9:96:2f:ed:81:33:b1:06:
         d6:d8:4b:1a:4b:b3:98:95:78:20:4f:b4:ec:69:27:42:5b:74:
         19:90:aa:aa:72:84:e3:23:0a:a7:a2:56:a5:1f:c4:19:d6:c7:
         fa:01:e3:79:97:c7:ee:a7:70:87:73:97:a7:b6:ec:eb:a0:61:
         12:dd:26:18:6b:c1:fa:e4:f0:84:e3:47:28:ec:0b:ff:08:71:
         8f:5f:f0:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R7jc8Q/9D//+hByY3TTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2
YjExZmEwHhcNMjYwNjEzMDAwMDMxWhcNMjYwNjE0MDAwMDMxWjAzMTEwLwYDVQQD
EyhiYTc1YmI5MzlhMWE1N2Y1OGYxMzk3OTRlODliN2ZjMDk1MTRlNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt4hltoEJ64MPmfmMuUtxg4HS1oF
g13T8NYqgFKz7WbCNELgSs+ifL9V1oH6hI5FFWi4LZKqqALHxLMTm0t5G7BYLilv
KgspnsohOIWMj0zGgpoOdkz8hcnUE7El2jJdKHEj+FKuvL/60/hp1QUTXjEKMIBz
cakaxt18iKaG5ybI24/ThNjGCR11kfxI6fgQjYRrtV8d/+ks8DPdB8xFDfrsU5Qn
yWrlTy9vseiFjaeBT2Vcx14u22ixQG3pU7o4Sxju5qxUruLGzBrNvjTTXT18cbD0
BgtXcrCuztAKAeeut5ta//c56SnL8pDDyHay5T8h0EfHlvUlyod8K5rcswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp1u5OaGlf1jxOXlOibf8CVFOaZMB8GA1UdIwQY
MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct
MThmNGY2NmE1MGEwLzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw
LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJDGHCer
yt9A5EqiBDAJGsd25bYwB3Utw95o/wq2dffMBUVjmrpF8GK/RgOcY4uwYsYWSpsm
31+37kvJBj3GDvfdkpHomsEqIQpOkUxGeovTt9JuldYsVvVgS7LMdRCT2dUMrtYt
0CAa+yLLaU/1Hj8hE8AE/H3Vh7xYvD2kur5NqSgyp59pXYqxBE/Yejui0vPHXq7A
B/EaoIigaZ3EPvWitZTvrPH5Ra3QpbmWL+2BM7EG1thLGkuzmJV4IE+07GknQlt0
GZCqqnKE4yMKp6JWpR/EGdbH+gHjeZfH7qdwh3OXp7bs66BhEt0mGGvB+uTwhONH
KOwL/whxj1/wYA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:55 2026 by rpki-client