Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
File:                     txU9FR23r-6-BDvkXy1v1Af8XdQ.mft (raw, json)
Hash identifier:          8YC64PphrU4K5yP6zFvAAMiXZ8bv7aJJFlaz8lG0+Cg=
Subject key identifier:   25:F9:09:08:6A:28:E7:61:8B:0B:2F:51:57:C6:D7:5C:BD:79:C2:3D
Authority key identifier: B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4
Certificate issuer:       /CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4
Certificate serial:       019EC2929C6BBDF80F9CEC5D3A449A2D2FA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
Manifest number:          0253
Signing time:             Sat 13 Jun 2026 20:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:48 +0000
Files and hashes:         1: txU9FR23r-6-BDvkXy1v1Af8XdQ.crl (hash: LzqrOMDgabQ/Yuyr2qFyqpKJ6xr3KHBUw+Q8IOl7moU=)
                          2: wV3RZHUZxTmDpkws_j0dB6wmvV0.roa (hash: 46jbtO1joeShuyzvvWhT+82K4uiYD5eZiKy/x8muQf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:9c:6b:bd:f8:0f:9c:ec:5d:3a:44:9a:2d:2f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4
        Validity
            Not Before: Jun 13 20:00:48 2026 GMT
            Not After : Jun 14 20:00:48 2026 GMT
        Subject: CN=25f909086a28e7618b0b2f5157c6d75cbd79c23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:f2:f3:c7:4c:85:0b:fa:a0:61:4c:b6:87:
                    0c:33:a6:c2:4e:fb:ac:78:68:e1:da:11:19:cd:6e:
                    4a:82:77:c4:d7:1c:a7:3a:9f:61:40:6d:d2:69:71:
                    c6:28:4a:9e:2a:31:0f:6c:ca:e0:1a:4d:ee:8e:d7:
                    d5:d0:4d:bb:13:0b:62:82:e4:29:e1:02:4b:09:3c:
                    d9:89:6a:c9:20:2b:bb:15:5a:e2:a0:52:ae:cd:72:
                    cb:95:2f:b0:57:ff:51:2b:e6:6f:e6:f2:6f:00:31:
                    98:88:4f:f7:0c:8e:e4:7f:47:be:e6:71:32:4a:8d:
                    81:97:b0:76:14:2b:0e:5c:ef:ff:db:a3:87:c8:31:
                    32:4d:f4:82:33:15:79:49:56:2f:d1:1b:a0:5d:0d:
                    af:bc:25:b1:55:70:fe:fb:60:2d:05:53:3c:39:c5:
                    9d:fd:ac:a2:ef:c0:60:fd:a4:b1:98:95:08:ce:3f:
                    c7:c3:30:a0:c3:31:f0:6a:09:70:ee:40:5f:d3:76:
                    2a:9e:e0:1c:0d:71:86:d5:49:17:86:a4:f1:03:c4:
                    4a:d8:da:e4:e0:f2:01:74:ae:b0:8a:dd:2b:27:f1:
                    a8:cd:0b:b2:e4:22:c4:a0:c1:d1:19:2f:88:89:42:
                    32:ae:28:c3:c0:c2:fc:96:23:c1:fc:b5:71:b4:07:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F9:09:08:6A:28:E7:61:8B:0B:2F:51:57:C6:D7:5C:BD:79:C2:3D
            X509v3 Authority Key Identifier:
                keyid:B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:8f:3c:18:5f:7d:e5:d1:11:3c:7d:53:d7:ae:42:95:d1:
         cb:7e:70:38:d1:ce:32:5e:79:13:75:b1:63:16:5e:da:94:56:
         4c:d8:bf:3c:47:b0:9e:ef:10:1e:dc:8d:98:b7:e7:7e:fd:13:
         5a:4c:71:72:d0:fe:22:c8:09:32:ef:06:f5:84:6a:64:0c:9d:
         a6:d5:f4:f9:98:06:54:7a:e8:b5:aa:e1:63:43:2f:c0:e5:77:
         07:49:d9:c6:b6:7c:9f:8b:e2:2a:3e:44:91:65:c6:09:ab:4b:
         f2:1b:2c:0e:df:8b:b3:18:a2:28:d1:9d:b3:c0:93:17:6c:54:
         84:dc:14:94:c3:c0:9a:58:14:19:32:ee:d0:cf:ef:c0:27:da:
         97:6d:f2:52:55:d7:e4:d6:e0:a8:6f:58:1f:9a:84:fd:04:5b:
         d2:cd:72:30:3f:74:5e:58:29:48:ae:81:ae:2e:c4:2b:79:51:
         e5:26:c0:c7:f8:95:79:34:25:7b:ef:b4:26:c4:d4:73:60:14:
         0f:ff:86:e1:b8:32:01:de:07:cb:72:78:fd:98:f4:8e:23:da:
         b6:69:91:81:80:25:e2:94:30:b3:ad:1b:00:87:13:6f:6d:f6:
         86:7f:81:c9:40:69:3c:4e:03:66:ff:57:1b:79:3b:c7:69:ba:
         02:47:e0:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkpxrvfgPnOxdOkSaLS+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTUzZDE1MWRiN2FmZWViZTA0M2JlNDVmMmQ2ZmQ0MDdm
YzVkZDQwHhcNMjYwNjEzMjAwMDQ4WhcNMjYwNjE0MjAwMDQ4WjAzMTEwLwYDVQQD
EygyNWY5MDkwODZhMjhlNzYxOGIwYjJmNTE1N2M2ZDc1Y2JkNzljMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaPy88dMhQv6oGFMtocMM6bCTvus
eGjh2hEZzW5KgnfE1xynOp9hQG3SaXHGKEqeKjEPbMrgGk3ujtfV0E27EwtiguQp
4QJLCTzZiWrJICu7FVrioFKuzXLLlS+wV/9RK+Zv5vJvADGYiE/3DI7kf0e+5nEy
So2Bl7B2FCsOXO//26OHyDEyTfSCMxV5SVYv0RugXQ2vvCWxVXD++2AtBVM8OcWd
/ayi78Bg/aSxmJUIzj/HwzCgwzHwaglw7kBf03YqnuAcDXGG1UkXhqTxA8RK2Nrk
4PIBdK6wit0rJ/GozQuy5CLEoMHRGS+IiUIyrijDwML8liPB/LVxtAdRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX5CQhqKOdhiwsvUVfG11y9ecI9MB8GA1UdIwQY
MBaAFLcVPRUdt6/uvgQ75F8tb9QH/F3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhVOUZSMjNyLTYtQkR2a1h5MXYxQWY4WGRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MThjMWYtZjhjOS00ZDg5LWI5MDct
NTMxZmI5MWUzODNiLzEvdHhVOUZSMjNyLTYtQkR2a1h5MXYxQWY4WGRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MThjMWYtZjhjOS00ZDg5LWI5MDctNTMxZmI5MWUzODNi
LzEvdHhVOUZSMjNyLTYtQkR2a1h5MXYxQWY4WGRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMSPPBhf
feXRETx9U9euQpXRy35wONHOMl55E3WxYxZe2pRWTNi/PEewnu8QHtyNmLfnfv0T
WkxxctD+IsgJMu8G9YRqZAydptX0+ZgGVHrotarhY0MvwOV3B0nZxrZ8n4viKj5E
kWXGCatL8hssDt+LsxiiKNGds8CTF2xUhNwUlMPAmlgUGTLu0M/vwCfal23yUlXX
5NbgqG9YH5qE/QRb0s1yMD90XlgpSK6Bri7EK3lR5SbAx/iVeTQle++0JsTUc2AU
D/+G4bgyAd4Hy3J4/Zj0jiPatmmRgYAl4pQws60bAIcTb232hn+ByUBpPE4DZv9X
G3k7x2m6Akfg/g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:58:41 2026 by rpki-client