Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File:                     cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier:          6ROQ0f/SzylLreYXnT8fPDtf35D3GiLv4QgyWxO4w2Y=
Subject key identifier:   63:28:10:2F:BB:21:70:CA:AB:BC:43:39:54:03:C5:B4:DC:D7:5F:CA
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer:       /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial:       019EFBDD92E3615F1F6D371E772D73162D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number:          14BD
Signing time:             Wed 24 Jun 2026 23:01:02 +0000
Manifest this update:     Wed 24 Jun 2026 23:01:02 +0000
Manifest next update:     Thu 25 Jun 2026 23:01:02 +0000
Files and hashes:         1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: 43wLNPW8wQus4mJwIZ43hJk9QrxiXMkhPu3sZNBhk2k=)
                          2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 19:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:dd:92:e3:61:5f:1f:6d:37:1e:77:2d:73:16:2d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
        Validity
            Not Before: Jun 24 23:01:02 2026 GMT
            Not After : Jun 25 23:01:02 2026 GMT
        Subject: CN=6328102fbb2170caabbc43395403c5b4dcd75fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:57:07:66:1a:ac:17:98:8f:28:0a:8f:07:
                    73:49:7d:96:ea:82:b7:c0:7a:a9:98:3a:ec:27:65:
                    a4:4b:3c:be:4b:b8:cd:f5:9c:80:5a:37:54:67:48:
                    e8:7a:f8:1f:f4:25:f1:a2:c2:ae:72:01:bd:ee:39:
                    7d:88:81:17:f0:33:33:5e:f2:8e:f4:3c:82:4e:08:
                    7e:4f:2c:05:d0:70:88:75:5c:e5:60:83:a0:c4:ec:
                    4f:3f:95:f4:d1:6a:51:20:9b:f0:e9:ff:3c:05:b5:
                    0e:a1:64:79:94:b5:b6:85:49:db:2b:95:e3:03:21:
                    46:eb:6f:3d:27:52:d4:0b:5e:e1:0e:d7:67:3c:91:
                    fb:bf:f1:66:e4:40:da:65:28:72:cc:60:e0:40:36:
                    8f:6d:7f:e5:7c:4f:ae:69:c7:1c:8d:7d:90:6d:ea:
                    a7:7b:03:01:18:da:29:60:3c:db:89:7e:02:e5:5b:
                    af:e5:85:93:ea:5c:ac:36:53:53:96:04:f7:2b:2d:
                    1b:e2:8f:c3:be:8d:3d:28:6e:d4:4d:36:30:b6:7f:
                    f3:62:7b:13:0a:a1:88:9e:04:32:5f:03:16:de:64:
                    fc:33:38:b5:87:8a:ca:89:61:13:9f:c1:a0:16:20:
                    95:3b:b0:2c:e1:aa:06:30:59:e4:44:d6:ac:09:e7:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:28:10:2F:BB:21:70:CA:AB:BC:43:39:54:03:C5:B4:DC:D7:5F:CA
            X509v3 Authority Key Identifier:
                keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bd:a6:37:47:48:3e:64:54:ea:4d:5f:d2:f2:58:bb:08:10:
         9f:b4:f2:1f:f2:57:05:f0:04:91:c6:0f:82:a5:7c:9d:22:e1:
         8a:b6:1f:f6:1a:b2:17:5f:bb:43:3e:7e:14:93:70:d1:f1:b6:
         1c:c5:33:79:4d:ef:a0:a7:d5:ee:ea:68:16:30:85:22:ce:ad:
         84:7a:08:47:12:5d:f6:65:36:aa:34:8a:17:be:21:5c:10:88:
         39:9d:c0:78:a2:64:6b:a3:be:b0:5c:f7:87:9d:32:4c:13:dc:
         21:81:4d:10:17:5f:c4:44:1f:ce:1c:d8:f6:b8:62:c8:9e:db:
         2e:67:37:b7:31:86:19:59:c7:2a:bf:31:f8:a4:2b:a1:9a:f8:
         0a:81:20:a5:04:0d:8d:b1:0c:b3:e0:45:2f:bc:8e:0e:e1:8f:
         4b:c7:a2:e1:0a:c0:d2:ee:ac:e2:e3:c6:69:d7:60:f9:90:9c:
         9e:c8:93:6e:a8:60:b4:4e:54:48:b1:15:fe:63:0d:96:e5:25:
         bf:35:6c:03:f7:3c:64:2f:f1:44:f3:de:0e:65:8e:93:fe:42:
         46:ca:b4:cf:4b:bf:d1:50:52:57:a1:e4:e6:8b:17:cd:7d:e0:
         8f:af:d5:11:2d:0f:68:20:0c:91:fa:b3:8c:c8:bf:10:5c:c0:
         6e:db:f3:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ773ZLjYV8fbTcedy1zFi0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy
ZWZmZTIwHhcNMjYwNjI0MjMwMTAyWhcNMjYwNjI1MjMwMTAyWjAzMTEwLwYDVQQD
Eyg2MzI4MTAyZmJiMjE3MGNhYWJiYzQzMzk1NDAzYzViNGRjZDc1ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJJXB2YarBeYjygKjwdzSX2W6oK3
wHqpmDrsJ2WkSzy+S7jN9ZyAWjdUZ0joevgf9CXxosKucgG97jl9iIEX8DMzXvKO
9DyCTgh+TywF0HCIdVzlYIOgxOxPP5X00WpRIJvw6f88BbUOoWR5lLW2hUnbK5Xj
AyFG6289J1LUC17hDtdnPJH7v/Fm5EDaZShyzGDgQDaPbX/lfE+uacccjX2Qbeqn
ewMBGNopYDzbiX4C5Vuv5YWT6lysNlNTlgT3Ky0b4o/Dvo09KG7UTTYwtn/zYnsT
CqGIngQyXwMW3mT8Mzi1h4rKiWETn8GgFiCVO7As4aoGMFnkRNasCeenDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMoEC+7IXDKq7xDOVQDxbTc11/KMB8GA1UdIwQY
MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt
MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz
LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML2mN0dI
PmRU6k1f0vJYuwgQn7TyH/JXBfAEkcYPgqV8nSLhirYf9hqyF1+7Qz5+FJNw0fG2
HMUzeU3voKfV7upoFjCFIs6thHoIRxJd9mU2qjSKF74hXBCIOZ3AeKJka6O+sFz3
h50yTBPcIYFNEBdfxEQfzhzY9rhiyJ7bLmc3tzGGGVnHKr8x+KQroZr4CoEgpQQN
jbEMs+BFL7yODuGPS8ei4QrA0u6s4uPGaddg+ZCcnsiTbqhgtE5USLEV/mMNluUl
vzVsA/c8ZC/xRPPeDmWOk/5CRsq0z0u/0VBSV6Hk5osXzX3gj6/VES0PaCAMkfqz
jMi/EFzAbtvzrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 25 01:56:07 2026 by rpki-client