Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File:                     1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier:          9twfhx1TFy7DoylMeNnTGADm+yp89Sr6hchLAUfZDzY=
Subject key identifier:   6F:84:14:06:ED:3E:0A:0B:6E:D8:EE:10:75:2C:07:F9:23:2E:3C:91
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer:       /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial:       019F122EB882606E06BC37B5C27432CCE988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number:          1986
Signing time:             Mon 29 Jun 2026 07:01:19 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:19 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:19 +0000
Files and hashes:         1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: F9vKtQ9WrSuFlkbS+w7DoDKTPu9JEzBf58Pja4X7vcQ=)
                          2: J6FmNDAxHRgFsssLSzgzQh53r1Y.roa (hash: 9kmfubQa+S1khPjpZARKisbPrmjL4y5wvcmzrFU7yFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:b8:82:60:6e:06:bc:37:b5:c2:74:32:cc:e9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
        Validity
            Not Before: Jun 29 07:01:19 2026 GMT
            Not After : Jun 30 07:01:19 2026 GMT
        Subject: CN=6f841406ed3e0a0b6ed8ee10752c07f9232e3c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:36:32:03:ee:8b:89:22:11:2a:42:88:f6:
                    72:48:27:0a:2a:d8:09:5e:76:27:f3:0e:60:36:4b:
                    31:f6:f2:68:aa:0b:68:5a:72:d2:b6:57:b9:49:b4:
                    f4:17:38:a3:68:14:05:05:bf:b5:c5:24:aa:a9:7a:
                    e1:94:cc:d0:77:6f:0f:92:eb:bf:38:57:2d:d0:02:
                    ed:f3:5b:14:af:16:11:64:42:99:f8:8f:1e:a6:f1:
                    1b:94:db:75:fa:da:b6:fc:fd:42:0a:94:4d:52:be:
                    9f:49:9e:6f:e1:91:8a:76:a1:42:fd:be:30:6e:b6:
                    d5:03:64:90:e0:40:e6:7f:85:e5:d4:8e:58:08:4f:
                    9e:5c:3b:97:95:d5:c9:b6:02:e6:1b:d1:8a:4f:fc:
                    2d:ae:89:11:93:b0:2d:13:b4:f3:6a:61:4b:03:da:
                    d4:d1:fa:b7:13:d5:84:54:94:27:e3:ef:c2:97:a4:
                    3c:53:3e:55:b1:c5:2b:22:7d:80:08:6f:1c:ab:53:
                    7c:a3:02:a9:a9:be:4f:6a:c5:e3:02:e0:3a:55:37:
                    5e:2a:9b:c4:38:42:98:9e:c1:45:c9:d4:91:f4:2e:
                    17:49:ea:22:27:f4:0e:12:2e:59:cf:25:e9:9c:72:
                    20:10:03:2d:98:53:2a:39:fc:fe:9a:ef:e1:55:2f:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:84:14:06:ED:3E:0A:0B:6E:D8:EE:10:75:2C:07:F9:23:2E:3C:91
            X509v3 Authority Key Identifier:
                keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:a0:7c:9d:e1:e5:cd:08:49:f3:da:79:ac:07:8c:b5:46:
         a7:44:75:35:a8:2a:a9:11:8c:41:c6:99:d1:d0:4d:4b:41:21:
         2c:46:98:60:91:ca:94:24:0c:01:e2:9a:ee:6d:e6:f9:b6:dc:
         d5:a0:ae:f8:19:8b:92:fe:58:69:1f:9a:a8:2b:de:5e:d0:5a:
         a0:47:ad:f5:cc:d0:4b:8e:28:f7:89:16:35:ed:d7:ad:a5:3b:
         f8:10:53:2f:6c:30:fc:c2:9a:77:2b:0d:c0:4f:f8:ac:65:9d:
         ed:6b:de:c7:13:a5:5b:e9:6a:66:a5:da:a1:c3:e8:01:f3:6e:
         7d:43:3b:7b:df:6e:b1:18:17:c0:9d:6a:54:81:b3:58:38:ca:
         86:af:92:5b:15:0f:9f:78:52:d8:fc:2e:03:42:ce:95:f8:81:
         1f:ef:41:56:a2:23:7f:fc:d1:39:21:e7:f7:4b:ea:d6:e8:da:
         68:82:a0:eb:0e:5e:d3:7f:f9:c4:a8:8d:25:15:5d:db:3c:df:
         70:a8:e6:d8:76:44:19:d3:27:71:79:e4:8b:7f:8f:e7:e1:11:
         6f:24:aa:1a:23:63:4a:81:4c:2a:2e:07:a1:6a:48:bb:2e:28:
         6d:fa:0c:53:00:01:4b:89:cd:50:ce:b7:de:3b:02:7e:7c:ad:
         d1:b2:6f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLriCYG4GvDe1wnQyzOmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmVhOTJlY2M5YjBkMzU0YjVmZDcwMmUwOTkxZjE1MGEz
MDlmZTQwHhcNMjYwNjI5MDcwMTE5WhcNMjYwNjMwMDcwMTE5WjAzMTEwLwYDVQQD
Eyg2Zjg0MTQwNmVkM2UwYTBiNmVkOGVlMTA3NTJjMDdmOTIzMmUzYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Y2MgPui4kiESpCiPZySCcKKtgJ
XnYn8w5gNksx9vJoqgtoWnLStle5SbT0FzijaBQFBb+1xSSqqXrhlMzQd28Pkuu/
OFct0ALt81sUrxYRZEKZ+I8epvEblNt1+tq2/P1CCpRNUr6fSZ5v4ZGKdqFC/b4w
brbVA2SQ4EDmf4Xl1I5YCE+eXDuXldXJtgLmG9GKT/wtrokRk7AtE7TzamFLA9rU
0fq3E9WEVJQn4+/Cl6Q8Uz5VscUrIn2ACG8cq1N8owKpqb5PasXjAuA6VTdeKpvE
OEKYnsFFydSR9C4XSeoiJ/QOEi5ZzyXpnHIgEAMtmFMqOfz+mu/hVS+RiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+EFAbtPgoLbtjuEHUsB/kjLjyRMB8GA1UdIwQY
MBaAFNYuqS7Mmw01S1/XAuCZHxUKMJ/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTct
NTQ1OTQ3OTVlZWEyLzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTctNTQ1OTQ3OTVlZWEy
LzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfugfJ3h
5c0ISfPaeawHjLVGp0R1NagqqRGMQcaZ0dBNS0EhLEaYYJHKlCQMAeKa7m3m+bbc
1aCu+BmLkv5YaR+aqCveXtBaoEet9czQS44o94kWNe3XraU7+BBTL2ww/MKadysN
wE/4rGWd7WvexxOlW+lqZqXaocPoAfNufUM7e99usRgXwJ1qVIGzWDjKhq+SWxUP
n3hS2PwuA0LOlfiBH+9BVqIjf/zROSHn90vq1ujaaIKg6w5e03/5xKiNJRVd2zzf
cKjm2HZEGdMncXnki3+P5+ERbySqGiNjSoFMKi4HoWpIuy4obfoMUwABS4nNUM63
3jsCfnyt0bJvvg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:40 2026 by rpki-client