Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File:                     4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier:          mWjuwL1qN145ckzTP9cfeZlrDft/S4tUPjk0ay674yM=
Subject key identifier:   C7:C7:C7:D8:B6:94:F7:1E:80:1C:7B:0C:21:A7:E7:AD:A9:5B:DE:19
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer:       /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial:       019EB9223AB9EFC1F8F865BA97272F8FAD41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number:          0237
Signing time:             Fri 12 Jun 2026 00:01:28 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:28 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:28 +0000
Files and hashes:         1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: tEmWYTvfalgLE7ZJ9lEMLni7Q0d89j5z0ZCPWTai/7g=)
                          2: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (hash: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 00:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:22:3a:b9:ef:c1:f8:f8:65:ba:97:27:2f:8f:ad:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
        Validity
            Not Before: Jun 12 00:01:28 2026 GMT
            Not After : Jun 13 00:01:28 2026 GMT
        Subject: CN=c7c7c7d8b694f71e801c7b0c21a7e7ada95bde19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:9b:f2:05:a3:17:49:19:be:ea:b7:54:93:
                    48:3a:cf:bb:a3:bd:76:f9:33:de:96:87:f9:d4:c7:
                    b1:7f:08:b8:f2:bd:c7:b3:ac:8d:84:4e:f8:fd:01:
                    a4:6c:d6:ec:b4:4e:72:00:0a:02:61:75:4d:03:8b:
                    ea:56:cd:1a:02:3a:f1:92:58:60:07:44:3a:99:2f:
                    c8:17:41:21:5c:e7:c7:ec:20:16:5e:63:ba:d0:5d:
                    dd:e8:53:ee:77:33:d4:a9:eb:43:5c:4d:71:59:74:
                    05:64:8f:3c:c0:33:f5:21:1c:fe:ca:23:8e:c3:88:
                    e4:4f:40:08:0f:05:9b:8b:1e:67:18:85:e7:3c:95:
                    9a:ad:c2:01:59:47:2c:bf:a3:28:ce:3c:b7:b7:07:
                    f6:d8:72:75:89:23:51:b1:f6:30:17:d7:09:93:7c:
                    ca:27:3f:6b:b4:d4:98:ee:09:58:63:a0:eb:24:48:
                    f8:e6:50:7f:a3:da:54:45:9e:00:4d:7b:2f:0d:6d:
                    2f:55:95:15:92:28:f0:ba:fd:b6:a7:23:09:44:c0:
                    85:c2:fe:d4:7c:03:9f:a7:fc:1a:76:0d:d2:00:ac:
                    b7:ce:9d:d6:8a:8f:36:75:0a:9e:80:6a:c3:af:c6:
                    93:20:b1:04:97:22:15:47:d0:b1:5e:83:08:31:54:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C7:C7:D8:B6:94:F7:1E:80:1C:7B:0C:21:A7:E7:AD:A9:5B:DE:19
            X509v3 Authority Key Identifier:
                keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:75:12:8f:31:1e:30:ca:bf:80:0c:d0:94:84:b8:c2:7d:
         52:57:59:7b:10:30:fd:38:85:e9:4e:e4:23:be:ba:e3:82:94:
         3e:c0:79:ed:6e:49:36:bb:f3:cb:8e:ea:eb:77:60:6c:e8:0e:
         6c:c3:40:53:f7:f8:cb:43:35:48:7f:db:8d:13:5f:ad:a3:88:
         77:03:c9:93:b9:c8:df:e3:7b:86:b0:11:65:02:d3:cc:3e:af:
         e8:00:68:07:2f:4b:47:70:80:0e:6e:0a:83:08:fb:b6:cc:0d:
         64:52:4b:b2:76:93:4b:ed:83:0f:2f:45:c0:ab:e3:74:31:75:
         c8:c9:a0:87:1f:2b:fa:5e:c8:c1:40:56:cc:aa:48:6a:50:e7:
         d4:84:05:dd:2a:c9:2e:ec:8f:2b:9e:8f:6f:f2:cd:5e:60:de:
         12:30:ab:b8:91:c1:86:29:3a:56:c1:08:d2:a4:c8:46:2b:82:
         b6:4e:15:7f:78:22:ab:d8:33:2f:c4:aa:39:d8:31:f4:ee:ad:
         07:0b:6b:9f:9f:4e:96:be:a2:ff:4f:c1:c1:da:75:61:90:85:
         98:ea:54:b4:b7:84:4e:db:64:f5:c0:f5:e8:44:08:66:36:d1:
         fe:4f:6c:9c:45:a4:90:66:c1:c3:6e:ee:ac:3e:bc:20:f7:0f:
         f9:50:cb:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65Ijq578H4+GW6lycvj61BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDE1ZTM2Y2RiMzg4Mjc2ZjA0YTYwNmIwMjI2NjI2MGUy
YTE5ZjgwHhcNMjYwNjEyMDAwMTI4WhcNMjYwNjEzMDAwMTI4WjAzMTEwLwYDVQQD
EyhjN2M3YzdkOGI2OTRmNzFlODAxYzdiMGMyMWE3ZTdhZGE5NWJkZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKSb8gWjF0kZvuq3VJNIOs+7o712
+TPelof51Mexfwi48r3Hs6yNhE74/QGkbNbstE5yAAoCYXVNA4vqVs0aAjrxklhg
B0Q6mS/IF0EhXOfH7CAWXmO60F3d6FPudzPUqetDXE1xWXQFZI88wDP1IRz+yiOO
w4jkT0AIDwWbix5nGIXnPJWarcIBWUcsv6Mozjy3twf22HJ1iSNRsfYwF9cJk3zK
Jz9rtNSY7glYY6DrJEj45lB/o9pURZ4ATXsvDW0vVZUVkijwuv22pyMJRMCFwv7U
fAOfp/wadg3SAKy3zp3Wio82dQqegGrDr8aTILEElyIVR9CxXoMIMVTTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfHx9i2lPcegBx7DCGn562pW94ZMB8GA1UdIwQY
MBaAFOHRXjbNs4gnbwSmBrAiZiYOKhn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMt
MjM0NDJhMTRhNWY3LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMtMjM0NDJhMTRhNWY3
LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3N1Eo8x
HjDKv4AM0JSEuMJ9UldZexAw/TiF6U7kI76644KUPsB57W5JNrvzy47q63dgbOgO
bMNAU/f4y0M1SH/bjRNfraOIdwPJk7nI3+N7hrARZQLTzD6v6ABoBy9LR3CADm4K
gwj7tswNZFJLsnaTS+2DDy9FwKvjdDF1yMmghx8r+l7IwUBWzKpIalDn1IQF3SrJ
LuyPK56Pb/LNXmDeEjCruJHBhik6VsEI0qTIRiuCtk4Vf3giq9gzL8SqOdgx9O6t
Bwtrn59Olr6i/0/Bwdp1YZCFmOpUtLeETttk9cD16EQIZjbR/k9snEWkkGbBw27u
rD68IPcP+VDL7Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:51 2026 by rpki-client