Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File:                     X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier:          vZuMPUQt4XStsNBFx5S1uky66m0ks7IrCaKHxGAV03s=
Subject key identifier:   EA:09:F9:7B:AF:FB:9B:D9:2D:7B:14:43:A8:0C:C8:2C:21:31:FA:F5
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer:       /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial:       019EB87CC21B9F9D2AB5CAEB9E9011CA9C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number:          0E66
Signing time:             Thu 11 Jun 2026 21:00:44 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:44 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:44 +0000
Files and hashes:         1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
                          2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: BGRI0aNuMeShIcabT5RWnvxFgLyMK5Hqf9bDeBz4wSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:c2:1b:9f:9d:2a:b5:ca:eb:9e:90:11:ca:9c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
        Validity
            Not Before: Jun 11 21:00:44 2026 GMT
            Not After : Jun 12 21:00:44 2026 GMT
        Subject: CN=ea09f97baffb9bd92d7b1443a80cc82c2131faf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:26:a9:13:6d:1c:e9:68:a7:32:f0:13:f6:
                    c9:cc:e3:af:ce:2f:18:9f:42:74:d9:75:4c:94:41:
                    3b:f7:10:d7:e2:bb:52:2a:03:fd:54:88:5d:1c:d3:
                    ae:eb:e6:78:59:af:f6:06:fe:bd:8d:24:14:42:93:
                    9e:6a:ee:50:ad:cf:d6:89:79:d7:e3:07:5b:d9:39:
                    c8:5a:75:f5:0e:cd:ba:00:72:04:04:d2:4f:57:20:
                    9d:1f:16:76:9e:92:41:89:d3:26:bc:a0:79:39:b0:
                    55:0f:4b:16:f0:25:04:e8:6e:ab:67:10:54:32:f4:
                    7b:43:8c:1d:f3:90:1d:70:bd:fa:8a:fa:cb:d4:63:
                    4e:70:41:41:5a:8b:a4:18:f0:01:d2:77:4c:df:53:
                    5f:18:f1:69:56:51:46:3c:5f:db:3b:3e:86:40:01:
                    54:fe:15:c9:5f:87:ce:6f:2d:29:89:93:03:d0:49:
                    7b:99:38:a5:90:ea:e4:4f:b8:f1:f5:67:3e:d8:11:
                    6f:8c:a8:6a:9a:73:7a:0e:8d:44:1c:dc:43:d4:8c:
                    8a:b3:f1:67:e3:4e:97:92:c0:27:c6:11:e9:ab:65:
                    7d:37:6f:fe:52:4d:45:14:ca:f2:3f:ca:c4:14:da:
                    11:78:f5:6d:91:c6:20:ac:e5:66:66:8a:b0:60:90:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:09:F9:7B:AF:FB:9B:D9:2D:7B:14:43:A8:0C:C8:2C:21:31:FA:F5
            X509v3 Authority Key Identifier:
                keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f2:80:0c:34:2f:1b:a3:dd:35:77:f2:90:78:16:a1:e5:ea:
         d4:3f:67:6e:b7:b0:cf:0e:f1:f1:f8:cf:8e:5b:c1:0f:02:89:
         70:97:a3:ef:4a:8f:f9:57:a0:3f:4d:63:0a:24:1a:9a:0e:27:
         c4:85:27:d0:22:28:3a:96:e9:7f:88:bf:87:ae:c9:f9:ca:f8:
         23:79:bb:20:66:a8:cb:49:1a:cd:d6:a7:2c:83:ad:7a:ee:7e:
         cd:9e:da:01:f7:2d:df:c7:31:ef:81:9f:05:e1:38:cc:ba:3d:
         49:fb:9a:81:a9:8a:75:6c:ce:60:df:9e:ee:cb:c8:2e:f6:10:
         13:01:93:bb:8c:a6:2b:52:c2:bf:c5:b9:80:78:1f:ed:84:b8:
         da:7e:03:e2:ae:ef:3e:be:93:d2:4d:b1:39:9a:8f:0a:62:46:
         73:f2:81:a9:65:e3:f6:ba:e8:ed:33:df:41:cd:40:16:04:7d:
         b9:60:c6:31:26:8d:9d:f7:ae:16:71:cb:3d:83:e7:45:09:5c:
         68:82:44:8e:41:17:18:f0:ea:27:57:32:f5:26:bc:8c:7d:72:
         9b:93:66:52:05:86:81:4d:89:79:0b:6d:4c:64:7d:b7:c0:54:
         08:80:be:0e:c2:06:b3:d4:16:67:e7:5e:5b:2b:d7:61:8f:f3:
         43:e2:87:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fMIbn50qtcrrnpARypxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz
YmVjZWYwHhcNMjYwNjExMjEwMDQ0WhcNMjYwNjEyMjEwMDQ0WjAzMTEwLwYDVQQD
EyhlYTA5Zjk3YmFmZmI5YmQ5MmQ3YjE0NDNhODBjYzgyYzIxMzFmYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm4mqRNtHOlopzLwE/bJzOOvzi8Y
n0J02XVMlEE79xDX4rtSKgP9VIhdHNOu6+Z4Wa/2Bv69jSQUQpOeau5Qrc/WiXnX
4wdb2TnIWnX1Ds26AHIEBNJPVyCdHxZ2npJBidMmvKB5ObBVD0sW8CUE6G6rZxBU
MvR7Q4wd85AdcL36ivrL1GNOcEFBWoukGPAB0ndM31NfGPFpVlFGPF/bOz6GQAFU
/hXJX4fOby0piZMD0El7mTilkOrkT7jx9Wc+2BFvjKhqmnN6Do1EHNxD1IyKs/Fn
406XksAnxhHpq2V9N2/+Uk1FFMryP8rEFNoRePVtkcYgrOVmZoqwYJC1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoJ+Xuv+5vZLXsUQ6gMyCwhMfr1MB8GA1UdIwQY
MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt
MzBkZjYyNDI5ZGYwLzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw
LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/KADDQv
G6PdNXfykHgWoeXq1D9nbrewzw7x8fjPjlvBDwKJcJej70qP+VegP01jCiQamg4n
xIUn0CIoOpbpf4i/h67J+cr4I3m7IGaoy0kazdanLIOteu5+zZ7aAfct38cx74Gf
BeE4zLo9SfuagamKdWzOYN+e7svILvYQEwGTu4ymK1LCv8W5gHgf7YS42n4D4q7v
Pr6T0k2xOZqPCmJGc/KBqWXj9rro7TPfQc1AFgR9uWDGMSaNnfeuFnHLPYPnRQlc
aIJEjkEXGPDqJ1cy9Sa8jH1ym5NmUgWGgU2JeQttTGR9t8BUCIC+DsIGs9QWZ+de
WyvXYY/zQ+KHVQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:39:23 2026 by rpki-client