Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File:                     syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier:          JVkJYfxe6X28QVE1NdN0HbcYB9/M/u2ELjm6sF2RhY4=
Subject key identifier:   CD:2E:A6:62:23:71:B4:9A:01:37:37:46:F9:F9:57:9D:8A:4D:4B:DB
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer:       /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial:       019E9D7350AF067BEDFEF0E9049C0A037591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number:          1488
Signing time:             Sat 06 Jun 2026 15:00:40 +0000
Manifest this update:     Sat 06 Jun 2026 15:00:40 +0000
Manifest next update:     Sun 07 Jun 2026 15:00:40 +0000
Files and hashes:         1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
                          2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: RLan+loaP6K6YtfYFSdnN1ERMakbDPOoBtNGrXbtkEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:73:50:af:06:7b:ed:fe:f0:e9:04:9c:0a:03:75:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
        Validity
            Not Before: Jun  6 15:00:40 2026 GMT
            Not After : Jun  7 15:00:40 2026 GMT
        Subject: CN=cd2ea6622371b49a01373746f9f9579d8a4d4bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:eb:ac:84:f1:81:66:fe:eb:25:ff:4c:a2:
                    92:8e:70:45:f2:11:6d:40:bc:f1:64:88:ca:59:41:
                    84:36:0e:99:65:f2:96:56:9d:ca:bb:80:30:ba:4d:
                    dc:a5:99:f0:1d:7c:45:3b:1a:b8:a2:b6:65:87:d6:
                    4f:c9:93:90:4e:ba:a4:12:d2:e7:60:8a:1e:74:20:
                    9d:6a:da:7d:27:3d:b6:62:58:22:cf:78:89:a6:62:
                    8a:b2:4b:ac:9d:ec:96:dd:ed:11:82:3f:d8:71:a0:
                    81:81:f1:ea:60:b7:ab:fc:52:2b:d1:e6:a9:0c:24:
                    7b:1c:a9:24:a0:52:1d:77:65:44:00:59:58:59:2f:
                    2e:27:8a:39:76:9e:47:c7:9b:68:2b:30:99:a8:17:
                    fc:4e:bd:9a:41:a0:12:24:a3:3f:24:63:86:01:a2:
                    66:e8:cc:39:d6:e6:03:66:ad:e2:89:a7:d2:64:3b:
                    d8:04:0e:f9:7c:b2:21:68:14:07:21:7c:8d:e4:6d:
                    c5:d6:87:6c:e9:c4:70:b2:84:75:5c:14:fb:8a:90:
                    b8:15:8e:76:26:6b:cf:10:05:32:05:ee:ae:aa:84:
                    e9:3d:9e:d2:95:33:cb:ea:f2:fa:c6:9e:d9:38:51:
                    1f:04:25:80:99:98:b8:72:40:03:c7:cd:0c:64:71:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2E:A6:62:23:71:B4:9A:01:37:37:46:F9:F9:57:9D:8A:4D:4B:DB
            X509v3 Authority Key Identifier:
                keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c9:83:26:5e:e1:f9:0f:7f:c6:ab:a8:2a:c4:8d:99:e6:f2:
         f8:44:59:19:17:35:98:e6:c9:d0:e0:56:c8:59:7d:e9:82:43:
         8d:89:35:5d:e5:97:26:c1:3b:b9:c8:59:cb:a8:3f:db:99:46:
         05:84:0c:6f:a5:62:bd:b8:a7:18:f0:0a:9f:4e:e2:4a:c4:31:
         a2:8d:d9:91:ad:7b:53:9e:f4:08:b5:7a:b3:fb:cf:25:46:43:
         0c:7f:10:8e:ff:78:de:7b:ab:b4:b3:9a:de:a8:95:06:b5:8b:
         0a:86:24:ff:24:1d:c5:bc:f8:65:ec:09:6a:7b:a4:1c:9e:e7:
         fa:a4:85:97:7a:ab:2c:26:9d:4b:24:61:94:0b:8b:27:ce:6e:
         9c:da:06:b5:93:b1:60:fe:11:06:92:df:3c:f3:87:bf:8f:81:
         6b:c2:de:92:50:a6:95:a7:d5:31:76:41:02:fa:3b:bc:c7:a6:
         94:87:9e:2c:bb:40:38:c0:ff:0a:bf:75:cd:a7:eb:c0:98:42:
         13:aa:6b:48:a1:25:52:5c:e0:ba:5b:cc:62:2a:39:65:e2:a8:
         68:ad:44:f2:b1:08:6b:79:18:4f:82:f0:4f:68:c9:44:23:21:
         86:d4:46:7a:9f:76:92:64:66:24:f7:a9:5b:8a:71:4d:cf:b1:
         c1:2a:0c:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6dc1CvBnvt/vDpBJwKA3WRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMjFjYjgyODkwOGY0MzA3NDllZTNhNWYyYTYyZGU1Zjgy
MmY3ZDEwHhcNMjYwNjA2MTUwMDQwWhcNMjYwNjA3MTUwMDQwWjAzMTEwLwYDVQQD
EyhjZDJlYTY2MjIzNzFiNDlhMDEzNzM3NDZmOWY5NTc5ZDhhNGQ0YmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo7rrITxgWb+6yX/TKKSjnBF8hFt
QLzxZIjKWUGENg6ZZfKWVp3Ku4Awuk3cpZnwHXxFOxq4orZlh9ZPyZOQTrqkEtLn
YIoedCCdatp9Jz22Ylgiz3iJpmKKskusneyW3e0Rgj/YcaCBgfHqYLer/FIr0eap
DCR7HKkkoFIdd2VEAFlYWS8uJ4o5dp5Hx5toKzCZqBf8Tr2aQaASJKM/JGOGAaJm
6Mw51uYDZq3iiafSZDvYBA75fLIhaBQHIXyN5G3F1ods6cRwsoR1XBT7ipC4FY52
JmvPEAUyBe6uqoTpPZ7SlTPL6vL6xp7ZOFEfBCWAmZi4ckADx80MZHHeJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0upmIjcbSaATc3Rvn5V52KTUvbMB8GA1UdIwQY
MBaAFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYt
ODdmMzQxODg4NTYwLzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYtODdmMzQxODg4NTYw
LzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsmDJl7h
+Q9/xquoKsSNmeby+ERZGRc1mObJ0OBWyFl96YJDjYk1XeWXJsE7uchZy6g/25lG
BYQMb6VivbinGPAKn07iSsQxoo3Zka17U570CLV6s/vPJUZDDH8Qjv943nurtLOa
3qiVBrWLCoYk/yQdxbz4ZewJanukHJ7n+qSFl3qrLCadSyRhlAuLJ85unNoGtZOx
YP4RBpLfPPOHv4+Ba8LeklCmlafVMXZBAvo7vMemlIeeLLtAOMD/Cr91zafrwJhC
E6prSKElUlzgulvMYio5ZeKoaK1E8rEIa3kYT4LwT2jJRCMhhtRGep92kmRmJPep
W4pxTc+xwSoM7A==
-----END CERTIFICATE-----
Generated at Sat Jun 6 19:43:44 2026 by rpki-client