Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
File:                     SnDhvI7t2UeGELGv8JMPQDR1JuU.mft (raw, json)
Hash identifier:          Qi5BGuGGrZPL3vhLGHFM+g3H46CnWE82HN1l/JhfYe8=
Subject key identifier:   A3:27:A2:FB:A3:1A:6C:CA:51:34:43:0B:2D:B7:20:D9:C6:3C:F8:2F
Authority key identifier: 4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5
Certificate issuer:       /CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
Certificate serial:       019F0A3E8FAAB94E3C3230B3F67846323810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
Manifest number:          0149
Signing time:             Sat 27 Jun 2026 18:01:39 +0000
Manifest this update:     Sat 27 Jun 2026 18:01:39 +0000
Manifest next update:     Sun 28 Jun 2026 18:01:39 +0000
Files and hashes:         1: SnDhvI7t2UeGELGv8JMPQDR1JuU.crl (hash: UEr7lmthXhJACAfXaMast84CS3D5CzStvLM2JWkRdRA=)
                          2: mbfy7L8D_2UAGm_dalRDD5X5-5k.roa (hash: QA1iyiTc+hx3IttbGaQYktAkhZefaHnHg6PgY6o1wcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 18:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0a:3e:8f:aa:b9:4e:3c:32:30:b3:f6:78:46:32:38:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a70e1bc8eedd9478610b1aff0930f40347526e5
        Validity
            Not Before: Jun 27 18:01:39 2026 GMT
            Not After : Jun 28 18:01:39 2026 GMT
        Subject: CN=a327a2fba31a6cca5134430b2db720d9c63cf82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:37:49:bf:f4:9b:28:bb:a0:97:99:52:42:
                    1d:96:3d:78:d8:ca:ce:28:c7:bb:31:19:b5:a2:33:
                    c6:8b:6b:91:09:5c:91:d8:d5:0e:78:0e:8a:a7:45:
                    81:84:d4:4c:86:bd:25:f0:7a:5f:da:e1:09:3b:bc:
                    3f:40:ae:7b:34:85:24:c9:62:55:d2:b4:76:48:06:
                    ec:f8:56:67:77:45:31:ab:b2:ed:57:e6:1f:6b:a3:
                    c1:6a:a4:6e:cd:06:b1:70:91:f7:a2:7e:2b:f6:c7:
                    bb:31:c4:fd:61:2d:99:ff:9e:b9:f5:c8:01:0e:cd:
                    06:a2:b8:78:23:28:68:ef:24:41:74:a4:63:17:56:
                    0e:de:3b:7c:88:bf:bf:9e:7f:12:df:a3:79:7f:26:
                    32:59:4b:b5:49:06:1f:7f:0c:33:9e:c6:61:10:e5:
                    c7:b1:42:b4:b6:14:bd:83:dd:b1:3c:cf:48:84:f7:
                    1c:35:60:ef:ac:76:0c:9a:81:da:0a:29:2a:ef:37:
                    0c:47:61:9b:57:3e:dc:27:e5:64:fe:fd:8d:b5:01:
                    c6:66:14:c7:4a:66:16:91:e7:c2:18:bc:5c:95:6e:
                    14:e6:95:96:0e:85:d2:78:7b:95:ec:72:75:ca:c7:
                    67:0b:5e:51:78:3e:be:ad:ee:8f:6f:31:ea:62:30:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:27:A2:FB:A3:1A:6C:CA:51:34:43:0B:2D:B7:20:D9:C6:3C:F8:2F
            X509v3 Authority Key Identifier:
                keyid:4A:70:E1:BC:8E:ED:D9:47:86:10:B1:AF:F0:93:0F:40:34:75:26:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnDhvI7t2UeGELGv8JMPQDR1JuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fe95da-c95e-4829-9e05-aa9b873d7f96/1/SnDhvI7t2UeGELGv8JMPQDR1JuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:ad:d5:c0:93:ec:93:53:62:ee:bc:d4:e9:cf:cd:0e:8c:
         b7:6e:95:5b:d2:a7:da:5f:a4:e6:db:46:ca:9f:53:80:af:7f:
         03:5a:fd:64:d7:d1:09:ea:c8:27:f1:ef:a9:c7:72:33:af:e7:
         73:a7:4b:0b:ca:15:79:63:b8:88:41:ed:83:44:47:f2:14:ff:
         56:b9:b4:56:b5:10:99:94:6c:a9:dc:2d:f7:27:d8:32:02:a9:
         04:de:af:a7:25:96:d8:0a:49:8c:97:35:13:56:61:23:cc:6c:
         ec:a4:27:67:f0:1c:2f:06:64:0e:ff:32:d4:d8:88:3e:4e:27:
         b6:9d:da:26:5c:90:9e:81:02:84:6e:cb:49:eb:83:c6:97:62:
         20:19:31:cb:07:de:ee:40:bb:b0:77:b1:34:16:1c:cf:91:09:
         ac:f3:f5:ca:3a:f8:19:f0:6a:57:f5:61:d5:ac:27:8a:0f:4b:
         43:be:5c:47:9e:aa:0c:7d:ba:fb:32:91:f9:ad:63:6a:fd:7a:
         04:ec:09:df:da:d0:e8:d4:b5:0b:cd:44:05:c3:80:83:c1:38:
         a4:ff:25:aa:2b:a1:35:af:76:24:cd:2d:36:0a:dd:9f:97:46:
         23:46:ce:bb:04:0d:ce:fc:3f:11:67:3c:1f:f5:f6:00:ca:2c:
         6b:4b:37:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8KPo+quU48MjCz9nhGMjgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzBlMWJjOGVlZGQ5NDc4NjEwYjFhZmYwOTMwZjQwMzQ3
NTI2ZTUwHhcNMjYwNjI3MTgwMTM5WhcNMjYwNjI4MTgwMTM5WjAzMTEwLwYDVQQD
EyhhMzI3YTJmYmEzMWE2Y2NhNTEzNDQzMGIyZGI3MjBkOWM2M2NmODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaI3Sb/0myi7oJeZUkIdlj142MrO
KMe7MRm1ojPGi2uRCVyR2NUOeA6Kp0WBhNRMhr0l8Hpf2uEJO7w/QK57NIUkyWJV
0rR2SAbs+FZnd0Uxq7LtV+Yfa6PBaqRuzQaxcJH3on4r9se7McT9YS2Z/5659cgB
Ds0Gorh4Iyho7yRBdKRjF1YO3jt8iL+/nn8S36N5fyYyWUu1SQYffwwznsZhEOXH
sUK0thS9g92xPM9IhPccNWDvrHYMmoHaCikq7zcMR2GbVz7cJ+Vk/v2NtQHGZhTH
SmYWkefCGLxclW4U5pWWDoXSeHuV7HJ1ysdnC15ReD6+re6PbzHqYjD/yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMnovujGmzKUTRDCy23INnGPPgvMB8GA1UdIwQY
MBaAFEpw4byO7dlHhhCxr/CTD0A0dSblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUt
YWE5Yjg3M2Q3Zjk2LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mZTk1ZGEtYzk1ZS00ODI5LTllMDUtYWE5Yjg3M2Q3Zjk2
LzEvU25EaHZJN3QyVWVHRUxHdjhKTVBRRFIxSnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ2t1cCT
7JNTYu681OnPzQ6Mt26VW9Kn2l+k5ttGyp9TgK9/A1r9ZNfRCerIJ/HvqcdyM6/n
c6dLC8oVeWO4iEHtg0RH8hT/Vrm0VrUQmZRsqdwt9yfYMgKpBN6vpyWW2ApJjJc1
E1ZhI8xs7KQnZ/AcLwZkDv8y1NiIPk4ntp3aJlyQnoEChG7LSeuDxpdiIBkxywfe
7kC7sHexNBYcz5EJrPP1yjr4GfBqV/Vh1awnig9LQ75cR56qDH26+zKR+a1jav16
BOwJ39rQ6NS1C81EBcOAg8E4pP8lqiuhNa92JM0tNgrdn5dGI0bOuwQNzvw/EWc8
H/X2AMosa0s3yg==
-----END CERTIFICATE-----
Generated at Sun Jun 28 02:01:54 2026 by rpki-client