Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          p7TlcvFlqHE3EsSEW3VIw/M2OYpZmsW2pO9iIozBK4E=
Subject key identifier:   59:6D:5C:18:92:85:AB:87:87:B1:94:77:2C:69:90:5B:9D:97:8D:B5
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       019EBA345E2FB3C613A7A9F7A477A467685C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          18D7
Signing time:             Fri 12 Jun 2026 05:00:54 +0000
Manifest this update:     Fri 12 Jun 2026 05:00:54 +0000
Manifest next update:     Sat 13 Jun 2026 05:00:54 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: jrcWlQgf1plXtvJMpgwnAZynz7mBOHFD2jxJQMTYTKk=)
                          2: XTqrU8Fe3dyCsrhN-j7VCGJxXio.roa (hash: f4c8Huch2WTliXq5MFgPvjqV6741k9rGMrHBDUOfaY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:5e:2f:b3:c6:13:a7:a9:f7:a4:77:a4:67:68:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Jun 12 05:00:54 2026 GMT
            Not After : Jun 13 05:00:54 2026 GMT
        Subject: CN=596d5c189285ab8787b194772c69905b9d978db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:d6:99:5b:1a:d8:40:1c:ff:0b:27:44:95:
                    82:cc:63:7f:ba:e1:14:ea:3f:eb:8d:5b:97:b9:4f:
                    3d:0b:fe:13:f4:b8:4b:17:94:ec:41:20:fc:b9:89:
                    21:b0:8b:ec:f9:e8:44:20:a4:0e:7a:dc:6e:38:91:
                    05:b1:84:cb:24:c8:0e:49:c2:fd:4d:5a:25:b4:31:
                    c9:5a:2f:ae:98:d2:d1:0a:bf:32:7f:67:e4:3f:9d:
                    27:0c:1f:77:97:20:f0:98:47:07:25:14:86:d0:e5:
                    e4:d6:ef:2a:8f:65:72:57:bd:a1:d7:f5:c3:44:e4:
                    da:39:d1:1a:32:1e:a5:7f:e7:34:96:d3:96:e5:a6:
                    19:7f:82:25:f8:8e:3b:37:08:0e:db:88:1c:54:d6:
                    81:7a:9b:85:54:83:20:56:23:34:3e:c6:c7:e0:e4:
                    36:4f:f2:35:f2:1f:ad:f1:c1:c3:d3:da:c7:55:6e:
                    94:8f:f1:e3:d8:c3:cb:06:d8:32:c1:22:c0:c3:74:
                    99:e7:c3:d8:87:8c:5e:df:d6:c5:e4:3a:3b:d5:d8:
                    bd:b2:a8:d9:75:48:b0:92:74:36:39:1b:47:31:e9:
                    da:f7:5c:06:b7:af:1f:58:ee:e6:8a:b7:a7:09:96:
                    7e:fc:27:cd:c6:e4:22:a0:15:33:fb:c6:28:2a:ea:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6D:5C:18:92:85:AB:87:87:B1:94:77:2C:69:90:5B:9D:97:8D:B5
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:88:58:fd:50:90:e2:76:7c:67:6a:85:79:ac:67:3b:b5:
         1a:35:5b:36:71:cc:14:a7:a9:2f:5f:50:f2:0b:18:61:fe:6e:
         c7:dc:31:25:27:68:65:b2:dc:64:f7:30:0b:2b:b7:9f:f4:cc:
         f5:00:57:75:23:38:88:36:0b:86:71:f0:55:de:74:f5:b0:08:
         ed:c4:40:ef:85:7d:50:e6:01:23:e1:7f:8a:04:b3:46:9b:78:
         94:1d:aa:42:d4:73:22:47:47:1b:6b:b5:6b:07:d7:06:d2:8b:
         bf:af:a5:c7:59:ba:ac:fc:07:b7:b0:91:5c:8d:fb:97:c3:ef:
         da:07:99:66:6c:c8:9c:87:d1:41:95:27:7d:fa:9c:35:09:31:
         40:8f:af:b6:50:f2:d3:bc:4f:15:36:bf:cd:14:f0:cc:90:9a:
         27:df:34:c1:32:89:b4:63:71:6c:b3:01:a2:ca:20:dd:5f:b4:
         07:46:0b:5c:3c:f9:38:3b:d4:d9:37:7c:c1:b1:10:6b:96:f0:
         fd:db:c5:db:c6:86:5c:31:87:6d:f2:e7:22:8a:38:0d:9b:23:
         d3:d4:fd:ad:a0:3b:03:f1:2a:c6:fb:7a:74:5c:46:cc:96:fa:
         1b:c8:4c:4e:1a:2e:0d:d8:73:f0:f9:50:3a:b6:51:8c:18:b4:
         14:7b:6f:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NF4vs8YTp6n3pHekZ2hcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZmUzOTAwZTE0MWMzYjE2OWEzY2NjYjM1NTdiY2NlZjI4
OTVlODUwHhcNMjYwNjEyMDUwMDU0WhcNMjYwNjEzMDUwMDU0WjAzMTEwLwYDVQQD
Eyg1OTZkNWMxODkyODVhYjg3ODdiMTk0NzcyYzY5OTA1YjlkOTc4ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv3WmVsa2EAc/wsnRJWCzGN/uuEU
6j/rjVuXuU89C/4T9LhLF5TsQSD8uYkhsIvs+ehEIKQOetxuOJEFsYTLJMgOScL9
TVoltDHJWi+umNLRCr8yf2fkP50nDB93lyDwmEcHJRSG0OXk1u8qj2VyV72h1/XD
ROTaOdEaMh6lf+c0ltOW5aYZf4Il+I47NwgO24gcVNaBepuFVIMgViM0PsbH4OQ2
T/I18h+t8cHD09rHVW6Uj/Hj2MPLBtgywSLAw3SZ58PYh4xe39bF5Do71di9sqjZ
dUiwknQ2ORtHMena91wGt68fWO7mirenCZZ+/CfNxuQioBUz+8YoKurZyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFltXBiShauHh7GUdyxpkFudl421MB8GA1UdIwQY
MBaAFBH+OQDhQcOxaaPMyzVXvM7yiV6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEt
Y2UxYThkYzk0MDQ4LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83ZWU5ODEtMGQ3Yy00YTUzLWFkYTEtY2UxYThkYzk0MDQ4
LzEvRWY0NUFPRkJ3N0Zwbzh6TE5WZTh6dktKWG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggOIWP1Q
kOJ2fGdqhXmsZzu1GjVbNnHMFKepL19Q8gsYYf5ux9wxJSdoZbLcZPcwCyu3n/TM
9QBXdSM4iDYLhnHwVd509bAI7cRA74V9UOYBI+F/igSzRpt4lB2qQtRzIkdHG2u1
awfXBtKLv6+lx1m6rPwHt7CRXI37l8Pv2geZZmzInIfRQZUnffqcNQkxQI+vtlDy
07xPFTa/zRTwzJCaJ980wTKJtGNxbLMBosog3V+0B0YLXDz5ODvU2Td8wbEQa5bw
/dvF28aGXDGHbfLnIoo4DZsj09T9raA7A/Eqxvt6dFxGzJb6G8hMThouDdhz8PlQ
OrZRjBi0FHtvrw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:52:52 2026 by rpki-client