Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File:                     f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier:          g94lIK6Ua+bfR4pWT0xtxAIK1Xr/XDHix3LEVN2E2x8=
Subject key identifier:   49:B0:C6:92:9F:55:E3:AF:B0:53:90:0A:3F:6F:CE:8C:77:F4:95:80
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer:       /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial:       019EB7D8191D3B78A47817DF662E1261E0CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number:          07AF
Signing time:             Thu 11 Jun 2026 18:00:53 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:53 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:53 +0000
Files and hashes:         1: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: MTu6ao9aasUlW9dow6/qW3VOIEdg+rkHd4qn4GXIkAs=)
                          2: pXDB3JZOfxhx6kB_B6yjlms4hgg.roa (hash: 7CjufhrAy5+5Le+UMiFmAE/OHHfY94923x+MRoCs0Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d8:19:1d:3b:78:a4:78:17:df:66:2e:12:61:e0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
        Validity
            Not Before: Jun 11 18:00:53 2026 GMT
            Not After : Jun 12 18:00:53 2026 GMT
        Subject: CN=49b0c6929f55e3afb053900a3f6fce8c77f49580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:03:21:8b:6d:cd:0f:49:0c:44:a9:4b:29:
                    fb:61:de:b3:02:07:c6:ef:62:7a:4d:c6:cd:6a:da:
                    ea:f0:fb:e5:e4:21:4a:a5:7b:2a:3b:3a:c4:38:10:
                    7c:9f:dd:4f:37:16:5b:6d:1f:4e:ba:e1:d0:24:e1:
                    27:8e:b7:72:65:0d:55:31:5c:32:61:01:3b:9a:a0:
                    33:e1:f9:4f:da:82:7b:70:3e:fc:a8:d5:23:1f:eb:
                    b8:aa:4d:8b:30:82:e1:98:d3:18:ed:ed:fa:50:fb:
                    0f:40:05:0c:c0:df:bf:4d:c0:67:c9:d8:7b:a0:92:
                    98:b4:af:e2:b2:7c:f6:47:be:36:a5:e5:9a:1f:77:
                    b0:a2:97:ed:7f:68:9b:57:aa:9e:46:be:6c:69:33:
                    ec:dc:c6:73:51:b7:c2:09:e5:43:4c:69:3a:31:b0:
                    19:c5:ef:e3:a9:58:12:d9:8a:f0:72:e4:66:02:ff:
                    bd:d5:44:ca:30:d5:42:83:70:34:df:72:6c:7a:da:
                    36:53:cf:66:2f:7f:ab:08:b6:2a:f6:dc:bb:5b:1b:
                    7a:8d:44:79:ab:cb:41:13:61:26:15:28:b3:dd:e9:
                    10:56:d3:09:cf:23:c1:78:01:f3:41:c2:23:8d:7e:
                    ec:15:7a:a5:a8:45:03:b6:f4:68:80:86:b5:71:32:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B0:C6:92:9F:55:E3:AF:B0:53:90:0A:3F:6F:CE:8C:77:F4:95:80
            X509v3 Authority Key Identifier:
                keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:17:05:53:f1:94:bb:8c:70:a8:ba:7d:2c:0d:c4:1c:9a:
         c7:ba:6f:83:a5:bb:43:50:0d:3f:35:4f:76:f0:23:c0:b1:ae:
         bb:1e:ae:ac:51:c3:85:c5:61:d6:7e:42:85:32:a7:05:f7:81:
         a2:32:95:93:9b:96:e4:79:f3:f6:86:6d:6a:f8:67:2e:fa:2b:
         85:2e:fc:13:f4:fc:64:54:09:97:e9:85:59:1e:21:7a:84:da:
         75:4f:4d:c3:07:4e:d4:75:25:64:a6:6c:cb:00:34:ce:7d:71:
         b4:4e:cf:9c:ef:50:2d:d7:fe:7d:6c:43:13:67:b8:08:13:7b:
         2c:5e:0e:ad:d6:93:50:41:84:bc:a7:6d:16:27:fb:c2:9b:07:
         48:5d:c0:81:eb:c2:b1:00:ec:bf:e0:c6:37:99:a6:c9:33:17:
         d5:8e:8a:28:5f:46:48:83:2c:fc:b8:41:3a:a1:b9:19:fd:5c:
         d9:b6:b6:e2:89:00:82:4e:54:d7:ab:93:8a:f6:e4:80:e4:60:
         66:25:b8:74:3e:39:a9:9c:47:04:60:7c:00:8e:79:04:c4:ab:
         90:a1:f9:55:94:ca:cb:c8:1c:be:e6:cf:3d:67:49:08:a7:d5:
         dc:c8:44:e9:99:16:7b:44:23:b3:05:22:a3:d9:e7:76:db:7b:
         50:05:0b:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ632BkdO3ikeBffZi4SYeDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNGQ1OTFjMjNhZDJjNjk0NzdkN2Y3YTFkNGNlOGViY2Vl
OTU5NmMwHhcNMjYwNjExMTgwMDUzWhcNMjYwNjEyMTgwMDUzWjAzMTEwLwYDVQQD
Eyg0OWIwYzY5MjlmNTVlM2FmYjA1MzkwMGEzZjZmY2U4Yzc3ZjQ5NTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn8DIYttzQ9JDESpSyn7Yd6zAgfG
72J6TcbNatrq8Pvl5CFKpXsqOzrEOBB8n91PNxZbbR9OuuHQJOEnjrdyZQ1VMVwy
YQE7mqAz4flP2oJ7cD78qNUjH+u4qk2LMILhmNMY7e36UPsPQAUMwN+/TcBnydh7
oJKYtK/isnz2R742peWaH3ewopftf2ibV6qeRr5saTPs3MZzUbfCCeVDTGk6MbAZ
xe/jqVgS2YrwcuRmAv+91UTKMNVCg3A033Jseto2U89mL3+rCLYq9ty7Wxt6jUR5
q8tBE2EmFSiz3ekQVtMJzyPBeAHzQcIjjX7sFXqlqEUDtvRogIa1cTIr2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmwxpKfVeOvsFOQCj9vzox39JWAMB8GA1UdIwQY
MBaAFH9NWRwjrSxpR31/eh1M6OvO6VlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQt
ZDRmNWM5MmQ5MDk1LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQtZDRmNWM5MmQ5MDk1
LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe4XBVPx
lLuMcKi6fSwNxByax7pvg6W7Q1ANPzVPdvAjwLGuux6urFHDhcVh1n5ChTKnBfeB
ojKVk5uW5Hnz9oZtavhnLvorhS78E/T8ZFQJl+mFWR4heoTadU9NwwdO1HUlZKZs
ywA0zn1xtE7PnO9QLdf+fWxDE2e4CBN7LF4OrdaTUEGEvKdtFif7wpsHSF3AgevC
sQDsv+DGN5mmyTMX1Y6KKF9GSIMs/LhBOqG5Gf1c2ba24okAgk5U16uTivbkgORg
ZiW4dD45qZxHBGB8AI55BMSrkKH5VZTKy8gcvubPPWdJCKfV3MhE6ZkWe0QjswUi
o9nndtt7UAUL4g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:03:52 2026 by rpki-client