Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          Ujt16aqeM4D0swj7WJxHuzzVEHL/s/uSVrCdAFHu4Z8=
Subject key identifier:   AC:A0:23:E0:D6:58:67:F7:1C:55:98:5D:CE:44:91:E0:DE:A3:AB:A6
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       019F18310DC54B47B4ABAFFD30015821E695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          0F27
Signing time:             Tue 30 Jun 2026 11:01:35 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:35 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:35 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: inc2uBVc4hcfm/EfltFcyAotjKWyiruWkUnS2lAkzeM=)
                          2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:31:0d:c5:4b:47:b4:ab:af:fd:30:01:58:21:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Jun 30 11:01:35 2026 GMT
            Not After : Jul  1 11:01:35 2026 GMT
        Subject: CN=aca023e0d65867f71c55985dce4491e0dea3aba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:80:f9:e0:bc:3a:c0:9f:10:aa:09:3c:c2:
                    1a:00:9a:62:34:eb:e2:2d:09:0f:a6:ac:51:d7:d5:
                    a8:db:88:84:c5:7d:76:b0:c4:dd:74:7e:84:50:6e:
                    4b:d8:19:6c:72:d2:de:d0:85:bb:09:05:41:4d:fb:
                    2b:70:12:b0:19:20:33:81:b0:d9:da:85:9e:db:ea:
                    7c:51:ad:18:31:69:e0:d8:2c:06:41:47:f6:36:2d:
                    2b:77:58:08:56:fd:d9:aa:46:6f:d0:60:6e:b3:e4:
                    e8:3d:f1:d3:16:81:d4:ad:83:e0:2d:92:c8:4a:4a:
                    3b:27:46:64:21:6a:eb:74:fa:fa:bc:e3:9c:e5:f6:
                    d4:ed:62:c2:0d:92:a7:b6:23:27:f7:9a:67:47:16:
                    69:07:f5:c2:2d:d6:63:fc:8c:67:0a:29:e3:5d:d7:
                    44:28:5e:ef:2d:50:78:c8:c8:ed:5b:c2:10:ef:3d:
                    76:e8:5d:e7:88:62:05:28:45:1b:74:1c:4f:2b:19:
                    da:53:1f:b2:a1:2b:bc:a9:de:96:fe:21:24:8c:8c:
                    36:d4:89:54:ea:e7:40:db:89:11:af:ff:ff:ec:8e:
                    46:80:61:49:6a:ca:6d:f3:aa:16:e1:24:44:13:0e:
                    79:ab:8b:9e:0d:22:37:30:84:62:b4:6b:77:bb:39:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:23:E0:D6:58:67:F7:1C:55:98:5D:CE:44:91:E0:DE:A3:AB:A6
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ed:db:88:c7:e2:31:df:bc:73:86:d0:37:2e:40:63:7b:05:
         56:2e:c2:08:17:1b:bb:cc:e2:45:53:76:29:00:ff:bf:15:98:
         c9:b0:9c:a2:c2:36:13:58:83:28:52:28:4f:f1:a8:cc:5c:e2:
         1a:92:ab:c0:41:48:ad:b5:1c:0c:7b:51:08:2c:8d:a3:b6:17:
         e8:6f:9b:55:d8:09:c7:04:53:9e:57:74:bc:d2:77:0c:87:35:
         52:1b:7f:9e:1d:f3:9c:02:59:ca:41:a4:7d:da:27:48:99:20:
         80:65:80:8e:78:ca:5f:8d:0c:52:3a:a0:61:23:f2:d5:3d:ee:
         ce:14:69:ab:43:c1:3a:e7:5a:f3:9e:83:e0:9b:d0:c5:a8:1c:
         e8:44:ba:a9:29:54:79:d7:9e:dd:c4:83:b6:92:8d:42:d9:d4:
         62:f0:68:75:d8:c1:ee:c1:5a:92:f9:37:a4:5d:24:7c:99:80:
         7c:0d:fd:53:83:13:74:2d:9a:c6:2e:fd:6c:76:7e:35:01:0b:
         45:cb:8b:7f:68:63:4c:94:73:b6:67:5b:f8:7d:25:ce:79:6d:
         66:7e:e2:2c:6c:f7:f8:56:61:56:7e:a5:6a:3c:ce:42:78:90:
         b2:12:8a:51:9c:f1:87:49:00:84:62:30:94:fe:af:cc:89:0b:
         e2:ee:f3:ad
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8YMQ3FS0e0q6/9MAFYIeaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NGE2NTU5OWFmYjlkODcyN2MzZGI5NDdlZmZiYWUyZTVi
ODUzZDEwHhcNMjYwNjMwMTEwMTM1WhcNMjYwNzAxMTEwMTM1WjAzMTEwLwYDVQQD
EyhhY2EwMjNlMGQ2NTg2N2Y3MWM1NTk4NWRjZTQ0OTFlMGRlYTNhYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaiA+eC8OsCfEKoJPMIaAJpiNOvi
LQkPpqxR19Wo24iExX12sMTddH6EUG5L2BlsctLe0IW7CQVBTfsrcBKwGSAzgbDZ
2oWe2+p8Ua0YMWng2CwGQUf2Ni0rd1gIVv3ZqkZv0GBus+ToPfHTFoHUrYPgLZLI
Sko7J0ZkIWrrdPr6vOOc5fbU7WLCDZKntiMn95pnRxZpB/XCLdZj/IxnCinjXddE
KF7vLVB4yMjtW8IQ7z126F3niGIFKEUbdBxPKxnaUx+yoSu8qd6W/iEkjIw21IlU
6udA24kRr///7I5GgGFJaspt86oW4SREEw55q4ueDSI3MIRitGt3uzlnfQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKygI+DWWGf3HFWYXc5EkeDeo6umMB8GA1UdIwQY
MBaAFPhKZVma+52HJ8PblH7/uuLluFPRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FcGxXWnI3blljbnc5dVVmdi02NHVXNFU5RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNTY1N2M4LTUwMzctNDhjZC04ZGI1
LTgxMTVkZjMxNzIzNS8xLzEtRXBsV1pyN25ZY253OXVVZnYtNjR1VzRVOUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQxLzU2NTdjOC01MDM3LTQ4Y2QtOGRiNS04MTE1ZGYzMTcy
MzUvMS8xLUVwbFdacjduWWNudzl1VWZ2LTY0dVc0VTlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAou3b
iMfiMd+8c4bQNy5AY3sFVi7CCBcbu8ziRVN2KQD/vxWYybCcosI2E1iDKFIoT/Go
zFziGpKrwEFIrbUcDHtRCCyNo7YX6G+bVdgJxwRTnld0vNJ3DIc1Uht/nh3znAJZ
ykGkfdonSJkggGWAjnjKX40MUjqgYSPy1T3uzhRpq0PBOuda856D4JvQxagc6ES6
qSlUedee3cSDtpKNQtnUYvBoddjB7sFakvk3pF0kfJmAfA39U4MTdC2axi79bHZ+
NQELRcuLf2hjTJRztmdb+H0lznltZn7iLGz3+FZhVn6lajzOQniQshKKUZzxh0kA
hGIwlP6vzIkL4u7zrQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:16 2026 by rpki-client