Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          H/827Z+ARIHOkb6ydxpl4r6TyRYG74LtMHqXqiCnfMI=
Subject key identifier:   9B:75:2C:E6:41:35:AB:ED:EB:EB:F8:91:2A:90:63:DB:41:41:B9:B8
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       019F13AF4A7CBBDC7EED50A82F9D0F4E0C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          100F
Signing time:             Mon 29 Jun 2026 14:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 14:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 14:01:22 +0000
Files and hashes:         1: YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa (hash: bLjbl+wMhiL7sRh09UL9i2a7It+tGXyibFC5+VSFo1A=)
                          2: hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa (hash: 7SFeRpPNNir0THQNHogkPoRqinwuTC1jSrURc0Ccc1k=)
                          3: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: LATWK6zoujxkDyk8wVywv6ScDGrhDPpS39YYx8d+TOw=)
                          4: zNU6IDjxCzR9kstGaRPoOLdFKys.roa (hash: /0Ll+33Qv6p8kiSxadN/S3UUnMBmdYJpGWJ0vqXCXNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:af:4a:7c:bb:dc:7e:ed:50:a8:2f:9d:0f:4e:0c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Jun 29 14:01:22 2026 GMT
            Not After : Jun 30 14:01:22 2026 GMT
        Subject: CN=9b752ce64135abedebebf8912a9063db4141b9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:e1:64:99:7d:39:3f:af:45:3d:8c:04:08:
                    e5:b9:8e:a1:8e:04:84:4c:cb:23:55:4e:07:b6:74:
                    92:b3:73:89:a9:9b:44:bd:52:25:08:e5:66:56:24:
                    f7:22:10:ea:54:7b:05:d0:8d:30:e5:79:39:f1:55:
                    c4:18:fb:a6:e6:ea:d6:72:ea:35:0d:4d:6d:0e:e7:
                    9d:4b:30:30:78:ae:58:97:1a:3e:2a:9d:81:4b:19:
                    aa:63:f2:0b:9f:e1:92:4f:57:2b:8c:67:1b:9a:41:
                    75:11:7d:73:09:9e:cc:3d:42:72:eb:48:be:4c:7c:
                    9a:05:62:11:40:ef:62:98:dd:f6:ae:e4:b6:65:35:
                    df:55:b8:47:c7:1b:a4:ee:03:e4:d4:4c:8d:d1:7d:
                    3f:66:90:72:cd:bf:7d:f0:11:6f:d7:b3:ce:14:fa:
                    b6:73:ff:59:3d:55:ee:ba:21:9c:e8:9c:ea:b2:7e:
                    4f:60:05:9d:ca:16:f9:c6:30:01:fb:17:54:52:da:
                    c1:0c:53:0a:02:cb:b3:db:a3:fd:e0:c6:9a:6a:21:
                    db:9b:53:1e:c8:90:53:24:2a:9a:aa:7c:db:80:5c:
                    8a:3f:6e:59:58:b6:8c:6d:9d:fb:ee:49:03:ab:e9:
                    4e:e6:f9:27:26:a4:23:e4:de:a2:41:8e:1e:eb:f4:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:75:2C:E6:41:35:AB:ED:EB:EB:F8:91:2A:90:63:DB:41:41:B9:B8
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0e:54:5d:91:ef:26:8e:7d:94:d0:b1:c5:a7:3a:51:d6:20:
         64:95:28:5c:5e:b8:e9:b7:e6:91:db:8a:4d:ba:b5:2e:41:11:
         2d:43:bd:24:e2:1e:a7:06:98:c5:55:d8:d6:9a:61:62:35:f0:
         de:5c:71:27:54:63:a6:12:b1:f6:7c:64:33:99:95:44:cb:cd:
         78:01:eb:d4:7a:51:ae:2b:3a:e7:64:82:98:dd:b3:d1:5e:6e:
         77:3f:6c:84:2a:b7:ec:28:71:b3:9a:e9:54:a9:97:93:9a:75:
         66:66:c0:58:c8:7c:08:a8:38:57:02:e1:43:95:a0:e1:d2:bd:
         9d:e0:e8:21:33:f0:bb:05:a2:ce:83:f8:a0:4c:e4:07:0c:32:
         6d:1b:04:b4:7b:70:34:50:64:d8:08:3f:5b:ae:af:66:22:21:
         62:29:32:b7:4a:72:64:78:3e:6d:8e:89:19:27:34:d0:08:65:
         bd:4e:75:98:4b:ca:c4:2f:9d:54:28:eb:e4:dc:5d:59:ff:ad:
         3a:1d:99:4c:2f:bd:be:0c:42:89:b5:a2:77:1a:fa:1d:6c:b4:
         dd:af:11:75:a7:9d:89:f4:6b:98:42:8a:9b:ee:22:8b:d1:bc:
         8b:98:f8:5e:17:41:6b:09:d2:ad:6b:86:10:6f:0e:a0:df:e0:
         c4:ea:11:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Tr0p8u9x+7VCoL50PTgwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw
ZDc3ODcwHhcNMjYwNjI5MTQwMTIyWhcNMjYwNjMwMTQwMTIyWjAzMTEwLwYDVQQD
Eyg5Yjc1MmNlNjQxMzVhYmVkZWJlYmY4OTEyYTkwNjNkYjQxNDFiOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliHhZJl9OT+vRT2MBAjluY6hjgSE
TMsjVU4HtnSSs3OJqZtEvVIlCOVmViT3IhDqVHsF0I0w5Xk58VXEGPum5urWcuo1
DU1tDuedSzAweK5Ylxo+Kp2BSxmqY/ILn+GST1crjGcbmkF1EX1zCZ7MPUJy60i+
THyaBWIRQO9imN32ruS2ZTXfVbhHxxuk7gPk1EyN0X0/ZpByzb998BFv17POFPq2
c/9ZPVXuuiGc6Jzqsn5PYAWdyhb5xjAB+xdUUtrBDFMKAsuz26P94MaaaiHbm1Me
yJBTJCqaqnzbgFyKP25ZWLaMbZ377kkDq+lO5vknJqQj5N6iQY4e6/SjLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt1LOZBNavt6+v4kSqQY9tBQbm4MB8GA1UdIwQY
MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et
NmY3MDI0YzNhYWQ3LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3
LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg5UXZHv
Jo59lNCxxac6UdYgZJUoXF646bfmkduKTbq1LkERLUO9JOIepwaYxVXY1pphYjXw
3lxxJ1RjphKx9nxkM5mVRMvNeAHr1HpRris652SCmN2z0V5udz9shCq37Chxs5rp
VKmXk5p1ZmbAWMh8CKg4VwLhQ5Wg4dK9neDoITPwuwWizoP4oEzkBwwybRsEtHtw
NFBk2Ag/W66vZiIhYikyt0pyZHg+bY6JGSc00AhlvU51mEvKxC+dVCjr5NxdWf+t
Oh2ZTC+9vgxCibWidxr6HWy03a8RdaedifRrmEKKm+4ii9G8i5j4XhdBawnSrWuG
EG8OoN/gxOoRxQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 20:22:43 2026 by rpki-client