Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          Mtq8jDFp5HhcTeGEySeO1/P7Ltj0s5QMdZiebh5s5J0=
Subject key identifier:   B3:BA:F9:14:53:B5:1B:F8:8C:1D:0A:7A:7C:42:DB:FD:AE:63:B9:F2
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       019EE5C40CDD6E977B68105E61BAF6A9D2FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          1991
Signing time:             Sat 20 Jun 2026 16:01:31 +0000
Manifest this update:     Sat 20 Jun 2026 16:01:31 +0000
Manifest next update:     Sun 21 Jun 2026 16:01:31 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: N1+BFKkKTi2hieQWwxswqNFBBlGoHeF66V/Uh0J6mGQ=)
                          2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
                          3: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
                          4: My2S5v6l75VknZ7EL2SiBdNBLt4.roa (hash: wEWt/qGUMsqIgdXHGGUBkhiVR/ctPqLfFTDFv5pXXM0=)
                          5: Q185qBCTAslf97Rog3SUyG95EBo.roa (hash: +jTEwCGDvqQHKcWHrPwBJB6gQVTArNQuwOaaAn3R7Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e5:c4:0c:dd:6e:97:7b:68:10:5e:61:ba:f6:a9:d2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Jun 20 16:01:31 2026 GMT
            Not After : Jun 21 16:01:31 2026 GMT
        Subject: CN=b3baf91453b51bf88c1d0a7a7c42dbfdae63b9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:c3:99:e5:71:7b:e0:07:8d:2f:73:0f:cd:
                    03:34:cf:ed:eb:5b:69:5f:bc:a8:ce:b2:8a:33:bf:
                    14:7c:bd:bf:aa:73:d9:7f:80:17:68:89:2b:26:84:
                    ed:f5:61:00:14:7d:56:7e:2b:7c:fc:13:4b:e5:f6:
                    fb:bf:ef:b7:a3:a7:c0:ab:31:78:ae:ee:eb:4d:a9:
                    f5:d4:d5:4c:75:52:f5:ee:c2:07:2a:27:e8:95:ce:
                    a5:60:c3:d6:8c:b1:ab:a5:73:fb:91:37:9c:a9:7c:
                    81:d7:ae:b8:33:5b:85:09:d1:f8:23:a2:cc:2c:22:
                    e2:60:fe:bb:00:99:83:18:87:37:a6:a1:99:9a:9f:
                    ae:b8:64:be:4e:98:ef:1c:99:d3:bc:94:01:da:e0:
                    a8:1e:4e:30:79:0d:37:0c:07:4f:33:49:75:a7:19:
                    54:34:b5:6f:af:a0:f5:05:0c:ee:94:96:99:e6:d0:
                    8d:f0:51:03:ef:48:31:76:ca:f3:7f:86:1c:a3:3e:
                    d5:e1:02:15:93:4c:38:07:89:af:f1:2c:7b:1a:3c:
                    fa:e6:3f:88:fd:f0:ae:6b:c0:e5:62:0a:51:85:2c:
                    5f:a7:71:84:e3:2e:2d:37:30:73:93:8b:4f:8b:62:
                    07:50:34:87:56:d1:8d:98:eb:ff:c7:4a:64:d0:53:
                    3f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BA:F9:14:53:B5:1B:F8:8C:1D:0A:7A:7C:42:DB:FD:AE:63:B9:F2
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b6:90:02:0a:e2:cf:b3:85:e5:27:b1:96:93:eb:8b:df:48:
         b5:39:01:a9:d4:d5:43:9a:48:d2:80:ac:74:7d:84:52:3c:32:
         20:ad:31:3b:7e:dc:14:62:0b:01:38:c6:b9:f5:b5:47:b0:da:
         fe:40:4d:be:91:ea:83:df:30:12:0b:d0:44:ba:e6:90:65:dd:
         28:c5:80:2f:e6:59:34:3d:ea:2d:e2:cf:49:2c:69:6e:0d:84:
         26:ab:23:90:27:39:2a:c8:95:5c:91:fe:48:df:31:81:39:d6:
         cd:90:18:10:18:87:c2:84:18:07:5d:e4:8c:05:03:c8:50:60:
         91:05:39:e9:7c:d5:6d:e6:bb:51:f0:c9:99:93:8f:12:3e:01:
         74:73:b6:c4:9c:6a:c1:33:87:09:f0:20:c2:06:a6:f8:59:4e:
         f6:43:34:55:e4:25:ad:c5:88:a2:03:b6:97:49:2b:cf:7d:e1:
         6a:a4:18:22:5c:29:bd:e6:5b:d1:f2:ef:c6:93:f5:ce:9f:24:
         63:57:68:1d:27:34:67:e7:2b:e9:fe:ea:dc:ea:9b:b3:f2:db:
         e8:77:6c:3b:48:ce:53:52:9e:42:ce:7a:5d:e1:9f:78:6c:bc:
         b8:74:fe:3d:5d:1f:40:81:73:79:3d:b2:f4:fd:d0:6c:9c:ac:
         5b:8f:e3:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7lxAzdbpd7aBBeYbr2qdL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1
YWI3Y2YwHhcNMjYwNjIwMTYwMTMxWhcNMjYwNjIxMTYwMTMxWjAzMTEwLwYDVQQD
EyhiM2JhZjkxNDUzYjUxYmY4OGMxZDBhN2E3YzQyZGJmZGFlNjNiOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKfDmeVxe+AHjS9zD80DNM/t61tp
X7yozrKKM78UfL2/qnPZf4AXaIkrJoTt9WEAFH1Wfit8/BNL5fb7v++3o6fAqzF4
ru7rTan11NVMdVL17sIHKifolc6lYMPWjLGrpXP7kTecqXyB1664M1uFCdH4I6LM
LCLiYP67AJmDGIc3pqGZmp+uuGS+TpjvHJnTvJQB2uCoHk4weQ03DAdPM0l1pxlU
NLVvr6D1BQzulJaZ5tCN8FED70gxdsrzf4Ycoz7V4QIVk0w4B4mv8Sx7Gjz65j+I
/fCua8DlYgpRhSxfp3GE4y4tNzBzk4tPi2IHUDSHVtGNmOv/x0pk0FM/xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLO6+RRTtRv4jB0KenxC2/2uY7nyMB8GA1UdIwQY
MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt
MTEwYzg3OGRjZDI5LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5
LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7aQAgri
z7OF5SexlpPri99ItTkBqdTVQ5pI0oCsdH2EUjwyIK0xO37cFGILATjGufW1R7Da
/kBNvpHqg98wEgvQRLrmkGXdKMWAL+ZZND3qLeLPSSxpbg2EJqsjkCc5KsiVXJH+
SN8xgTnWzZAYEBiHwoQYB13kjAUDyFBgkQU56XzVbea7UfDJmZOPEj4BdHO2xJxq
wTOHCfAgwgam+FlO9kM0VeQlrcWIogO2l0krz33haqQYIlwpveZb0fLvxpP1zp8k
Y1doHSc0Z+cr6f7q3Oqbs/Lb6HdsO0jOU1KeQs56XeGfeGy8uHT+PV0fQIFzeT2y
9P3QbJysW4/jQQ==
-----END CERTIFICATE-----
Generated at Sun Jun 21 02:03:32 2026 by rpki-client