Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File:                     6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier:          OcW/BlWEIu+t8IWa4SRd7hRXsn/CeXFEcDPmgPbzSmA=
Subject key identifier:   5F:A4:03:8D:6E:B8:65:28:82:17:F3:64:49:84:26:B9:4B:38:64:1C
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer:       /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial:       019F190C73EB1DFD24F5BE248B5734C4390C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number:          0B02
Signing time:             Tue 30 Jun 2026 15:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:14 +0000
Files and hashes:         1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: LrLMt8sjbm3eBB2FGg9SSLSIN7MMgs1g4r6k+b5NTKQ=)
                          2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:73:eb:1d:fd:24:f5:be:24:8b:57:34:c4:39:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
        Validity
            Not Before: Jun 30 15:01:14 2026 GMT
            Not After : Jul  1 15:01:14 2026 GMT
        Subject: CN=5fa4038d6eb865288217f364498426b94b38641c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:cd:be:a8:e5:79:f6:2b:6d:12:c6:fc:ac:
                    6b:7e:47:a7:76:91:dd:2c:ea:69:c9:a1:3d:e9:f5:
                    7b:13:d9:86:a7:1d:2f:c8:74:28:33:e7:14:cf:91:
                    91:a7:14:df:68:8c:a2:ff:f9:49:16:c3:c5:4c:14:
                    c2:d7:c8:9c:d7:fe:6a:83:81:24:e9:c7:91:08:1e:
                    11:43:e1:1d:a0:40:2e:88:bc:fb:a5:3a:fb:d4:d2:
                    97:c3:07:bf:a7:12:58:fe:a9:6c:51:5e:9d:57:b0:
                    33:48:cf:89:58:2a:a5:e5:df:e3:f1:17:ab:76:90:
                    e0:a2:56:aa:7d:52:9d:3a:5c:7b:21:ee:3d:1c:57:
                    f0:5e:90:79:a4:55:b1:f2:99:93:a4:63:90:ee:c2:
                    d5:40:88:14:2c:64:fd:8d:04:b0:30:c3:92:e6:c8:
                    39:16:3c:48:35:d4:50:72:69:cb:bd:18:22:6e:80:
                    d2:b4:3e:4f:b6:f2:0d:ce:78:16:55:0e:ad:0d:2a:
                    07:4c:31:37:d8:d7:41:12:18:93:18:11:d6:25:56:
                    2d:d7:0c:a6:98:92:27:d6:31:03:32:58:7f:ce:2a:
                    e6:ae:2d:10:cd:5e:6b:65:95:1d:2d:11:56:a4:e1:
                    1b:d5:f0:c2:28:9c:bc:e7:ef:04:96:bb:d6:6c:64:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A4:03:8D:6E:B8:65:28:82:17:F3:64:49:84:26:B9:4B:38:64:1C
            X509v3 Authority Key Identifier:
                keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:62:00:d6:76:62:e2:f9:fa:61:34:e9:73:b3:14:83:8b:5c:
         13:f4:05:94:eb:d5:4d:fa:4b:61:96:20:eb:40:e5:90:be:e7:
         fc:23:19:8a:22:d4:8a:f1:ce:19:11:95:73:e1:25:de:b4:54:
         b6:36:b1:05:00:fb:fa:69:da:b8:fb:6f:46:19:94:03:5d:a4:
         bf:74:08:35:57:e0:16:37:eb:aa:9f:71:25:3b:9d:e2:d8:73:
         e0:af:ff:98:e4:8a:dd:7e:dd:22:28:2c:80:75:ca:a5:61:dd:
         d4:7e:01:b3:c9:66:25:c2:41:59:77:12:a0:7b:e0:2c:5c:40:
         34:05:0e:e7:0e:f0:65:77:33:eb:23:23:30:81:e5:13:71:72:
         80:00:56:cb:89:1a:3c:21:c2:f1:07:06:de:db:e9:10:e7:9b:
         3e:2c:74:16:0e:e8:04:67:d4:df:f1:aa:5b:2a:65:01:69:de:
         30:cc:23:fa:21:08:4e:d1:d2:cc:c3:47:b0:be:07:cd:9f:da:
         d0:f5:07:60:b6:bf:e9:f9:9c:1e:9a:17:aa:d5:36:f9:d7:11:
         ce:64:3b:0f:d8:a0:89:1f:b6:5f:e7:27:68:9a:9c:1c:d3:c3:
         09:10:94:46:c0:90:ac:79:b5:fb:92:d1:2f:31:ba:85:96:22:
         aa:09:be:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDHPrHf0k9b4ki1c0xDkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NjRiYzVkMGFkOWVhMDVlMjhjODJlNzY4ZmYxNGQxZDc0
ZDJmZWIwHhcNMjYwNjMwMTUwMTE0WhcNMjYwNzAxMTUwMTE0WjAzMTEwLwYDVQQD
Eyg1ZmE0MDM4ZDZlYjg2NTI4ODIxN2YzNjQ0OTg0MjZiOTRiMzg2NDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy43NvqjlefYrbRLG/KxrfkendpHd
LOppyaE96fV7E9mGpx0vyHQoM+cUz5GRpxTfaIyi//lJFsPFTBTC18ic1/5qg4Ek
6ceRCB4RQ+EdoEAuiLz7pTr71NKXwwe/pxJY/qlsUV6dV7AzSM+JWCql5d/j8Rer
dpDgolaqfVKdOlx7Ie49HFfwXpB5pFWx8pmTpGOQ7sLVQIgULGT9jQSwMMOS5sg5
FjxINdRQcmnLvRgiboDStD5PtvINzngWVQ6tDSoHTDE32NdBEhiTGBHWJVYt1wym
mJIn1jEDMlh/zirmri0QzV5rZZUdLRFWpOEb1fDCKJy85+8ElrvWbGRBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+kA41uuGUoghfzZEmEJrlLOGQcMB8GA1UdIwQY
MBaAFOlkvF0K2eoF4oyC52j/FNHXTS/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMt
NTg5OWE3NGJlMmFlLzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMtNTg5OWE3NGJlMmFl
LzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWIA1nZi
4vn6YTTpc7MUg4tcE/QFlOvVTfpLYZYg60DlkL7n/CMZiiLUivHOGRGVc+El3rRU
tjaxBQD7+mnauPtvRhmUA12kv3QINVfgFjfrqp9xJTud4thz4K//mOSK3X7dIigs
gHXKpWHd1H4Bs8lmJcJBWXcSoHvgLFxANAUO5w7wZXcz6yMjMIHlE3FygABWy4ka
PCHC8QcG3tvpEOebPix0Fg7oBGfU3/GqWyplAWneMMwj+iEITtHSzMNHsL4HzZ/a
0PUHYLa/6fmcHpoXqtU2+dcRzmQ7D9igiR+2X+cnaJqcHNPDCRCURsCQrHm1+5LR
LzG6hZYiqgm+Ng==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:57 2026 by rpki-client