Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File:                     r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier:          yPj8W3FKhFlmTqHYYWa/DGiXBu3SyAIbgg3zFFqObDE=
Subject key identifier:   61:05:2E:D1:52:3B:1B:2C:32:41:B7:54:7A:38:A5:69:C5:79:7F:88
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer:       /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial:       019D39E60422DD00364AC27876FDD9DD9556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number:          13ED
Signing time:             Sun 29 Mar 2026 14:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 14:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 14:01:08 +0000
Files and hashes:         1: 8VoV6D_eegqIBHZanaVQhQ_BcA0.roa (hash: BR+EO4ahbvoTRogEluDEGsMqIHtTB8hdFQ6Pgx2wNhw=)
                          2: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: E3b1wNh/wByXMfOqhlw7BmenkjVMd7fLXlWZpSuy6ws=)
                          3: sG9W1Xy_sx6TaJNJJ2tAauKaFb4.roa (hash: 2TT3GLZDtqOpSaUq6isrPNnlWIbuaybJDZfYdXkAT/w=)
                          4: tWqZy2tTqFqt9D4rCvazUAWDWPA.roa (hash: Ccuo+A6uM9l1WuitzfylA9prnTUAjYnop5Ot1I+Ef6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e6:04:22:dd:00:36:4a:c2:78:76:fd:d9:dd:95:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
        Validity
            Not Before: Mar 29 14:01:08 2026 GMT
            Not After : Mar 30 14:01:08 2026 GMT
        Subject: CN=61052ed1523b1b2c3241b7547a38a569c5797f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:23:42:15:7d:b9:30:16:e4:96:66:8e:9b:
                    69:8e:e9:89:5e:10:1e:de:0b:83:cb:79:42:b4:d8:
                    0e:c9:2e:6a:04:7a:cc:ea:38:1f:0b:2d:75:41:3c:
                    2e:66:a9:0c:2d:e9:79:fa:70:2d:3c:07:75:0b:27:
                    7e:8d:6b:4a:a2:96:37:e5:06:45:29:fc:21:49:eb:
                    b3:32:89:75:13:03:f1:3f:08:5e:58:74:11:75:cd:
                    d5:41:7c:7e:87:fb:45:da:fa:99:67:61:c7:90:ef:
                    c5:02:4e:74:0f:5e:c5:98:58:1c:cf:63:0f:6a:b7:
                    44:7d:61:d4:92:8a:2c:cf:29:9d:dd:47:d5:d7:70:
                    fb:bd:7a:7b:e2:b3:2a:df:bd:49:3c:fd:d0:7a:3c:
                    71:e4:bc:72:99:da:ab:26:0a:c7:77:d7:15:31:19:
                    5d:9a:b1:46:fa:78:0b:10:68:f5:29:b9:61:e9:a6:
                    ed:97:1d:1d:41:12:a4:7e:95:ba:14:e6:32:73:27:
                    8c:03:87:2a:1e:af:d1:d1:64:6f:e9:69:f1:63:46:
                    3b:49:3f:cf:83:8a:cc:aa:6b:cd:76:5e:21:1d:7c:
                    29:1c:80:08:0f:91:5c:83:06:98:01:b9:22:e3:52:
                    94:e2:99:b0:10:25:10:0b:22:97:aa:e5:18:71:87:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:05:2E:D1:52:3B:1B:2C:32:41:B7:54:7A:38:A5:69:C5:79:7F:88
            X509v3 Authority Key Identifier:
                keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:65:91:96:6c:c8:e6:54:8f:25:43:fd:e9:3e:3d:7b:98:77:
         01:64:a2:cd:08:7b:91:f1:c3:d3:a0:08:04:42:48:6a:a6:b9:
         c6:64:ab:65:d0:76:02:0b:f8:33:8a:3a:73:03:24:63:1b:5f:
         e7:51:26:35:b3:28:aa:34:b2:b8:6b:44:79:7c:dd:3c:5a:51:
         d3:e3:53:38:05:99:ae:8a:6d:eb:74:86:3a:ed:89:69:98:ef:
         99:e2:78:ec:c6:bf:eb:f5:23:4b:9a:71:38:55:44:50:c7:f2:
         52:d0:58:3d:a2:0e:4a:97:d4:0a:d5:09:53:a0:1d:b7:79:f1:
         d5:89:b4:15:f2:7e:63:d8:4c:51:ac:05:2f:5a:b6:d6:37:28:
         b0:bb:8a:56:76:2e:02:99:3a:7c:39:4d:6c:82:4a:b7:a9:d3:
         d6:06:ee:9f:fc:13:1c:58:4f:23:c8:74:88:95:2c:dd:99:c9:
         97:07:a3:a7:e8:8b:48:ee:f0:67:65:dc:c5:df:10:86:7d:bc:
         c6:b0:44:74:d9:53:6e:fc:19:ab:55:13:61:26:34:6f:d0:a9:
         cd:15:17:a0:d3:8e:d4:a9:b1:93:51:36:58:8e:48:06:17:28:
         5e:12:84:59:9e:5f:89:ad:05:4c:37:63:16:c0:9b:95:b7:e9:
         c5:4d:d9:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055gQi3QA2SsJ4dv3Z3ZVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTkyOWJlNzM0OTFhY2Q5OWQ1OTAzNzJhNTJiODE1ZmEx
ZjIzZjUwHhcNMjYwMzI5MTQwMTA4WhcNMjYwMzMwMTQwMTA4WjAzMTEwLwYDVQQD
Eyg2MTA1MmVkMTUyM2IxYjJjMzI0MWI3NTQ3YTM4YTU2OWM1Nzk3Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3sjQhV9uTAW5JZmjptpjumJXhAe
3guDy3lCtNgOyS5qBHrM6jgfCy11QTwuZqkMLel5+nAtPAd1Cyd+jWtKopY35QZF
KfwhSeuzMol1EwPxPwheWHQRdc3VQXx+h/tF2vqZZ2HHkO/FAk50D17FmFgcz2MP
ardEfWHUkooszymd3UfV13D7vXp74rMq371JPP3Qejxx5LxymdqrJgrHd9cVMRld
mrFG+ngLEGj1Kblh6abtlx0dQRKkfpW6FOYycyeMA4cqHq/R0WRv6WnxY0Y7ST/P
g4rMqmvNdl4hHXwpHIAID5FcgwaYAbki41KU4pmwECUQCyKXquUYcYe/nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEFLtFSOxssMkG3VHo4pWnFeX+IMB8GA1UdIwQY
MBaAFK+pKb5zSRrNmdWQNypSuBX6HyP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTIt
M2I2ZjFiZGY0MTJhLzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTItM2I2ZjFiZGY0MTJh
LzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWWRlmzI
5lSPJUP96T49e5h3AWSizQh7kfHD06AIBEJIaqa5xmSrZdB2Agv4M4o6cwMkYxtf
51EmNbMoqjSyuGtEeXzdPFpR0+NTOAWZropt63SGOu2JaZjvmeJ47Ma/6/UjS5px
OFVEUMfyUtBYPaIOSpfUCtUJU6Adt3nx1Ym0FfJ+Y9hMUawFL1q21jcosLuKVnYu
Apk6fDlNbIJKt6nT1gbun/wTHFhPI8h0iJUs3ZnJlwejp+iLSO7wZ2Xcxd8Qhn28
xrBEdNlTbvwZq1UTYSY0b9CpzRUXoNOO1Kmxk1E2WI5IBhcoXhKEWZ5fia0FTDdj
FsCblbfpxU3ZTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:32 2026 by rpki-client