Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          iwuKjpNzuSnmh+4KFhLx+TZGtWCQLuj6Ut8Oo+XJXVE=
Subject key identifier:   41:D4:68:FD:29:12:FF:95:1C:4E:67:09:F9:30:34:6A:ED:B3:61:82
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       019F11530D29738356B6957656D587E3B819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          0732
Signing time:             Mon 29 Jun 2026 03:01:23 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:23 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:23 +0000
Files and hashes:         1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
                          2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: 213L9fClG7WnwjnFfmIHrxX+yK1F/JcKC+VT71dkWbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:53:0d:29:73:83:56:b6:95:76:56:d5:87:e3:b8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Jun 29 03:01:23 2026 GMT
            Not After : Jun 30 03:01:23 2026 GMT
        Subject: CN=41d468fd2912ff951c4e6709f930346aedb36182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:04:2f:99:76:fc:45:e5:03:be:1f:c8:ec:
                    ad:93:9c:cb:13:15:c9:2e:67:0f:59:1e:2d:62:6e:
                    fb:21:31:c9:da:64:db:ee:d0:9a:7f:89:d7:82:db:
                    c0:8a:b3:93:90:8b:0a:b0:6f:fc:58:e3:39:36:30:
                    f6:e9:51:99:63:74:85:05:be:5e:11:53:58:bc:22:
                    5b:bb:bc:53:e6:ee:82:40:f7:e9:ba:f4:da:9e:1c:
                    f2:c2:fd:03:38:eb:03:af:31:18:d5:d0:6a:f2:9a:
                    54:fd:f8:0e:e2:58:78:7d:81:84:dd:5e:24:c9:d6:
                    36:d9:4e:72:ea:ad:2d:8c:fc:b0:27:44:ce:bc:ba:
                    a3:21:10:13:8c:22:a2:d1:0c:13:1e:7c:2b:1f:79:
                    ed:58:dc:da:c1:ac:4f:63:56:0f:31:30:3a:97:cd:
                    8d:b8:2d:74:53:f8:12:03:61:50:7a:c8:e7:62:c8:
                    f4:f1:3a:0c:3f:4e:32:8e:16:b3:a7:43:e1:ad:35:
                    a2:99:ba:1b:fd:55:49:df:89:6e:fb:c5:0a:39:72:
                    de:52:01:5f:03:26:ae:5e:47:80:ca:a1:dd:5f:aa:
                    a9:7f:fe:2f:be:eb:32:a6:4c:d2:01:bf:e8:cc:7a:
                    8c:98:af:d2:ed:92:9a:78:a3:b9:c1:b6:d9:18:70:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D4:68:FD:29:12:FF:95:1C:4E:67:09:F9:30:34:6A:ED:B3:61:82
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:90:13:a7:0a:6b:f2:cf:fc:e0:a3:27:3d:9d:3d:af:49:01:
         d7:61:4c:16:04:46:e0:d6:fb:2e:68:bc:61:2a:c7:3d:fa:3b:
         f2:e5:2a:87:4a:63:ef:3b:0c:73:89:21:15:47:01:d7:ef:41:
         fc:96:f6:30:8c:52:f9:6a:f7:5b:04:99:fb:3d:9c:8d:21:c8:
         f5:f4:b4:c5:d9:48:6d:2a:e7:43:1f:26:88:b7:39:b0:de:7a:
         70:1b:d0:b3:f5:be:2a:86:d3:4b:b5:2a:2f:a0:fd:e8:93:66:
         26:a1:da:9e:d8:c4:58:33:d2:03:06:56:5a:40:32:3a:9a:68:
         94:20:bc:08:63:bd:04:29:be:94:e3:7c:c0:5e:cd:6b:27:c7:
         86:88:9e:2b:60:8b:26:74:b8:81:19:fa:90:46:f3:fd:23:e3:
         98:7f:e9:79:df:e8:14:82:05:19:7b:84:34:0b:49:b4:e2:e9:
         f8:a1:2b:d6:ea:49:68:ec:8d:e8:f8:c3:e7:6f:93:44:22:61:
         00:d2:97:2e:a1:1a:f5:85:c3:c6:db:b3:bf:74:5a:24:d4:fe:
         aa:dd:6c:44:77:cc:94:39:29:87:56:7d:27:6f:76:9b:a1:f1:
         f3:c0:d1:e5:45:92:3b:22:a7:bc:87:50:e0:42:83:4b:bd:58:
         37:b4:72:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RUw0pc4NWtpV2VtWH47gZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjdlZjMzZGQxOTY5MGQ5NDk0MWM5MmZiMzE0Nzk1NTBh
OTE3YjMwHhcNMjYwNjI5MDMwMTIzWhcNMjYwNjMwMDMwMTIzWjAzMTEwLwYDVQQD
Eyg0MWQ0NjhmZDI5MTJmZjk1MWM0ZTY3MDlmOTMwMzQ2YWVkYjM2MTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4YEL5l2/EXlA74fyOytk5zLExXJ
LmcPWR4tYm77ITHJ2mTb7tCaf4nXgtvAirOTkIsKsG/8WOM5NjD26VGZY3SFBb5e
EVNYvCJbu7xT5u6CQPfpuvTanhzywv0DOOsDrzEY1dBq8ppU/fgO4lh4fYGE3V4k
ydY22U5y6q0tjPywJ0TOvLqjIRATjCKi0QwTHnwrH3ntWNzawaxPY1YPMTA6l82N
uC10U/gSA2FQesjnYsj08ToMP04yjhazp0PhrTWimbob/VVJ34lu+8UKOXLeUgFf
AyauXkeAyqHdX6qpf/4vvusypkzSAb/ozHqMmK/S7ZKaeKO5wbbZGHBkKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHUaP0pEv+VHE5nCfkwNGrts2GCMB8GA1UdIwQY
MBaAFCv37zPdGWkNlJQckvsxR5VQqRezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAt
MTdiOTRhYzU4Mzc1LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAtMTdiOTRhYzU4Mzc1
LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5ATpwpr
8s/84KMnPZ09r0kB12FMFgRG4Nb7Lmi8YSrHPfo78uUqh0pj7zsMc4khFUcB1+9B
/Jb2MIxS+Wr3WwSZ+z2cjSHI9fS0xdlIbSrnQx8miLc5sN56cBvQs/W+KobTS7Uq
L6D96JNmJqHantjEWDPSAwZWWkAyOppolCC8CGO9BCm+lON8wF7NayfHhoieK2CL
JnS4gRn6kEbz/SPjmH/ped/oFIIFGXuENAtJtOLp+KEr1upJaOyN6PjD52+TRCJh
ANKXLqEa9YXDxtuzv3RaJNT+qt1sRHfMlDkph1Z9J292m6Hx88DR5UWSOyKnvIdQ
4EKDS71YN7RyrA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:48:09 2026 by rpki-client