Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          nuiannkQ+Oth09HqfAUZtgAr2TRReq4n2me6npRcIjY=
Subject key identifier:   1F:B6:EB:0F:06:78:2A:00:D1:87:32:70:D1:AC:A4:D8:EB:9F:8B:3A
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       019F129C11E6894C93C42AF66887E716AA31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          107F
Signing time:             Mon 29 Jun 2026 09:00:45 +0000
Manifest this update:     Mon 29 Jun 2026 09:00:45 +0000
Manifest next update:     Tue 30 Jun 2026 09:00:45 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: WA/r8ci5kO6OSl4+hT319reXL+LWx5/kaO92aWyeK+s=)
                          2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:11:e6:89:4c:93:c4:2a:f6:68:87:e7:16:aa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Jun 29 09:00:45 2026 GMT
            Not After : Jun 30 09:00:45 2026 GMT
        Subject: CN=1fb6eb0f06782a00d1873270d1aca4d8eb9f8b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:12:15:be:19:aa:4b:37:2d:ec:15:ae:0e:
                    06:f6:02:61:41:6f:36:76:c2:95:75:24:b1:ea:8d:
                    95:0b:b6:6c:0f:69:38:9b:18:b8:f9:83:46:b2:eb:
                    85:47:db:36:aa:e5:d1:25:4d:a3:68:5c:dd:91:06:
                    a3:3a:94:bb:34:c6:37:3a:af:09:54:c6:c3:a2:d5:
                    d7:75:f5:3b:6a:2b:65:bf:e4:c2:6c:c4:f0:5c:77:
                    5f:24:57:8d:35:34:1a:9f:91:75:c4:37:64:cb:6c:
                    e5:e5:9d:70:a0:bf:8f:97:e9:53:9d:b7:90:97:8f:
                    82:1d:4a:de:3e:6b:b5:13:ce:4e:e3:3d:43:e2:87:
                    7a:b5:df:cb:ef:be:59:e1:ad:1b:1e:c0:e4:70:04:
                    23:40:a9:9a:ac:bc:c9:d6:46:20:82:46:be:ff:73:
                    d9:7b:89:41:4d:41:6d:b4:a3:ac:f6:44:ed:a6:8e:
                    ad:f5:1c:90:cb:e7:ef:20:20:c5:1d:3f:ca:f9:3a:
                    74:d9:29:71:36:22:9d:6c:e5:9d:05:bb:be:1f:66:
                    77:db:b3:e4:be:33:ea:cf:e2:75:bf:09:1e:63:e9:
                    13:40:3e:0e:e4:1a:bb:12:4f:83:35:f6:25:ac:a7:
                    4d:54:a2:c5:63:36:8f:03:1d:3a:d3:f1:4f:9d:40:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B6:EB:0F:06:78:2A:00:D1:87:32:70:D1:AC:A4:D8:EB:9F:8B:3A
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:b8:e2:27:f0:7c:fc:25:eb:36:89:1a:a2:89:70:95:1e:
         f6:9f:8f:7f:85:f6:6b:25:8b:ad:c7:01:09:dc:7d:1c:a0:4d:
         7c:61:eb:48:43:27:06:35:ff:21:33:ef:c9:12:de:55:45:92:
         82:06:3a:85:12:d6:1c:bc:b1:e1:b7:85:0d:c5:7a:fc:dd:96:
         95:48:e5:92:1a:97:da:86:66:ea:2d:9f:61:6c:09:a7:db:62:
         b1:6d:99:42:b5:ae:fe:f7:67:ab:e9:18:1d:65:d9:4b:e0:46:
         8b:4a:89:bf:3e:b2:eb:7c:03:ca:b0:6e:97:23:aa:96:26:54:
         59:22:53:5d:b4:c7:1a:20:75:a9:90:03:cc:2f:ae:33:c5:0c:
         fb:40:b0:02:37:07:6c:12:1c:2e:f5:bd:15:98:17:ff:59:f1:
         0e:a2:f6:67:d3:4c:82:d9:39:4f:52:c5:a5:f7:c4:1d:f8:d4:
         10:f3:22:58:9f:64:47:47:ce:f8:d1:45:2c:19:ee:98:70:bd:
         45:47:39:f8:0a:0a:e9:77:0b:6a:d5:1c:5e:cc:77:52:6d:83:
         46:78:a8:4d:ac:66:b0:c8:71:32:57:50:f1:80:4f:41:93:9f:
         04:d2:e2:88:2c:39:60:f9:ba:f8:aa:9b:92:5b:bf:fb:d4:35:
         b2:43:59:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnBHmiUyTxCr2aIfnFqoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4
MmQ0M2EwHhcNMjYwNjI5MDkwMDQ1WhcNMjYwNjMwMDkwMDQ1WjAzMTEwLwYDVQQD
EygxZmI2ZWIwZjA2NzgyYTAwZDE4NzMyNzBkMWFjYTRkOGViOWY4YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RgSFb4Zqks3LewVrg4G9gJhQW82
dsKVdSSx6o2VC7ZsD2k4mxi4+YNGsuuFR9s2quXRJU2jaFzdkQajOpS7NMY3Oq8J
VMbDotXXdfU7aitlv+TCbMTwXHdfJFeNNTQan5F1xDdky2zl5Z1woL+Pl+lTnbeQ
l4+CHUrePmu1E85O4z1D4od6td/L775Z4a0bHsDkcAQjQKmarLzJ1kYggka+/3PZ
e4lBTUFttKOs9kTtpo6t9RyQy+fvICDFHT/K+Tp02SlxNiKdbOWdBbu+H2Z327Pk
vjPqz+J1vwkeY+kTQD4O5Bq7Ek+DNfYlrKdNVKLFYzaPAx060/FPnUCqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+26w8GeCoA0YcycNGspNjrn4s6MB8GA1UdIwQY
MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt
OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4
LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIM+44ifw
fPwl6zaJGqKJcJUe9p+Pf4X2ayWLrccBCdx9HKBNfGHrSEMnBjX/ITPvyRLeVUWS
ggY6hRLWHLyx4beFDcV6/N2WlUjlkhqX2oZm6i2fYWwJp9tisW2ZQrWu/vdnq+kY
HWXZS+BGi0qJvz6y63wDyrBulyOqliZUWSJTXbTHGiB1qZADzC+uM8UM+0CwAjcH
bBIcLvW9FZgX/1nxDqL2Z9NMgtk5T1LFpffEHfjUEPMiWJ9kR0fO+NFFLBnumHC9
RUc5+AoK6XcLatUcXsx3Um2DRnioTaxmsMhxMldQ8YBPQZOfBNLiiCw5YPm6+Kqb
klu/+9Q1skNZlg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:42:39 2026 by rpki-client