Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File:                     DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier:          M2V4kXBWDOV+0IdczgBOlaQ9cUogQvffobma8XFltrM=
Subject key identifier:   B2:9C:16:E3:BC:6B:ED:F2:7C:86:B8:4B:1E:F2:98:FC:06:9B:C3:63
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer:       /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial:       019F11F83B0AE3A17957BB2C90063DAA739B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number:          0808
Signing time:             Mon 29 Jun 2026 06:01:48 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:48 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:48 +0000
Files and hashes:         1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: Re23Mo+Hz0is6Dv+knIhAafdfrLl1GvygSM/unMKwb4=)
                          2: d0uZV4R2ZgcihJhZxxbOzJmT7aA.asa (hash: hiLRbd8efXwY4y/uVjZMI1vjDCS3VzxgU7eclUwARa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f8:3b:0a:e3:a1:79:57:bb:2c:90:06:3d:aa:73:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
        Validity
            Not Before: Jun 29 06:01:48 2026 GMT
            Not After : Jun 30 06:01:48 2026 GMT
        Subject: CN=b29c16e3bc6bedf27c86b84b1ef298fc069bc363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ad:47:9b:40:99:1c:0f:22:79:f6:3e:ed:11:
                    66:46:38:d0:1b:aa:9f:83:07:7c:f1:2f:d1:fa:5b:
                    ae:94:e0:87:93:aa:01:e2:5b:b5:60:09:47:34:43:
                    32:e3:a7:a0:95:a4:20:9b:14:a6:cd:24:cd:f8:03:
                    5f:53:3b:8d:35:af:a4:f4:3e:fb:75:06:26:76:06:
                    30:dd:5f:8f:70:ea:20:39:ad:99:a9:d0:96:54:c9:
                    01:6c:07:1a:5e:0f:c5:05:6c:0c:3c:5e:13:ab:da:
                    2e:cc:59:ae:94:4d:23:eb:4b:db:fd:b5:ab:18:e1:
                    76:00:59:b4:2a:b6:07:4b:c2:ab:ad:01:aa:3e:70:
                    11:cc:70:e8:d9:8f:0a:70:aa:12:4d:d4:ed:6d:dc:
                    30:7e:d2:4f:78:ea:9f:e2:53:58:b3:cd:22:b1:22:
                    c9:59:f7:e4:09:d9:27:4f:57:2b:e5:98:ab:52:5d:
                    47:1a:0d:0b:45:1e:2a:75:b2:23:c4:5a:e1:ff:a5:
                    c6:df:36:b0:fc:74:10:c0:1a:c2:f9:10:a8:d5:b1:
                    f0:79:fe:b9:84:54:d4:84:6d:3d:5f:4a:a9:9d:d9:
                    0c:c9:d2:b6:a3:11:14:31:6f:d8:ea:36:b0:b5:2c:
                    8b:87:eb:aa:18:74:a8:9e:f2:b8:96:46:c5:a0:42:
                    12:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9C:16:E3:BC:6B:ED:F2:7C:86:B8:4B:1E:F2:98:FC:06:9B:C3:63
            X509v3 Authority Key Identifier:
                keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6e:8e:71:65:09:b8:01:38:0a:d5:1a:f7:26:5d:05:df:2b:
         ee:b0:8b:fa:28:48:44:c0:d6:05:cf:c8:65:0a:f9:2d:55:1f:
         32:1d:21:74:fc:a4:7a:d7:d0:c6:52:52:5c:33:38:19:5c:96:
         a5:75:fe:98:08:cc:b9:94:5c:a1:ab:8d:cf:21:49:09:d7:84:
         9b:32:8c:b1:55:bf:d9:06:15:c9:f6:3d:f5:0e:bf:7f:c0:71:
         0b:e0:73:be:42:bd:eb:43:af:00:b4:2d:39:1e:80:50:b1:aa:
         1f:9b:30:03:ce:85:df:9f:94:38:02:44:11:a2:e5:a3:fa:7a:
         27:9e:64:d1:2b:6a:9b:16:06:82:e4:8e:49:41:aa:e8:c3:86:
         c6:9e:8b:28:56:fe:6e:16:36:67:8e:cb:70:05:ca:fa:bd:ef:
         23:91:2a:a3:6f:94:de:79:68:ec:0a:f0:48:39:6b:27:3f:7c:
         27:50:37:b6:6a:7d:5a:5f:30:58:a9:d5:46:0f:12:fc:4c:9f:
         ae:da:7b:11:b8:11:3e:65:76:8c:e7:30:4b:93:a2:92:32:06:
         17:53:2e:2c:39:aa:a5:8c:02:1b:49:6a:6b:d8:7c:85:00:19:
         c5:14:d0:4a:4a:8a:89:f0:ae:cd:f7:24:69:3b:1f:4f:31:51:
         7c:67:96:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R+DsK46F5V7sskAY9qnObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmRjNjZjYzM4NDM2YjZhYzMxZTk3ZTcxMmQyMTk0MDdj
ODNjZjQwHhcNMjYwNjI5MDYwMTQ4WhcNMjYwNjMwMDYwMTQ4WjAzMTEwLwYDVQQD
EyhiMjljMTZlM2JjNmJlZGYyN2M4NmI4NGIxZWYyOThmYzA2OWJjMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q1Hm0CZHA8iefY+7RFmRjjQG6qf
gwd88S/R+luulOCHk6oB4lu1YAlHNEMy46eglaQgmxSmzSTN+ANfUzuNNa+k9D77
dQYmdgYw3V+PcOogOa2ZqdCWVMkBbAcaXg/FBWwMPF4Tq9ouzFmulE0j60vb/bWr
GOF2AFm0KrYHS8KrrQGqPnARzHDo2Y8KcKoSTdTtbdwwftJPeOqf4lNYs80isSLJ
WffkCdknT1cr5ZirUl1HGg0LRR4qdbIjxFrh/6XG3zaw/HQQwBrC+RCo1bHwef65
hFTUhG09X0qpndkMydK2oxEUMW/Y6jawtSyLh+uqGHSonvK4lkbFoEISZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKcFuO8a+3yfIa4Sx7ymPwGm8NjMB8GA1UdIwQY
MBaAFA1txmzDhDa2rDHpfnEtIZQHyDz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEt
OWRkNTIzMTNhZTdjLzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEtOWRkNTIzMTNhZTdj
LzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXG6OcWUJ
uAE4CtUa9yZdBd8r7rCL+ihIRMDWBc/IZQr5LVUfMh0hdPyketfQxlJSXDM4GVyW
pXX+mAjMuZRcoauNzyFJCdeEmzKMsVW/2QYVyfY99Q6/f8BxC+BzvkK960OvALQt
OR6AULGqH5swA86F35+UOAJEEaLlo/p6J55k0StqmxYGguSOSUGq6MOGxp6LKFb+
bhY2Z47LcAXK+r3vI5Eqo2+U3nlo7ArwSDlrJz98J1A3tmp9Wl8wWKnVRg8S/Eyf
rtp7EbgRPmV2jOcwS5OikjIGF1MuLDmqpYwCG0lqa9h8hQAZxRTQSkqKifCuzfck
aTsfTzFRfGeW+A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:32 2026 by rpki-client