Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
File:                     pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft (raw, json)
Hash identifier:          ANeGEwwPrpMywG0qePJ+gsrV0wkg9ofPP5NMvpMuxMg=
Subject key identifier:   04:EF:CE:14:6E:34:25:B2:F3:75:85:79:93:7F:89:C2:15:A7:07:2B
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Certificate issuer:       /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial:       019F111C9306D50DC13074EDE00A0CD7EF35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
Manifest number:          0DE6
Signing time:             Mon 29 Jun 2026 02:01:53 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:53 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:53 +0000
Files and hashes:         1: NncLDck5QCsXoP-zdGMzAoehMpc.asa (hash: Ct9G108vU2K9LuYOAFXT37wdYPmx9qzQzjeMUoqKDE8=)
                          2: jp2UFYGcsehDO-4gfejiaCOzrJw.asa (hash: fxeg6hVvgjfs2m8eyuQiBn+zKpG0DqwOznKeAA9KOJE=)
                          3: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl (hash: TYmx9TDcuqrti9qMeooGu9NJMWKmUph76PybJRpRmTA=)
                          4: xSbXTvUREzkzc7-l2JL6Gfg8LbE.roa (hash: /FjGi3zucL1NzNe41iFvx0RHmpavP7RfeWxzQfA6e5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:93:06:d5:0d:c1:30:74:ed:e0:0a:0c:d7:ef:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
        Validity
            Not Before: Jun 29 02:01:53 2026 GMT
            Not After : Jun 30 02:01:53 2026 GMT
        Subject: CN=04efce146e3425b2f3758579937f89c215a7072b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:e9:6b:90:38:89:5c:a2:a2:3e:66:a9:d1:
                    0b:ff:ac:6f:88:37:5e:a2:d6:37:41:31:9c:ea:06:
                    cf:13:3e:fc:db:93:46:2c:c1:06:6a:91:08:cb:6d:
                    87:33:d8:6b:e8:df:d9:2f:43:83:1e:90:f0:b0:fd:
                    3c:28:7d:0c:72:f8:c7:d4:53:94:28:85:8a:43:0b:
                    a5:eb:93:ce:a6:b2:38:2a:d6:84:c0:46:19:34:2d:
                    af:c7:8e:7e:b3:0f:6a:7c:1b:b1:5f:b3:30:0d:4a:
                    17:3a:5e:e6:3f:d8:11:06:90:17:de:c6:16:9a:29:
                    cd:f0:e6:5c:dd:7f:3c:33:52:68:88:4f:89:d5:60:
                    4c:3f:69:73:96:f2:d0:3c:8a:13:42:9f:5b:9a:af:
                    96:eb:db:b0:b5:c8:47:e1:da:24:a5:9e:09:22:9f:
                    01:9a:5d:90:88:2c:b8:f8:77:00:cf:d1:7d:fd:02:
                    68:cc:6f:aa:a7:d2:f3:1a:8b:aa:44:8b:db:4c:41:
                    e1:97:e7:62:7f:a4:a1:ef:ea:29:4c:c2:b3:9b:eb:
                    f0:4f:42:c1:e3:37:96:93:ce:51:af:78:05:81:c7:
                    52:42:71:31:89:20:b4:ee:b4:a5:91:00:a3:33:5c:
                    ce:d2:fe:04:b0:09:1b:0e:39:50:76:01:35:3e:59:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EF:CE:14:6E:34:25:B2:F3:75:85:79:93:7F:89:C2:15:A7:07:2B
            X509v3 Authority Key Identifier:
                keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:41:8b:30:a2:6a:9a:05:97:8c:06:22:e9:3d:d8:49:f9:ac:
         5f:c9:c5:c2:60:e7:61:bb:37:e4:51:39:fd:11:02:71:9a:c0:
         bf:1d:4f:84:7d:89:b8:00:f9:8c:31:0e:08:00:be:23:e2:cb:
         d9:46:c5:10:fb:d4:f3:8f:42:9c:8a:50:10:90:ff:56:c1:bc:
         c4:94:af:54:64:42:f9:6e:85:07:c7:7c:e2:5c:2c:72:d0:c7:
         85:a8:5a:1f:a3:3f:7c:55:e0:03:b1:c3:41:c6:09:43:80:54:
         97:cd:e6:38:65:f0:68:86:a0:ae:64:11:f3:d6:c4:7b:ce:da:
         ad:a7:a4:a4:81:76:3b:e9:df:36:3a:ae:23:9b:9e:f9:af:61:
         f0:19:bf:86:0f:94:3b:4b:62:b2:c1:19:ae:3a:5c:a0:16:33:
         19:95:b0:a5:aa:9e:e6:e2:65:f8:71:d2:a7:f5:bc:85:fb:e6:
         3b:4f:3c:d9:a1:8f:ed:8c:71:32:1a:4b:f9:2e:38:fa:c1:5e:
         12:03:04:69:0d:92:d1:72:46:ae:43:f4:61:67:90:94:3f:e4:
         95:0b:1a:a7:9c:53:e3:26:30:63:39:85:e9:08:37:3f:51:0c:
         d6:15:c3:96:bf:1c:f7:fc:e5:0a:81:6b:17:8e:c9:1b:de:fe:
         49:c7:10:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RHJMG1Q3BMHTt4AoM1+81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OGQ0OTgzYzljNjNiZDhhMTU4MDAzYzU4NWY0M2Q5OTRj
MTJkYzIwHhcNMjYwNjI5MDIwMTUzWhcNMjYwNjMwMDIwMTUzWjAzMTEwLwYDVQQD
EygwNGVmY2UxNDZlMzQyNWIyZjM3NTg1Nzk5MzdmODljMjE1YTcwNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEPpa5A4iVyioj5mqdEL/6xviDde
otY3QTGc6gbPEz7825NGLMEGapEIy22HM9hr6N/ZL0ODHpDwsP08KH0McvjH1FOU
KIWKQwul65POprI4KtaEwEYZNC2vx45+sw9qfBuxX7MwDUoXOl7mP9gRBpAX3sYW
minN8OZc3X88M1JoiE+J1WBMP2lzlvLQPIoTQp9bmq+W69uwtchH4dokpZ4JIp8B
ml2QiCy4+HcAz9F9/QJozG+qp9LzGouqRIvbTEHhl+dif6Sh7+opTMKzm+vwT0LB
4zeWk85Rr3gFgcdSQnExiSC07rSlkQCjM1zO0v4EsAkbDjlQdgE1PlleXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATvzhRuNCWy83WFeZN/icIVpwcrMB8GA1UdIwQY
MBaAFKWNSYPJxjvYoVgAPFhfQ9mUwS3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYt
Y2UzMGQ0YTM5OGUwLzEvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYtY2UzMGQ0YTM5OGUw
LzEvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkGLMKJq
mgWXjAYi6T3YSfmsX8nFwmDnYbs35FE5/RECcZrAvx1PhH2JuAD5jDEOCAC+I+LL
2UbFEPvU849CnIpQEJD/VsG8xJSvVGRC+W6FB8d84lwsctDHhahaH6M/fFXgA7HD
QcYJQ4BUl83mOGXwaIagrmQR89bEe87araekpIF2O+nfNjquI5ue+a9h8Bm/hg+U
O0tissEZrjpcoBYzGZWwpaqe5uJl+HHSp/W8hfvmO0882aGP7YxxMhpL+S44+sFe
EgMEaQ2S0XJGrkP0YWeQlD/klQsap5xT4yYwYzmF6Qg3P1EM1hXDlr8c9/zlCoFr
F47JG97+SccQ+w==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:17 2026 by rpki-client