Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
File:                     g6PKzqjF0dmJsH6m4JdKANoDako.mft (raw, json)
Hash identifier:          zfzN1++KORbib4ji+aoy1T27GZ0/jr7WNO2xCQoHCDs=
Subject key identifier:   81:1E:8B:EA:10:C3:98:C3:5B:BC:93:E5:CF:DB:30:B2:F1:BB:A8:5F
Authority key identifier: 83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Certificate issuer:       /CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Certificate serial:       019F11C0759B2E873B189AE4E7802641FC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
Manifest number:          0239
Signing time:             Mon 29 Jun 2026 05:00:53 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:53 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:53 +0000
Files and hashes:         1: eTK6_P37nQZzruBHzeHGcO4T3zY.asa (hash: tOEzSunzuWj37U3B09PX4r97OTZ1nR4yyZSVGcYBXmU=)
                          2: g6PKzqjF0dmJsH6m4JdKANoDako.crl (hash: QJcprm13SPzGcR1panZqDs9XcBeKbcqvkRkm8di0n3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:75:9b:2e:87:3b:18:9a:e4:e7:80:26:41:fc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
        Validity
            Not Before: Jun 29 05:00:53 2026 GMT
            Not After : Jun 30 05:00:53 2026 GMT
        Subject: CN=811e8bea10c398c35bbc93e5cfdb30b2f1bba85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:9d:89:b5:50:53:32:39:75:e2:8b:1f:7b:
                    47:87:c6:d5:1b:de:81:5d:4e:bf:b1:ea:31:03:43:
                    c2:4b:a8:ba:9c:ad:a5:d4:d0:57:9c:67:93:dc:e8:
                    b6:48:c2:ff:6a:7d:3c:d8:e8:5f:dd:61:2f:90:5a:
                    2f:c9:e7:95:4c:9d:37:aa:e6:a6:39:eb:c1:b6:81:
                    8f:88:b1:10:b2:87:da:b8:d5:c9:cc:9f:f6:b5:b3:
                    c4:92:24:25:70:30:7c:ba:6a:ef:43:a2:bc:41:68:
                    5c:d3:02:68:bc:4e:7d:40:97:c2:b5:2f:38:5d:4c:
                    0f:1e:5c:06:7f:2c:4d:a0:a7:80:52:c3:ed:26:8e:
                    09:eb:4c:35:3a:24:10:71:62:ae:e2:af:f1:62:a0:
                    df:7a:c4:07:22:f9:7b:3f:f7:cc:18:15:a6:8f:40:
                    cb:48:c6:c9:57:c2:f7:f9:be:4e:12:6b:c8:d3:5d:
                    76:10:6a:ae:ff:58:25:f3:c8:7b:cc:e6:f0:3a:ab:
                    1e:e1:ac:46:34:f8:49:ce:0d:e8:35:43:d5:99:a5:
                    47:43:ac:3e:f8:33:c7:b5:fa:dc:b8:6b:5b:cd:3f:
                    89:74:6f:92:ff:1f:e5:88:cd:c1:7e:51:e4:0f:b5:
                    0c:cf:f6:85:b9:2e:2f:5f:e6:50:26:d6:ed:d7:5b:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1E:8B:EA:10:C3:98:C3:5B:BC:93:E5:CF:DB:30:B2:F1:BB:A8:5F
            X509v3 Authority Key Identifier:
                keyid:83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:57:5a:52:f1:35:d0:05:36:e6:7b:ae:45:31:2d:0f:10:
         6f:23:a2:e2:82:e1:06:c1:e1:7b:a1:f3:fb:74:3e:18:42:bb:
         71:90:be:3b:bf:ec:55:ea:d9:ad:2c:39:18:24:f1:9e:01:19:
         92:9d:17:2a:88:fa:28:5d:00:fa:ab:28:c5:68:f6:15:d4:f7:
         87:03:cb:3d:62:14:11:93:28:ed:47:b7:73:cc:33:d3:67:b0:
         c1:d8:64:25:d7:ca:55:22:aa:6d:6c:4d:8c:6f:cf:af:35:92:
         6c:b5:5a:3f:59:02:43:fc:78:5e:b2:b9:27:54:11:4f:d7:ea:
         aa:24:c6:46:5a:e6:e1:2a:77:4a:27:c0:6b:4e:aa:5d:46:8c:
         5c:f9:3f:b9:e9:32:c9:8a:41:dd:2b:e7:db:f7:87:0f:88:8b:
         da:80:67:a7:e6:df:c4:23:54:e0:e4:d3:b1:64:fb:2d:b1:0c:
         f5:56:73:52:8f:bc:4d:de:1f:d1:db:1c:99:3e:9f:8b:bc:47:
         bd:14:63:02:2d:a0:03:b6:58:8e:b7:2f:33:11:34:90:60:6a:
         fb:6d:be:7f:43:36:e7:e0:bb:65:c2:d1:5c:5f:22:64:7e:65:
         9d:d9:95:74:78:90:8b:3d:b3:62:08:fc:4a:84:76:f9:ec:24:
         fe:1f:43:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwHWbLoc7GJrk54AmQfxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTNjYWNlYThjNWQxZDk4OWIwN2VhNmUwOTc0YTAwZGEw
MzZhNGEwHhcNMjYwNjI5MDUwMDUzWhcNMjYwNjMwMDUwMDUzWjAzMTEwLwYDVQQD
Eyg4MTFlOGJlYTEwYzM5OGMzNWJiYzkzZTVjZmRiMzBiMmYxYmJhODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5+dibVQUzI5deKLH3tHh8bVG96B
XU6/seoxA0PCS6i6nK2l1NBXnGeT3Oi2SML/an082Ohf3WEvkFovyeeVTJ03quam
OevBtoGPiLEQsofauNXJzJ/2tbPEkiQlcDB8umrvQ6K8QWhc0wJovE59QJfCtS84
XUwPHlwGfyxNoKeAUsPtJo4J60w1OiQQcWKu4q/xYqDfesQHIvl7P/fMGBWmj0DL
SMbJV8L3+b5OEmvI0112EGqu/1gl88h7zObwOqse4axGNPhJzg3oNUPVmaVHQ6w+
+DPHtfrcuGtbzT+JdG+S/x/liM3BflHkD7UMz/aFuS4vX+ZQJtbt11traQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEei+oQw5jDW7yT5c/bMLLxu6hfMB8GA1UdIwQY
MBaAFIOjys6oxdHZibB+puCXSgDaA2pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZQS3pxakYwZG1Kc0g2bTRKZEtBTm9EYWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NDA5MjktYmE1ZS00MzE2LWExMzgt
YmQwZGVlODQ0MDQ3LzEvZzZQS3pxakYwZG1Kc0g2bTRKZEtBTm9EYWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NDA5MjktYmE1ZS00MzE2LWExMzgtYmQwZGVlODQ0MDQ3
LzEvZzZQS3pxakYwZG1Kc0g2bTRKZEtBTm9EYWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPBXWlLx
NdAFNuZ7rkUxLQ8QbyOi4oLhBsHhe6Hz+3Q+GEK7cZC+O7/sVerZrSw5GCTxngEZ
kp0XKoj6KF0A+qsoxWj2FdT3hwPLPWIUEZMo7Ue3c8wz02ewwdhkJdfKVSKqbWxN
jG/PrzWSbLVaP1kCQ/x4XrK5J1QRT9fqqiTGRlrm4Sp3SifAa06qXUaMXPk/ueky
yYpB3Svn2/eHD4iL2oBnp+bfxCNU4OTTsWT7LbEM9VZzUo+8Td4f0dscmT6fi7xH
vRRjAi2gA7ZYjrcvMxE0kGBq+22+f0M25+C7ZcLRXF8iZH5lndmVdHiQiz2zYgj8
SoR2+ewk/h9DGA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:43 2026 by rpki-client