Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File:                     rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier:          O2541LbR9YXHdRxlHpg/6jA4hs7WlY4iWhN8xngORk0=
Subject key identifier:   7E:67:A7:F1:DA:D9:4D:3D:BC:1B:E7:B6:62:84:A7:FE:9D:31:86:A5
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer:       /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial:       019EBA6AF0AC2B093BF6A734E62C964B0B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number:          1029
Signing time:             Fri 12 Jun 2026 06:00:31 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:31 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:31 +0000
Files and hashes:         1: RGmbCKVggdFaEV2n5n5vWdFRCzM.roa (hash: SS7nRzfO0dBngHu3IsLgcGfjod0pNS0O7g/l/TaVaqk=)
                          2: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: kG+hNH+bSclu2til+7lxRiJHL6ZHjF5Hbnk0OE1cqxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6a:f0:ac:2b:09:3b:f6:a7:34:e6:2c:96:4b:0b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
        Validity
            Not Before: Jun 12 06:00:31 2026 GMT
            Not After : Jun 13 06:00:31 2026 GMT
        Subject: CN=7e67a7f1dad94d3dbc1be7b66284a7fe9d3186a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:0d:7d:3f:89:49:19:65:4d:d6:25:4f:98:
                    71:23:62:f5:52:fb:86:7f:f0:7a:57:5a:71:d2:a6:
                    63:18:04:cc:ce:2d:11:bb:12:80:b3:47:2c:5c:53:
                    43:ad:e7:c4:00:2e:49:af:07:31:f1:69:92:3c:77:
                    bd:6f:15:6c:52:d7:da:dc:08:7e:2a:36:e5:d8:d9:
                    e5:4f:cf:91:0b:00:35:21:b0:f0:f2:e6:56:93:3d:
                    04:fa:cb:7b:44:1c:4b:74:35:73:76:55:5e:72:82:
                    e4:a0:52:0b:39:af:5a:5b:49:3e:92:1a:d6:c9:ac:
                    fd:c6:a4:06:c7:aa:e4:de:47:4a:bd:0f:9f:3c:f2:
                    72:08:8b:57:c0:c5:e9:31:f9:6e:a8:9e:35:34:a2:
                    12:03:06:58:66:99:2a:e9:e1:14:d9:82:e1:5b:3a:
                    ed:d3:d3:dc:b5:d2:73:f4:f6:34:5f:86:b6:1a:2b:
                    7a:b9:21:48:2b:2c:2c:c4:ad:4d:c6:ed:f5:08:d6:
                    6c:ce:13:ea:d8:a8:73:46:95:58:ab:87:c1:c6:63:
                    19:4a:90:67:2a:fb:41:59:18:88:17:1d:11:9f:ff:
                    50:3c:ca:67:8f:78:63:14:52:4f:c2:6c:b2:cb:e4:
                    94:f2:74:59:65:0f:8b:e5:9a:98:0a:56:1c:80:95:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:67:A7:F1:DA:D9:4D:3D:BC:1B:E7:B6:62:84:A7:FE:9D:31:86:A5
            X509v3 Authority Key Identifier:
                keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:9a:89:33:52:aa:ae:ed:7a:7c:9b:2f:df:5d:08:61:4e:
         74:1e:8c:a5:c0:c7:71:d7:4f:33:8c:28:3f:f9:1f:0d:e7:f7:
         8e:43:a3:ec:b3:05:03:42:51:b9:02:94:85:91:2c:b9:6f:af:
         9b:8c:63:18:5c:fc:d6:82:87:ec:a8:99:9f:ee:d1:09:c1:64:
         05:4d:de:ef:02:aa:b7:d8:f7:90:6a:41:7b:67:f0:d0:fc:dc:
         7f:67:53:0f:4a:39:2c:6f:15:32:01:c5:22:b1:da:6d:2b:5b:
         62:38:4a:49:a9:94:96:17:67:ed:36:69:7e:b9:85:31:2e:01:
         2f:93:97:f2:4d:d3:53:be:98:74:11:7f:4d:2d:ae:39:be:01:
         1b:25:76:19:82:f4:3e:f5:1f:00:bb:56:92:76:0a:20:8f:5f:
         ab:6a:e2:8f:0d:7d:34:b5:db:d6:c2:b1:0f:5b:60:69:e3:6c:
         95:58:d6:94:54:53:57:60:14:7d:25:d2:0d:44:5a:55:18:87:
         77:6f:02:8c:f6:f8:f7:9f:46:94:2a:93:b7:de:93:9b:c6:4e:
         ec:77:54:e8:6b:46:43:99:17:ac:4f:21:bf:7d:90:f9:c6:1c:
         4b:fe:ca:30:57:75:8e:c9:83:77:d3:73:cf:89:9f:31:e2:fa:
         c1:8f:c8:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66avCsKwk79qc05iyWSwtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDI2MWNhZDBkZmYyZDliYjJmOGM3YWQwZGIyNmVkNTcz
MGQzZGQwHhcNMjYwNjEyMDYwMDMxWhcNMjYwNjEzMDYwMDMxWjAzMTEwLwYDVQQD
Eyg3ZTY3YTdmMWRhZDk0ZDNkYmMxYmU3YjY2Mjg0YTdmZTlkMzE4NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJMNfT+JSRllTdYlT5hxI2L1UvuG
f/B6V1px0qZjGATMzi0RuxKAs0csXFNDrefEAC5Jrwcx8WmSPHe9bxVsUtfa3Ah+
Kjbl2NnlT8+RCwA1IbDw8uZWkz0E+st7RBxLdDVzdlVecoLkoFILOa9aW0k+khrW
yaz9xqQGx6rk3kdKvQ+fPPJyCItXwMXpMfluqJ41NKISAwZYZpkq6eEU2YLhWzrt
09PctdJz9PY0X4a2Git6uSFIKywsxK1Nxu31CNZszhPq2KhzRpVYq4fBxmMZSpBn
KvtBWRiIFx0Rn/9QPMpnj3hjFFJPwmyyy+SU8nRZZQ+L5ZqYClYcgJVVEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5np/Ha2U09vBvntmKEp/6dMYalMB8GA1UdIwQY
MBaAFK3SYcrQ3/LZuy+MetDbJu1XMNPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTQzNGEtZWIyZi00MDI2LWJjYzgt
N2JjNDJkNWQ0MDcyLzEvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wYTQzNGEtZWIyZi00MDI2LWJjYzgtN2JjNDJkNWQ0MDcy
LzEvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB+aiTNS
qq7tenybL99dCGFOdB6MpcDHcddPM4woP/kfDef3jkOj7LMFA0JRuQKUhZEsuW+v
m4xjGFz81oKH7KiZn+7RCcFkBU3e7wKqt9j3kGpBe2fw0Pzcf2dTD0o5LG8VMgHF
IrHabStbYjhKSamUlhdn7TZpfrmFMS4BL5OX8k3TU76YdBF/TS2uOb4BGyV2GYL0
PvUfALtWknYKII9fq2rijw19NLXb1sKxD1tgaeNslVjWlFRTV2AUfSXSDURaVRiH
d28CjPb4959GlCqTt96Tm8ZO7HdU6GtGQ5kXrE8hv32Q+cYcS/7KMFd1jsmDd9Nz
z4mfMeL6wY/IJw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:10:01 2026 by rpki-client