Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
File:                     aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft (raw, json)
Hash identifier:          Z001lAnuCL+mrryG8AywWOMegEowpDHOfXgLNVcHjvs=
Subject key identifier:   7C:18:9A:23:CD:06:E5:15:00:55:79:C1:0E:A1:56:0E:B0:04:EF:B8
Authority key identifier: 68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
Certificate issuer:       /CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Certificate serial:       019EF94BA049837C1A0A09B8DDAE19CCC647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
Manifest number:          2A
Signing time:             Wed 24 Jun 2026 11:02:23 +0000
Manifest this update:     Wed 24 Jun 2026 11:02:23 +0000
Manifest next update:     Thu 25 Jun 2026 11:02:23 +0000
Files and hashes:         1: aDxqedKr2O-4oJIg4fDpZa5gLAc.roa (hash: fppPlyvE3ZEeKH+ON2djCXrH3zpgUITE612vD7TTNF4=)
                          2: aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl (hash: prq2JUUgiTSk1nEHNn2T5FFLUwzVAlTLsktk7BeAhxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 11:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:4b:a0:49:83:7c:1a:0a:09:b8:dd:ae:19:cc:c6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a76054bb7eb78fd706cd418a9f6e364566366f
        Validity
            Not Before: Jun 24 11:02:23 2026 GMT
            Not After : Jun 25 11:02:23 2026 GMT
        Subject: CN=7c189a23cd06e515005579c10ea1560eb004efb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:8e:fc:3b:a9:74:ed:ae:41:ff:fb:64:18:
                    83:62:74:80:17:70:ff:8d:52:77:0a:63:76:14:5d:
                    85:94:ff:0f:03:b1:fd:f2:34:3c:26:4f:1b:78:bb:
                    90:39:0e:c7:fa:c6:c0:07:35:4b:39:34:30:50:75:
                    5e:38:81:62:fe:47:55:81:76:3a:a7:45:75:3c:c2:
                    70:60:aa:b0:19:13:26:d7:2b:c8:96:57:45:80:9c:
                    7c:8f:43:0c:91:d1:d8:f4:8e:52:90:f0:8b:bc:cc:
                    3b:b8:ee:cb:a6:58:c2:65:9e:ab:70:06:96:1b:d4:
                    ba:86:13:5d:37:15:6b:2f:ef:d6:b8:7a:c7:30:e8:
                    e2:4a:86:a9:a4:57:51:22:56:ba:78:50:d7:97:d0:
                    04:d6:a4:22:ab:39:d8:fa:b1:ff:40:43:85:a4:ca:
                    3f:4c:00:b4:0e:64:de:97:b0:41:3c:e5:c7:6a:4a:
                    68:fd:3b:0d:ea:e6:3a:c1:ef:34:5c:4f:5b:16:c3:
                    08:d3:a0:17:9a:18:32:a4:24:60:74:bf:83:91:12:
                    78:0c:50:1d:7f:c2:4a:23:52:3a:b0:8b:51:00:d3:
                    58:73:92:51:50:33:c9:68:bc:09:73:d5:61:0b:23:
                    d1:10:60:5a:6f:d9:cf:e8:ae:aa:14:d1:b6:8a:45:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:18:9A:23:CD:06:E5:15:00:55:79:C1:0E:A1:56:0E:B0:04:EF:B8
            X509v3 Authority Key Identifier:
                keyid:68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7b:12:64:88:0b:33:78:e0:a2:9a:1d:d3:1b:e5:7e:ed:92:
         e9:23:fc:eb:96:30:d9:47:b0:a7:34:64:de:54:aa:77:3a:93:
         ae:04:12:7a:71:ab:84:9b:6b:65:bd:42:8d:ee:c0:22:85:7f:
         e3:64:8a:1f:e1:18:35:77:cf:09:57:a5:15:9e:b1:c6:4a:36:
         f9:d4:ac:64:62:0a:a5:5a:86:44:ff:89:04:e5:88:cb:51:92:
         08:00:3c:c0:5e:85:81:39:97:fc:03:d9:ad:06:0d:a1:70:bc:
         72:a8:f7:bd:b0:18:51:b6:98:97:24:17:a4:2a:8b:f3:8c:54:
         a5:82:5d:2d:84:6b:f7:0b:42:03:39:7f:12:02:52:c7:dc:86:
         22:16:1d:8a:6d:8e:2b:e0:ba:c2:33:da:25:26:b3:48:c2:0b:
         bf:40:23:3d:0c:b2:1f:9b:15:57:82:95:be:f4:4f:d3:ee:3d:
         24:ad:95:2e:21:3c:31:29:17:92:20:20:2f:25:cc:c0:4f:cf:
         53:c6:9a:3e:1d:fc:28:eb:7a:16:09:0b:5f:89:53:4b:96:bc:
         0a:4f:78:a0:54:ea:e2:51:2b:a5:e1:34:fe:2b:74:8b:b8:54:
         d8:a6:75:29:63:cd:ee:9e:12:fb:12:6b:b2:c0:3b:09:ee:d0:
         f2:58:0f:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ75S6BJg3waCgm43a4ZzMZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YTc2MDU0YmI3ZWI3OGZkNzA2Y2Q0MThhOWY2ZTM2NDU2
NjM2NmYwHhcNMjYwNjI0MTEwMjIzWhcNMjYwNjI1MTEwMjIzWjAzMTEwLwYDVQQD
Eyg3YzE4OWEyM2NkMDZlNTE1MDA1NTc5YzEwZWExNTYwZWIwMDRlZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GiO/DupdO2uQf/7ZBiDYnSAF3D/
jVJ3CmN2FF2FlP8PA7H98jQ8Jk8beLuQOQ7H+sbABzVLOTQwUHVeOIFi/kdVgXY6
p0V1PMJwYKqwGRMm1yvIlldFgJx8j0MMkdHY9I5SkPCLvMw7uO7LpljCZZ6rcAaW
G9S6hhNdNxVrL+/WuHrHMOjiSoappFdRIla6eFDXl9AE1qQiqznY+rH/QEOFpMo/
TAC0DmTel7BBPOXHakpo/TsN6uY6we80XE9bFsMI06AXmhgypCRgdL+DkRJ4DFAd
f8JKI1I6sItRANNYc5JRUDPJaLwJc9VhCyPREGBab9nP6K6qFNG2ikXl+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwYmiPNBuUVAFV5wQ6hVg6wBO+4MB8GA1UdIwQY
MBaAFGinYFS7freP1wbNQYqfbjZFZjZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUtkZ1ZMdC10NF9YQnMxQmlwOXVOa1ZtTm04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lYmFkMzctYTE5OS00NGUyLWJmOTgt
YTBiYjdjYWY5Y2UwLzEvYUtkZ1ZMdC10NF9YQnMxQmlwOXVOa1ZtTm04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9lYmFkMzctYTE5OS00NGUyLWJmOTgtYTBiYjdjYWY5Y2Uw
LzEvYUtkZ1ZMdC10NF9YQnMxQmlwOXVOa1ZtTm04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHsSZIgL
M3jgopod0xvlfu2S6SP865Yw2UewpzRk3lSqdzqTrgQSenGrhJtrZb1Cje7AIoV/
42SKH+EYNXfPCVelFZ6xxko2+dSsZGIKpVqGRP+JBOWIy1GSCAA8wF6FgTmX/APZ
rQYNoXC8cqj3vbAYUbaYlyQXpCqL84xUpYJdLYRr9wtCAzl/EgJSx9yGIhYdim2O
K+C6wjPaJSazSMILv0AjPQyyH5sVV4KVvvRP0+49JK2VLiE8MSkXkiAgLyXMwE/P
U8aaPh38KOt6FgkLX4lTS5a8Ck94oFTq4lErpeE0/it0i7hU2KZ1KWPN7p4S+xJr
ssA7Ce7Q8lgPBQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 16:56:22 2026 by rpki-client