Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
File:                     92O3x0pHzua9mbvGKu-DalYCtTE.mft (raw, json)
Hash identifier:          4toE1npWz4ytZyPbk7+87TkVKTTrGqEK3rvg6Y2ear0=
Subject key identifier:   7B:5A:AA:D9:6D:5A:62:B3:CF:6D:65:9C:71:B8:CE:BB:82:FD:47:1D
Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
Certificate issuer:       /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Certificate serial:       019F189E57D833A278FBA20F5A1F89225D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
Manifest number:          090B
Signing time:             Tue 30 Jun 2026 13:00:58 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:58 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:58 +0000
Files and hashes:         1: 92O3x0pHzua9mbvGKu-DalYCtTE.crl (hash: vwT8MfgHWg3kcHfuB9bUizyL8FhS4w1dR+aZmLqlWd4=)
                          2: GRUqddpEtaR9CDuyc4Wtqj8pgN0.roa (hash: HdhAlK1KoAL2nMH9qWpXXpQvzuqZKrfB7aI1S3CJbMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:57:d8:33:a2:78:fb:a2:0f:5a:1f:89:22:5d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
        Validity
            Not Before: Jun 30 13:00:58 2026 GMT
            Not After : Jul  1 13:00:58 2026 GMT
        Subject: CN=7b5aaad96d5a62b3cf6d659c71b8cebb82fd471d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:79:23:85:c0:2d:1a:2a:f2:20:67:5b:ee:
                    5d:b3:af:89:13:69:1e:50:4e:8a:a0:17:38:61:fe:
                    19:86:9e:1d:ee:f3:d9:97:c0:75:fd:10:0e:e1:bc:
                    a4:f3:e0:e2:58:a7:df:2b:fb:70:55:c8:28:fb:1e:
                    42:ce:54:72:59:8c:1a:32:66:a6:3e:0c:ea:f1:3a:
                    1c:59:21:2a:56:89:a9:4e:0c:f9:47:03:c1:14:0d:
                    6a:a1:de:52:d1:97:db:a6:66:48:b6:4a:a6:52:1c:
                    51:22:2f:70:f7:a9:5e:0d:f4:ce:c3:59:b6:c4:dc:
                    fd:dc:c7:bc:d5:a6:7b:84:7a:55:d0:fe:70:71:7f:
                    62:20:fb:d6:b7:56:73:01:b6:fc:91:e9:71:e6:18:
                    1b:51:3f:dc:e2:5c:c2:b1:0d:ae:bf:a3:c5:1e:f7:
                    b1:86:ba:c8:b5:4c:bf:86:db:51:d3:2b:85:6b:01:
                    7e:ec:33:42:40:38:c2:ef:8d:6f:f8:87:13:d0:3e:
                    5d:09:39:47:eb:21:c6:f7:96:a7:27:02:c8:d0:39:
                    1c:48:e2:63:09:ad:63:89:e3:f6:e8:a4:61:6b:a5:
                    b0:30:31:c4:2f:78:c1:6e:a2:98:18:45:ad:38:b7:
                    b8:d7:1b:d2:a3:ad:5e:de:36:47:28:fa:ce:d4:cd:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5A:AA:D9:6D:5A:62:B3:CF:6D:65:9C:71:B8:CE:BB:82:FD:47:1D
            X509v3 Authority Key Identifier:
                keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:f1:d7:87:33:f5:84:6f:07:be:79:11:ac:6c:af:1e:d2:
         90:0a:1d:5e:67:5d:76:24:34:a4:f0:13:db:f4:6d:31:e8:13:
         47:ca:d5:d0:5c:a0:48:f3:33:ce:43:ff:c5:21:76:b2:97:2b:
         b6:60:b9:f6:0c:92:a7:d1:c4:4c:cf:68:3c:f5:2d:c1:d7:d2:
         0e:d8:02:b7:7a:63:40:57:a6:6a:0b:08:86:1b:55:17:e5:cb:
         41:ae:fb:18:af:31:f6:06:23:7a:0f:82:4c:77:fd:0c:37:8d:
         c2:53:70:54:be:af:82:46:e4:00:c0:70:73:01:19:2d:ee:be:
         3d:2e:fb:f9:94:84:bd:a4:3d:6a:e9:02:44:7c:95:c9:07:87:
         63:7b:00:9a:78:5e:05:cd:bd:e6:86:08:3a:50:70:b9:46:3a:
         83:52:ea:0e:db:76:58:3e:66:3b:b1:96:c1:f3:48:50:ca:7b:
         76:ef:a0:ab:32:e6:40:72:67:3a:be:50:99:f1:29:ce:4c:8c:
         0d:06:2a:14:5e:13:d0:39:5a:02:bb:a8:b9:b3:a2:9f:a5:f4:
         0b:41:41:4b:5c:ec:a3:e6:02:43:91:fb:6a:4b:9b:76:5e:55:
         fa:e8:2d:35:eb:8e:e2:79:74:ef:79:4d:67:4e:70:71:c4:0b:
         f6:cb:1a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnlfYM6J4+6IPWh+JIl2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NjNiN2M3NGE0N2NlZTZiZDk5YmJjNjJhZWY4MzZhNTYw
MmI1MzEwHhcNMjYwNjMwMTMwMDU4WhcNMjYwNzAxMTMwMDU4WjAzMTEwLwYDVQQD
Eyg3YjVhYWFkOTZkNWE2MmIzY2Y2ZDY1OWM3MWI4Y2ViYjgyZmQ0NzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsB5I4XALRoq8iBnW+5ds6+JE2ke
UE6KoBc4Yf4Zhp4d7vPZl8B1/RAO4byk8+DiWKffK/twVcgo+x5CzlRyWYwaMmam
Pgzq8TocWSEqVompTgz5RwPBFA1qod5S0ZfbpmZItkqmUhxRIi9w96leDfTOw1m2
xNz93Me81aZ7hHpV0P5wcX9iIPvWt1ZzAbb8kelx5hgbUT/c4lzCsQ2uv6PFHvex
hrrItUy/httR0yuFawF+7DNCQDjC741v+IcT0D5dCTlH6yHG95anJwLI0DkcSOJj
Ca1jieP26KRha6WwMDHEL3jBbqKYGEWtOLe41xvSo61e3jZHKPrO1M0WywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtaqtltWmKzz21lnHG4zruC/UcdMB8GA1UdIwQY
MBaAFPdjt8dKR87mvZm7xirvg2pWArUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTJPM3gwcEh6dWE5bWJ2R0t1LURhbFlDdFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYzNlZWUtMjE4OS00NDY5LTgxNmIt
OTliODczZTVlNzRhLzEvOTJPM3gwcEh6dWE5bWJ2R0t1LURhbFlDdFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yYzNlZWUtMjE4OS00NDY5LTgxNmItOTliODczZTVlNzRh
LzEvOTJPM3gwcEh6dWE5bWJ2R0t1LURhbFlDdFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBPx14cz
9YRvB755Eaxsrx7SkAodXmdddiQ0pPAT2/RtMegTR8rV0FygSPMzzkP/xSF2spcr
tmC59gySp9HETM9oPPUtwdfSDtgCt3pjQFemagsIhhtVF+XLQa77GK8x9gYjeg+C
THf9DDeNwlNwVL6vgkbkAMBwcwEZLe6+PS77+ZSEvaQ9aukCRHyVyQeHY3sAmnhe
Bc295oYIOlBwuUY6g1LqDtt2WD5mO7GWwfNIUMp7du+gqzLmQHJnOr5QmfEpzkyM
DQYqFF4T0DlaAruoubOin6X0C0FBS1zso+YCQ5H7akubdl5V+ugtNeuO4nl073lN
Z05wccQL9ssa0w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:19 2026 by rpki-client