Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
File:                     gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft (raw, json)
Hash identifier:          pdiNn9RfCXtqWao0Gq+mOp+Gawc2MRdxTWi7ZZcqK6I=
Subject key identifier:   6A:B2:D6:AA:36:86:36:82:87:9D:FA:E7:47:A0:58:50:43:AB:18:C3
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Certificate issuer:       /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial:       019EFBA8C3AF8FEF8A045F9436DD84EB41D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
Manifest number:          01B6
Signing time:             Wed 24 Jun 2026 22:03:21 +0000
Manifest this update:     Wed 24 Jun 2026 22:03:21 +0000
Manifest next update:     Thu 25 Jun 2026 22:03:21 +0000
Files and hashes:         1: gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl (hash: nY0cRNG9c8XQFf6mWFPfoRahnsl6rjEO7u1azl4r+7Y=)
                          2: s8_WHV038Q1g78fwDx7OOGYi0D4.asa (hash: vzf3srjx5iuTGWWUUoS5m4h76G1Jy31CD1k6b5+yiFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:a8:c3:af:8f:ef:8a:04:5f:94:36:dd:84:eb:41:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
        Validity
            Not Before: Jun 24 22:03:21 2026 GMT
            Not After : Jun 25 22:03:21 2026 GMT
        Subject: CN=6ab2d6aa36863682879dfae747a0585043ab18c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:db:40:41:c6:4a:51:e2:77:3c:b5:d2:f1:
                    fc:64:1a:ee:79:67:fa:96:88:c5:dd:3c:dd:c6:39:
                    8f:49:e6:6c:e1:58:81:2d:81:c1:70:f0:11:20:81:
                    7a:74:b4:3e:4f:fc:e0:7b:67:20:58:99:b3:29:9d:
                    3b:2d:33:89:78:99:fa:30:42:b4:92:e9:57:00:71:
                    b7:58:3e:ed:3a:24:d4:3a:cd:fa:64:a2:e5:53:01:
                    2c:2e:84:5d:dd:68:fb:5c:ee:93:01:db:27:48:97:
                    1a:b4:e8:d1:fb:09:d9:3b:b7:d0:d4:eb:dc:7d:7a:
                    43:75:b7:fc:32:fe:0e:88:d3:9c:80:aa:0b:72:f0:
                    9c:c9:cc:91:f8:67:e1:84:37:1a:5f:7d:ae:bb:28:
                    b1:7f:bf:d4:75:25:e1:c6:96:90:b5:eb:d4:ae:94:
                    ab:af:be:62:8a:1e:a8:d9:e5:cd:40:bc:19:1e:ed:
                    8b:73:ea:1a:02:33:31:00:10:b2:5e:bf:cc:0f:7a:
                    5f:82:98:75:5d:98:71:38:a7:dd:c8:c4:cd:2e:64:
                    9e:18:55:99:80:79:dd:75:a6:9a:81:8f:73:6d:e3:
                    26:49:61:04:7c:19:1b:d6:1e:9c:4f:2a:ba:c9:75:
                    c5:c2:1f:00:3f:8c:4b:0a:48:bb:5d:72:da:91:6b:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B2:D6:AA:36:86:36:82:87:9D:FA:E7:47:A0:58:50:43:AB:18:C3
            X509v3 Authority Key Identifier:
                keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5f:99:e7:8b:18:1f:52:b7:31:5c:40:57:fb:50:be:51:d4:
         0d:b5:84:42:c7:ad:a5:23:21:f3:11:c7:ef:c0:f5:8b:a5:92:
         1a:17:b4:b3:b2:42:c3:16:14:b7:e5:ad:84:dc:46:85:8a:0a:
         54:60:e0:43:dd:26:e0:6e:81:4c:1a:f7:d9:9f:4b:e4:f0:87:
         46:7c:23:4e:d1:10:f3:e2:a1:d4:a6:d7:32:fd:ab:e7:c3:36:
         8a:6b:79:8a:d3:09:56:02:62:04:b2:7b:94:52:3c:fe:e7:70:
         48:2b:11:77:8a:65:ba:35:20:da:9f:01:c4:62:a1:fc:75:00:
         9b:96:74:e7:20:7b:fb:e6:8f:ad:73:63:de:88:0d:59:48:40:
         c8:db:79:2d:d2:a5:9f:8d:ed:78:08:a6:75:ac:07:d2:84:05:
         6d:6b:da:9a:7d:64:97:99:66:11:a3:0a:1f:62:70:f4:5c:f9:
         99:5b:24:3f:58:37:50:51:74:12:ea:a5:aa:c9:fe:81:57:a5:
         d5:ca:29:57:01:c1:aa:7b:a8:de:d1:28:d1:51:28:07:ef:29:
         cc:e0:64:30:e5:a2:a2:60:40:d7:c2:2d:ac:41:0c:ec:6f:96:
         b1:b4:59:50:ea:d1:c7:1a:48:99:0a:d2:b0:79:b8:7a:9f:76:
         a2:0a:65:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ77qMOvj++KBF+UNt2E60HZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzg5MjljYzhkOGZjMDBkOTY5NzZiZTRjOGMxZWQ3ZGFm
NDU1ZDcwHhcNMjYwNjI0MjIwMzIxWhcNMjYwNjI1MjIwMzIxWjAzMTEwLwYDVQQD
Eyg2YWIyZDZhYTM2ODYzNjgyODc5ZGZhZTc0N2EwNTg1MDQzYWIxOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRnbQEHGSlHidzy10vH8ZBrueWf6
lojF3TzdxjmPSeZs4ViBLYHBcPARIIF6dLQ+T/zge2cgWJmzKZ07LTOJeJn6MEK0
kulXAHG3WD7tOiTUOs36ZKLlUwEsLoRd3Wj7XO6TAdsnSJcatOjR+wnZO7fQ1Ovc
fXpDdbf8Mv4OiNOcgKoLcvCcycyR+GfhhDcaX32uuyixf7/UdSXhxpaQtevUrpSr
r75iih6o2eXNQLwZHu2Lc+oaAjMxABCyXr/MD3pfgph1XZhxOKfdyMTNLmSeGFWZ
gHnddaaagY9zbeMmSWEEfBkb1h6cTyq6yXXFwh8AP4xLCki7XXLakWsa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqy1qo2hjaCh53650egWFBDqxjDMB8GA1UdIwQY
MBaAFIA4kpzI2PwA2Wl2vkyMHtfa9FXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RpU25NallfQURaYVhhLVRJd2UxOXIwVmRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zZGFhNmItNjM0OC00OGIyLThiOTYt
NTFhZmIwZDhkMTYzLzEvZ0RpU25NallfQURaYVhhLVRJd2UxOXIwVmRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zZGFhNmItNjM0OC00OGIyLThiOTYtNTFhZmIwZDhkMTYz
LzEvZ0RpU25NallfQURaYVhhLVRJd2UxOXIwVmRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl+Z54sY
H1K3MVxAV/tQvlHUDbWEQsetpSMh8xHH78D1i6WSGhe0s7JCwxYUt+WthNxGhYoK
VGDgQ90m4G6BTBr32Z9L5PCHRnwjTtEQ8+Kh1KbXMv2r58M2imt5itMJVgJiBLJ7
lFI8/udwSCsRd4plujUg2p8BxGKh/HUAm5Z05yB7++aPrXNj3ogNWUhAyNt5LdKl
n43teAimdawH0oQFbWvamn1kl5lmEaMKH2Jw9Fz5mVskP1g3UFF0Euqlqsn+gVel
1copVwHBqnuo3tEo0VEoB+8pzOBkMOWiomBA18ItrEEM7G+WsbRZUOrRxxpImQrS
sHm4ep92ogplmg==
-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:16 2026 by rpki-client