Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft
File:                     ptc0G6arFLJchEeo7SYd7x8NLzc.mft (raw, json)
Hash identifier:          v5Hc6MLTSvLtOXyjQntNJoLkPfJaKoS/cQqfsUsmhf0=
Subject key identifier:   42:15:8E:5E:E0:BB:1F:8C:1A:AF:D5:13:FB:26:1C:A4:DB:00:AF:61
Authority key identifier: A6:D7:34:1B:A6:AB:14:B2:5C:84:47:A8:ED:26:1D:EF:1F:0D:2F:37
Certificate issuer:       /CN=a6d7341ba6ab14b25c8447a8ed261def1f0d2f37
Certificate serial:       019F273627FFA3E64E0EDBA89E299ABED9E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft
Manifest number:          09
Signing time:             Fri 03 Jul 2026 09:01:28 +0000
Manifest this update:     Fri 03 Jul 2026 09:01:28 +0000
Manifest next update:     Sat 04 Jul 2026 09:01:28 +0000
Files and hashes:         1: NsNcJKwraZtwMSEz_TUgSceIE8U.roa (hash: DUS5cdKTRr1YlPMQatFq6XwfO0uPHkerNfO9NxoRktc=)
                          2: ptc0G6arFLJchEeo7SYd7x8NLzc.crl (hash: l1DEXkQJUmBRa6+5HAOSAGp6Nbx3OvvfPkr7eWWsFWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 09:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:27:36:27:ff:a3:e6:4e:0e:db:a8:9e:29:9a:be:d9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6d7341ba6ab14b25c8447a8ed261def1f0d2f37
        Validity
            Not Before: Jul  3 09:01:28 2026 GMT
            Not After : Jul  4 09:01:28 2026 GMT
        Subject: CN=42158e5ee0bb1f8c1aafd513fb261ca4db00af61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:e0:ba:2d:95:1e:08:f9:bf:3f:9b:ac:c8:
                    c3:23:04:aa:90:5a:82:21:15:9e:33:67:66:92:92:
                    9c:0a:15:7c:01:11:ac:03:a5:21:35:4d:a5:79:d2:
                    87:99:cb:30:b4:f7:31:45:2c:68:44:72:a4:fa:5f:
                    f0:d5:0f:8e:e0:33:7e:36:d0:ef:be:f6:14:f2:ac:
                    b9:9d:2e:96:94:c0:5b:83:81:fc:71:21:c5:59:24:
                    a7:d9:76:1f:a0:9e:77:b2:f7:07:66:dc:b9:be:b0:
                    83:95:b6:ad:9f:8e:e2:f3:89:7f:f0:db:91:6e:55:
                    9a:3a:52:00:6e:68:da:e8:51:d5:2e:e8:12:cd:47:
                    12:ec:33:d3:e6:64:1a:b8:cd:03:63:e6:47:8e:55:
                    86:03:1f:06:ae:4a:7e:ef:49:39:53:6a:0c:db:06:
                    3c:3d:93:e5:b9:3d:22:2d:f3:32:bb:2a:09:98:df:
                    63:24:c0:e2:26:24:64:87:b1:81:a4:fb:bf:ac:2b:
                    8b:30:fb:45:92:80:7b:25:18:9b:40:80:73:c2:a0:
                    88:f0:4f:f2:1d:ac:83:48:f7:77:84:67:5b:0b:a5:
                    76:dd:1c:4f:f7:96:6b:d8:10:9a:95:93:e9:34:f1:
                    25:53:63:5b:42:e7:8d:36:ea:58:a0:e7:b0:34:19:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:8E:5E:E0:BB:1F:8C:1A:AF:D5:13:FB:26:1C:A4:DB:00:AF:61
            X509v3 Authority Key Identifier:
                keyid:A6:D7:34:1B:A6:AB:14:B2:5C:84:47:A8:ED:26:1D:EF:1F:0D:2F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:18:1e:7d:be:2c:aa:79:28:c4:92:0f:c3:a8:e0:99:3e:07:
         9c:1b:b8:65:68:7e:bd:cf:b7:49:31:38:7a:ad:a7:95:c0:3e:
         0a:0a:c8:6f:26:72:29:75:b7:25:7a:64:23:a8:46:cc:84:a1:
         92:9d:04:55:5b:de:52:8e:53:6a:81:4d:aa:fe:64:79:10:27:
         64:94:32:be:c8:d9:27:1f:1b:db:87:ac:1b:5f:60:ac:99:a6:
         fb:1a:73:a0:ca:d1:5f:59:c1:f5:48:bb:bb:9c:ce:6b:c5:39:
         ed:42:5f:54:5e:3d:20:d6:a8:4c:03:7c:d6:30:24:52:e1:96:
         7d:cd:95:9e:35:b1:84:1d:0a:95:cd:10:a1:dc:ea:92:e0:2f:
         af:05:53:3a:37:dc:72:ee:9d:c0:eb:e5:35:4c:0f:82:d7:53:
         59:a0:e7:9a:df:76:42:06:4f:eb:50:6b:24:9e:0c:b5:52:30:
         24:32:95:e0:f8:02:5d:14:0c:3b:6d:2d:68:87:1b:a3:e4:94:
         50:7b:a4:bb:b2:3e:26:24:93:3a:45:7e:a4:04:e3:0f:41:cf:
         23:80:03:70:06:b4:2c:b6:d1:2b:40:67:3c:28:6f:a8:16:61:
         5d:83:da:87:8f:3b:6d:c2:d0:2d:d0:9d:9f:fe:88:55:40:92:
         76:a4:eb:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8nNif/o+ZODtuonimavtniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZDczNDFiYTZhYjE0YjI1Yzg0NDdhOGVkMjYxZGVmMWYw
ZDJmMzcwHhcNMjYwNzAzMDkwMTI4WhcNMjYwNzA0MDkwMTI4WjAzMTEwLwYDVQQD
Eyg0MjE1OGU1ZWUwYmIxZjhjMWFhZmQ1MTNmYjI2MWNhNGRiMDBhZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsfgui2VHgj5vz+brMjDIwSqkFqC
IRWeM2dmkpKcChV8ARGsA6UhNU2ledKHmcswtPcxRSxoRHKk+l/w1Q+O4DN+NtDv
vvYU8qy5nS6WlMBbg4H8cSHFWSSn2XYfoJ53svcHZty5vrCDlbatn47i84l/8NuR
blWaOlIAbmja6FHVLugSzUcS7DPT5mQauM0DY+ZHjlWGAx8Grkp+70k5U2oM2wY8
PZPluT0iLfMyuyoJmN9jJMDiJiRkh7GBpPu/rCuLMPtFkoB7JRibQIBzwqCI8E/y
HayDSPd3hGdbC6V23RxP95Zr2BCalZPpNPElU2NbQueNNupYoOewNBmKfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIVjl7gux+MGq/VE/smHKTbAK9hMB8GA1UdIwQY
MBaAFKbXNBumqxSyXIRHqO0mHe8fDS83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHRjMEc2YXJGTEpjaEVlbzdTWWQ3eDhOTHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgt
OTM5YWMzZmU0Yjg5LzEvcHRjMEc2YXJGTEpjaEVlbzdTWWQ3eDhOTHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgtOTM5YWMzZmU0Yjg5
LzEvcHRjMEc2YXJGTEpjaEVlbzdTWWQ3eDhOTHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxgefb4s
qnkoxJIPw6jgmT4HnBu4ZWh+vc+3STE4eq2nlcA+CgrIbyZyKXW3JXpkI6hGzISh
kp0EVVveUo5TaoFNqv5keRAnZJQyvsjZJx8b24esG19grJmm+xpzoMrRX1nB9Ui7
u5zOa8U57UJfVF49INaoTAN81jAkUuGWfc2VnjWxhB0Klc0QodzqkuAvrwVTOjfc
cu6dwOvlNUwPgtdTWaDnmt92QgZP61BrJJ4MtVIwJDKV4PgCXRQMO20taIcbo+SU
UHuku7I+JiSTOkV+pATjD0HPI4ADcAa0LLbRK0BnPChvqBZhXYPah487bcLQLdCd
n/6IVUCSdqTr4A==
-----END CERTIFICATE-----
Generated at Fri Jul 3 17:33:20 2026 by rpki-client