Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File:                     1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier:          qGMJBuruZdd91mjamdpgJnSizhWOvk3FRrAtradvdcw=
Subject key identifier:   57:B5:0C:C7:94:8C:7E:86:75:2E:81:02:9E:4B:4B:DE:DB:CA:AD:49
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer:       /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial:       019F12650EBD0BF294E7BF676F4093F4A7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number:          0618
Signing time:             Mon 29 Jun 2026 08:00:40 +0000
Manifest this update:     Mon 29 Jun 2026 08:00:40 +0000
Manifest next update:     Tue 30 Jun 2026 08:00:40 +0000
Files and hashes:         1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: yYNYPAscNMRiZgGoQ23ywk9fG0mSRPfIS8ZU6pY3Gmk=)
                          2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:0e:bd:0b:f2:94:e7:bf:67:6f:40:93:f4:a7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
        Validity
            Not Before: Jun 29 08:00:40 2026 GMT
            Not After : Jun 30 08:00:40 2026 GMT
        Subject: CN=57b50cc7948c7e86752e81029e4b4bdedbcaad49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0c:e7:68:24:81:0f:80:a4:c3:64:d3:c4:a5:
                    34:1f:f0:43:41:33:96:56:87:4f:99:0f:a5:cf:0d:
                    d5:92:35:40:0b:df:c8:06:d8:e1:e1:75:8e:f6:65:
                    4d:43:13:e7:77:67:72:21:e7:0b:a3:0e:b2:08:40:
                    9d:fd:d1:91:1d:54:29:01:a1:ef:ab:90:51:9d:d4:
                    81:7f:df:04:b9:b6:a1:67:07:fd:f0:1f:d9:eb:36:
                    20:2f:dd:5a:fe:d0:1f:03:61:e0:a0:71:32:07:b3:
                    cc:f9:34:e2:06:2a:22:77:d1:73:50:26:bf:7e:12:
                    53:a7:fc:bc:57:18:9c:26:a7:d0:64:51:ee:6a:57:
                    a4:89:39:2b:cf:2e:3b:b8:8f:c4:a7:ad:65:9d:7c:
                    b8:ee:1f:78:06:26:9d:c5:81:4f:bf:fd:3f:36:e7:
                    3a:c3:fc:d1:e0:8c:c4:13:ba:44:a0:06:10:41:23:
                    4f:f9:ea:83:96:7a:6a:d6:16:35:68:4c:7b:fb:8c:
                    53:ee:01:4e:87:a3:5e:21:65:46:f1:80:e2:b0:73:
                    df:80:3a:96:fb:76:06:f2:b8:bd:70:1c:65:8d:2a:
                    26:a3:2c:87:31:80:0f:b1:a5:bf:ac:3f:0f:2c:a2:
                    17:c2:4a:bb:43:86:1f:36:09:61:0f:7f:f7:98:4d:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B5:0C:C7:94:8C:7E:86:75:2E:81:02:9E:4B:4B:DE:DB:CA:AD:49
            X509v3 Authority Key Identifier:
                keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:e8:f3:7d:7f:70:15:fd:be:5a:43:4a:49:11:00:fa:af:e5:
         fe:cc:78:e9:40:9e:4a:d0:43:53:4f:53:2b:ea:f7:47:d8:bd:
         03:4c:16:f6:fa:f8:06:6d:ca:5c:cc:b1:db:55:d7:c7:b2:0d:
         a0:ca:71:cc:07:12:12:ea:6c:87:fd:12:ab:ff:30:05:86:f2:
         f0:38:f4:0b:94:9d:2b:69:b0:f9:d2:fa:28:cb:eb:e5:82:0e:
         e5:a5:46:06:2a:ec:18:7e:a1:16:51:55:7c:95:65:5b:49:cd:
         a1:7b:91:b0:a8:8a:af:2c:70:b1:8f:b9:10:d9:f4:3c:ed:b3:
         f3:e2:9b:ea:ae:c2:2e:17:b8:21:d5:a2:03:f1:ab:54:59:e2:
         b3:24:83:90:0e:a3:58:17:7a:b0:e4:7f:1e:05:3f:54:c9:ca:
         95:e3:a9:4a:05:19:c6:0c:54:04:a6:39:03:ee:9b:9a:23:a8:
         34:03:b5:fd:38:db:83:e8:36:ca:23:93:15:34:08:dc:05:84:
         f9:05:27:95:05:28:9c:c2:ec:89:7c:8b:96:01:3b:66:aa:c6:
         40:89:4d:a3:e6:06:e7:e7:a0:9e:5b:84:69:89:f1:a8:0d:92:
         fd:87:f3:16:df:fa:f8:67:44:0c:45:f9:94:9a:59:7c:c5:2d:
         d0:3c:37:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZQ69C/KU579nb0CT9Kf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5
NTU0NmQwHhcNMjYwNjI5MDgwMDQwWhcNMjYwNjMwMDgwMDQwWjAzMTEwLwYDVQQD
Eyg1N2I1MGNjNzk0OGM3ZTg2NzUyZTgxMDI5ZTRiNGJkZWRiY2FhZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQznaCSBD4Ckw2TTxKU0H/BDQTOW
VodPmQ+lzw3VkjVAC9/IBtjh4XWO9mVNQxPnd2dyIecLow6yCECd/dGRHVQpAaHv
q5BRndSBf98EubahZwf98B/Z6zYgL91a/tAfA2HgoHEyB7PM+TTiBioid9FzUCa/
fhJTp/y8VxicJqfQZFHualekiTkrzy47uI/Ep61lnXy47h94BiadxYFPv/0/Nuc6
w/zR4IzEE7pEoAYQQSNP+eqDlnpq1hY1aEx7+4xT7gFOh6NeIWVG8YDisHPfgDqW
+3YG8ri9cBxljSomoyyHMYAPsaW/rD8PLKIXwkq7Q4YfNglhD3/3mE1ulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe1DMeUjH6GdS6BAp5LS97byq1JMB8GA1UdIwQY
MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt
MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw
LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ejzfX9w
Ff2+WkNKSREA+q/l/sx46UCeStBDU09TK+r3R9i9A0wW9vr4Bm3KXMyx21XXx7IN
oMpxzAcSEupsh/0Sq/8wBYby8Dj0C5SdK2mw+dL6KMvr5YIO5aVGBirsGH6hFlFV
fJVlW0nNoXuRsKiKryxwsY+5ENn0PO2z8+Kb6q7CLhe4IdWiA/GrVFnisySDkA6j
WBd6sOR/HgU/VMnKleOpSgUZxgxUBKY5A+6bmiOoNAO1/Tjbg+g2yiOTFTQI3AWE
+QUnlQUonMLsiXyLlgE7ZqrGQIlNo+YG5+egnluEaYnxqA2S/YfzFt/6+GdEDEX5
lJpZfMUt0Dw3xg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 16:36:31 2026 by rpki-client