Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File:                     6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier:          wX8Q2C5UmFE+KyPvjaBSgkukM5MH+Oade0MK8u0zoII=
Subject key identifier:   F4:6F:7F:53:96:B9:2A:6A:DE:1C:6F:53:56:BD:A0:C0:0C:B9:73:55
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer:       /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial:       019F1830B88A52F8334B921EAFC609F4EE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number:          0BC0
Signing time:             Tue 30 Jun 2026 11:01:13 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:13 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:13 +0000
Files and hashes:         1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: Erkkmnk+iWjoQOHf18OeHYSBjp68dlrZA/ijlfkXXYA=)
                          2: cmKY5ceisIdSEDxZAHQoFXS37F0.roa (hash: sNf/iuxeatsIfNnR4y3DdWxX9LCuZ9ar0ao5hSS62EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:b8:8a:52:f8:33:4b:92:1e:af:c6:09:f4:ee:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
        Validity
            Not Before: Jun 30 11:01:13 2026 GMT
            Not After : Jul  1 11:01:13 2026 GMT
        Subject: CN=f46f7f5396b92a6ade1c6f5356bda0c00cb97355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:c6:13:2e:0c:0d:7a:6f:4c:df:41:cc:40:
                    d9:a8:3b:09:f1:29:fd:36:52:f6:85:1c:19:e0:11:
                    05:ae:3a:b6:aa:51:02:15:e8:0f:e7:31:bc:de:57:
                    f5:ea:21:51:d9:59:2e:69:24:c4:74:f6:e5:87:be:
                    21:60:f0:98:8e:b0:21:4f:b3:39:7c:43:7a:0d:8d:
                    68:8e:e5:61:1b:17:e5:5f:13:31:f4:43:bb:5d:39:
                    c0:b1:60:76:0d:80:65:29:fb:3a:47:b8:62:c5:67:
                    51:85:34:82:61:51:34:02:b0:39:9f:76:bf:86:28:
                    bf:73:81:e9:8c:41:80:ab:8f:2e:b4:86:bb:14:36:
                    38:62:4c:23:72:02:20:0d:fd:d1:00:b5:b1:52:23:
                    d8:be:fc:88:31:b1:5e:9f:db:5e:15:c5:94:74:da:
                    4c:0e:9d:5c:33:9c:a7:c8:8f:e6:26:79:ad:6f:bc:
                    d8:24:f1:3c:57:34:eb:67:81:33:7b:07:f8:18:53:
                    39:72:31:51:da:29:55:75:c9:06:9d:2b:93:25:90:
                    b7:75:ea:5e:8c:ee:bd:8d:f1:92:39:bd:78:5d:28:
                    70:73:8b:ec:81:87:27:d9:28:1b:72:23:41:ff:1d:
                    72:b3:0e:63:1d:fd:38:b2:9c:b0:fa:57:20:f9:7b:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6F:7F:53:96:B9:2A:6A:DE:1C:6F:53:56:BD:A0:C0:0C:B9:73:55
            X509v3 Authority Key Identifier:
                keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:4a:ae:54:73:eb:99:ab:99:6b:2f:98:2a:8c:56:1b:8f:
         40:2c:ff:bb:55:93:fb:ce:4e:06:15:78:52:6d:c5:a3:e3:97:
         ad:d1:de:2d:c7:ec:cb:3b:d4:35:87:9c:0a:5d:56:e1:ad:73:
         0c:a2:76:c8:a9:9b:e7:02:cf:fb:6b:3f:e2:b8:62:96:f3:80:
         61:0d:8c:45:77:49:5e:9d:2f:fe:02:3e:bf:04:c4:63:a4:b2:
         19:5c:ac:e2:dd:de:18:41:0d:1c:4a:26:c4:49:a4:1a:c0:40:
         b9:2d:fc:74:c5:c3:29:0e:e0:63:cf:6a:61:a6:ab:ff:6c:fe:
         ae:0e:0d:5c:77:ff:48:2b:a8:e7:5f:ae:9b:e9:34:a1:73:0a:
         b3:ca:7c:d4:1c:73:bb:61:c5:45:cb:9b:54:b2:23:63:e6:15:
         be:28:3e:c6:66:dc:1c:5f:df:0f:75:2b:6c:52:1c:c8:63:eb:
         71:c2:a9:1c:c5:b4:7a:8c:55:6a:7a:f2:c4:f0:27:dd:3b:1c:
         f5:e9:a1:b6:20:6f:92:b4:ad:8a:f4:b0:7e:6d:39:7e:1f:3c:
         21:7b:cb:a3:94:38:f0:61:a3:07:3b:03:8b:2b:7d:bf:b5:4f:
         d4:8c:9b:f2:fd:fd:0d:5f:8a:2b:87:10:ef:26:cd:a5:66:0e:
         c8:ea:39:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMLiKUvgzS5Ier8YJ9O5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjAyMzdlNzI1Y2YwYTUzZWY0M2E3NGI1NTY5NTUxYWZm
NzRlMDQwHhcNMjYwNjMwMTEwMTEzWhcNMjYwNzAxMTEwMTEzWjAzMTEwLwYDVQQD
EyhmNDZmN2Y1Mzk2YjkyYTZhZGUxYzZmNTM1NmJkYTBjMDBjYjk3MzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4HGEy4MDXpvTN9BzEDZqDsJ8Sn9
NlL2hRwZ4BEFrjq2qlECFegP5zG83lf16iFR2VkuaSTEdPblh74hYPCYjrAhT7M5
fEN6DY1ojuVhGxflXxMx9EO7XTnAsWB2DYBlKfs6R7hixWdRhTSCYVE0ArA5n3a/
hii/c4HpjEGAq48utIa7FDY4YkwjcgIgDf3RALWxUiPYvvyIMbFen9teFcWUdNpM
Dp1cM5ynyI/mJnmtb7zYJPE8VzTrZ4Ezewf4GFM5cjFR2ilVdckGnSuTJZC3depe
jO69jfGSOb14XShwc4vsgYcn2SgbciNB/x1ysw5jHf04spyw+lcg+XuNgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRvf1OWuSpq3hxvU1a9oMAMuXNVMB8GA1UdIwQY
MBaAFOkgI35yXPClPvQ6dLVWlVGv904EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgt
ZWIxMTM5YTMzZDBhLzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgtZWIxMTM5YTMzZDBh
LzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBtKrlRz
65mrmWsvmCqMVhuPQCz/u1WT+85OBhV4Um3Fo+OXrdHeLcfsyzvUNYecCl1W4a1z
DKJ2yKmb5wLP+2s/4rhilvOAYQ2MRXdJXp0v/gI+vwTEY6SyGVys4t3eGEENHEom
xEmkGsBAuS38dMXDKQ7gY89qYaar/2z+rg4NXHf/SCuo51+um+k0oXMKs8p81Bxz
u2HFRcubVLIjY+YVvig+xmbcHF/fD3UrbFIcyGPrccKpHMW0eoxVanryxPAn3Tsc
9emhtiBvkrStivSwfm05fh88IXvLo5Q48GGjBzsDiyt9v7VP1Iyb8v39DV+KK4cQ
7ybNpWYOyOo5+w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:46 2026 by rpki-client