Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File:                     bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier:          tzkNdrtx5qLxL+P2et5oQmt5kWPmdIiKRe9MGXvli0Q=
Subject key identifier:   D8:7C:B9:63:EA:08:8F:BC:C9:F2:39:CD:2C:55:D6:B6:17:1A:EE:ED
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer:       /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial:       019EAD1DCFC5A9CCA669BB4D06EAF611F020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number:          03BC
Signing time:             Tue 09 Jun 2026 16:01:12 +0000
Manifest this update:     Tue 09 Jun 2026 16:01:12 +0000
Manifest next update:     Wed 10 Jun 2026 16:01:12 +0000
Files and hashes:         1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
                          2: 9KcLH-08xp9bTu3iU1LcZBGH8Qo.asa (hash: 3lMyXLFpUnbxFEEAepRspDKIQvKIBFYX/ZM2xRZKoIs=)
                          3: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: TxpS1TBZVAYlQVytgoILvSNP5N5iT61qZzdnB9J5gLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jun 2026 11:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ad:1d:cf:c5:a9:cc:a6:69:bb:4d:06:ea:f6:11:f0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
        Validity
            Not Before: Jun  9 16:01:12 2026 GMT
            Not After : Jun 10 16:01:12 2026 GMT
        Subject: CN=d87cb963ea088fbcc9f239cd2c55d6b6171aeeed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:9e:e6:a3:a8:d8:6e:91:c7:ba:ad:69:2b:
                    06:91:dc:25:e9:69:7e:0f:97:84:12:0c:30:e1:5b:
                    21:a3:32:55:65:4d:75:a7:dc:a4:8f:57:37:b3:e7:
                    de:34:fa:c7:23:a2:65:49:1c:dc:ec:7f:e3:f5:ac:
                    12:2f:e4:08:dd:eb:71:17:f1:80:45:4a:f8:9e:1e:
                    71:cc:92:7c:b5:ca:de:8f:70:49:8b:da:d8:19:2c:
                    ad:d9:da:97:d9:72:7d:46:2f:77:54:82:13:18:e1:
                    a2:81:cb:37:f7:5b:b0:38:f9:6d:9e:7b:e3:55:1d:
                    7a:07:a7:81:d1:5b:cb:f6:07:ad:e7:b3:7d:c0:50:
                    5d:f1:13:d7:78:35:cb:3e:eb:07:2b:23:ac:38:63:
                    25:21:7b:61:35:e3:f4:94:5b:f3:cb:52:f6:f0:1a:
                    04:d5:29:4b:f6:10:07:bf:47:42:20:37:92:f9:41:
                    20:56:2b:6c:6e:8f:37:75:39:64:23:da:3a:ff:f2:
                    d0:9c:b7:e9:e0:59:6b:b3:03:bb:28:91:76:f2:d4:
                    ef:e8:11:33:dd:f8:68:2d:1d:f6:84:44:6a:10:f1:
                    a4:c9:8b:cf:4d:f8:d6:d3:86:4f:b8:5f:57:f1:0d:
                    20:d0:16:76:a7:76:a3:76:65:fb:13:41:63:de:c1:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7C:B9:63:EA:08:8F:BC:C9:F2:39:CD:2C:55:D6:B6:17:1A:EE:ED
            X509v3 Authority Key Identifier:
                keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:24:2e:e4:ed:66:82:2a:1e:05:2f:00:0f:d2:f0:08:43:
         58:d6:76:e2:39:d3:a7:1a:f6:b8:13:ce:d8:29:1a:36:b3:ff:
         fe:63:e7:1d:a7:1c:89:af:bd:e7:74:b7:82:e1:77:02:b4:6c:
         5a:a1:b1:21:0d:47:9e:de:b4:4b:21:0b:85:00:ad:35:26:55:
         2c:9f:f6:10:ca:81:d2:19:b1:66:78:1c:66:e4:63:6d:6f:d4:
         c8:40:9b:e0:bf:d8:3f:ea:b3:6d:21:a4:37:16:e2:6d:77:15:
         e8:0d:8a:fb:fd:a9:36:2b:d4:c3:13:da:67:8e:5e:64:be:e8:
         82:55:66:d7:fe:70:bd:68:5a:d8:48:ed:0f:fc:76:ce:92:05:
         28:80:45:6f:cb:b6:1d:b4:ff:e9:0b:59:b5:c9:ff:98:65:27:
         bf:c4:59:84:eb:09:53:66:40:c2:3e:9e:17:3b:9e:d9:a7:75:
         60:4f:e6:a4:f3:58:ba:f1:ea:83:70:3a:e9:a8:91:9b:51:b9:
         ef:da:89:96:35:2b:cb:5f:24:8a:a1:08:72:0a:37:1e:53:3f:
         15:25:41:07:72:b6:d4:be:4f:16:dc:1f:8b:70:0b:ce:6b:5d:
         97:6a:cd:f0:96:99:51:93:15:f1:23:23:ab:7a:b0:e9:79:81:
         11:db:64:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6tHc/FqcymabtNBur2EfAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2ViMTMxOGEzY2M4ODM0ZjVjMDY4NTRiZWMxNGY1ODM3
NzQ2ZDkwHhcNMjYwNjA5MTYwMTEyWhcNMjYwNjEwMTYwMTEyWjAzMTEwLwYDVQQD
EyhkODdjYjk2M2VhMDg4ZmJjYzlmMjM5Y2QyYzU1ZDZiNjE3MWFlZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIOe5qOo2G6Rx7qtaSsGkdwl6Wl+
D5eEEgww4VshozJVZU11p9ykj1c3s+feNPrHI6JlSRzc7H/j9awSL+QI3etxF/GA
RUr4nh5xzJJ8tcrej3BJi9rYGSyt2dqX2XJ9Ri93VIITGOGigcs391uwOPltnnvj
VR16B6eB0VvL9get57N9wFBd8RPXeDXLPusHKyOsOGMlIXthNeP0lFvzy1L28BoE
1SlL9hAHv0dCIDeS+UEgVitsbo83dTlkI9o6//LQnLfp4FlrswO7KJF28tTv6BEz
3fhoLR32hERqEPGkyYvPTfjW04ZPuF9X8Q0g0BZ2p3ajdmX7E0Fj3sH0GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh8uWPqCI+8yfI5zSxV1rYXGu7tMB8GA1UdIwQY
MBaAFG5+sTGKPMiDT1wGhUvsFPWDd0bZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDkt
OTlhODA3MDBhNTViLzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDktOTlhODA3MDBhNTVi
LzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ8kLuTt
ZoIqHgUvAA/S8AhDWNZ24jnTpxr2uBPO2CkaNrP//mPnHaccia+953S3guF3ArRs
WqGxIQ1Hnt60SyELhQCtNSZVLJ/2EMqB0hmxZngcZuRjbW/UyECb4L/YP+qzbSGk
NxbibXcV6A2K+/2pNivUwxPaZ45eZL7oglVm1/5wvWha2EjtD/x2zpIFKIBFb8u2
HbT/6QtZtcn/mGUnv8RZhOsJU2ZAwj6eFzue2ad1YE/mpPNYuvHqg3A66aiRm1G5
79qJljUry18kiqEIcgo3HlM/FSVBB3K21L5PFtwfi3ALzmtdl2rN8JaZUZMV8SMj
q3qw6XmBEdtkIA==
-----END CERTIFICATE-----
Generated at Tue Jun 9 20:57:53 2026 by rpki-client