Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File:                     dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier:          SQ+5z3NvgK1L+MJmJmUkGRiTZr45lT48m+4NGZpAoV8=
Subject key identifier:   29:A0:FC:02:E7:7E:44:1B:B1:47:9D:4A:AE:FF:4E:B1:4C:F9:22:7B
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer:       /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial:       019EDD2F1EE1A9638DDB02BCEDB21C0B8221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number:          1443
Signing time:             Fri 19 Jun 2026 00:01:53 +0000
Manifest this update:     Fri 19 Jun 2026 00:01:53 +0000
Manifest next update:     Sat 20 Jun 2026 00:01:53 +0000
Files and hashes:         1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
                          2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: dFIG+ndT9nYFg62iNZHQOFkKiEcu/+8ujoq2lCv2+rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:2f:1e:e1:a9:63:8d:db:02:bc:ed:b2:1c:0b:82:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
        Validity
            Not Before: Jun 19 00:01:53 2026 GMT
            Not After : Jun 20 00:01:53 2026 GMT
        Subject: CN=29a0fc02e77e441bb1479d4aaeff4eb14cf9227b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6f:c7:85:8b:6c:68:ae:51:c8:e8:41:60:7b:
                    64:bc:1a:85:e9:bc:b4:af:e7:41:12:0e:be:f2:16:
                    18:48:a8:9b:49:37:a1:0b:f7:ef:ad:c9:7f:76:f1:
                    82:3c:05:b9:c9:61:fb:f7:9c:eb:48:0f:2c:98:95:
                    7b:64:fd:7d:3c:6b:4d:26:2d:59:a8:0b:3f:ac:f6:
                    7a:e3:60:8a:f8:c5:01:55:24:dd:15:6b:b3:ff:2c:
                    d8:3c:46:30:a3:c9:13:c2:25:a0:67:63:1e:4d:76:
                    f1:78:1b:2a:26:51:c4:7e:f4:93:bb:4a:44:38:b7:
                    a5:78:ce:97:8c:14:a1:62:9d:2d:77:a9:47:8e:f4:
                    6d:0a:25:4c:7e:8b:a3:3f:db:7a:6f:0e:5a:0f:48:
                    8a:a9:44:73:cf:1f:d6:e6:1d:7e:f3:e3:9f:e9:50:
                    61:0b:34:d1:b6:db:23:5e:90:e4:7c:d0:67:ab:8f:
                    67:41:65:df:0c:aa:f3:c4:67:b4:f3:1e:62:5c:06:
                    53:19:8c:0e:2a:a7:b1:5b:b7:07:28:dd:db:c6:68:
                    5c:40:b7:03:24:55:cc:03:e3:fc:95:7e:9e:9f:85:
                    0d:03:85:f5:15:56:fb:75:9a:4d:27:a7:26:bb:b2:
                    a1:e7:7a:3a:70:dd:ab:c9:27:68:16:7f:5d:4c:05:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:FC:02:E7:7E:44:1B:B1:47:9D:4A:AE:FF:4E:B1:4C:F9:22:7B
            X509v3 Authority Key Identifier:
                keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:95:f2:eb:0b:59:e6:a7:08:6f:33:db:10:f9:ca:0e:72:af:
         1c:73:ef:91:66:b8:ca:e5:b2:fe:49:30:d5:95:a3:f3:86:3b:
         4b:1c:77:18:a9:69:dc:1c:7e:9b:13:bf:ac:39:a9:dd:a9:5f:
         be:f1:a1:1c:2b:c0:7f:2c:b5:45:bd:b0:e8:2f:bc:5f:d7:cc:
         b1:f0:ac:99:18:dc:cc:ef:c9:ee:93:e4:24:43:0b:56:54:a0:
         9e:27:35:ff:b2:14:31:1d:59:65:12:6e:36:ad:c9:f0:61:72:
         03:e8:9a:6b:ed:21:51:a5:3c:05:48:ff:21:0a:4a:c4:ae:3d:
         ab:2c:75:3f:8c:72:96:08:e6:6d:ab:78:d3:bb:97:9a:39:ec:
         20:30:75:23:9b:af:2c:eb:4c:f7:9a:35:b8:ee:12:24:2a:2e:
         67:44:6e:dc:93:67:79:fe:64:81:ce:88:8b:a3:a5:d5:25:bc:
         7b:e1:8d:14:f7:99:bd:f3:c8:24:4c:34:11:ff:ce:29:c2:36:
         f6:26:0c:aa:9e:2b:e1:3a:aa:e8:9f:9e:5f:7a:c7:c1:c3:ac:
         17:28:65:1b:3f:df:0b:b6:d9:13:3c:30:ac:69:7b:49:83:c3:
         b7:c4:83:f8:4b:e9:5b:fb:ae:6d:48:eb:71:d0:df:9f:59:59:
         db:10:2a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7dLx7hqWON2wK87bIcC4IhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjYwNjE5MDAwMTUzWhcNMjYwNjIwMDAwMTUzWjAzMTEwLwYDVQQD
EygyOWEwZmMwMmU3N2U0NDFiYjE0NzlkNGFhZWZmNGViMTRjZjkyMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W/HhYtsaK5RyOhBYHtkvBqF6by0
r+dBEg6+8hYYSKibSTehC/fvrcl/dvGCPAW5yWH795zrSA8smJV7ZP19PGtNJi1Z
qAs/rPZ642CK+MUBVSTdFWuz/yzYPEYwo8kTwiWgZ2MeTXbxeBsqJlHEfvSTu0pE
OLeleM6XjBShYp0td6lHjvRtCiVMfoujP9t6bw5aD0iKqURzzx/W5h1+8+Of6VBh
CzTRttsjXpDkfNBnq49nQWXfDKrzxGe08x5iXAZTGYwOKqexW7cHKN3bxmhcQLcD
JFXMA+P8lX6en4UNA4X1FVb7dZpNJ6cmu7Kh53o6cN2rySdoFn9dTAX+vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmg/ALnfkQbsUedSq7/TrFM+SJ7MB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZXy6wtZ
5qcIbzPbEPnKDnKvHHPvkWa4yuWy/kkw1ZWj84Y7Sxx3GKlp3Bx+mxO/rDmp3alf
vvGhHCvAfyy1Rb2w6C+8X9fMsfCsmRjczO/J7pPkJEMLVlSgnic1/7IUMR1ZZRJu
Nq3J8GFyA+iaa+0hUaU8BUj/IQpKxK49qyx1P4xylgjmbat407uXmjnsIDB1I5uv
LOtM95o1uO4SJCouZ0Ru3JNnef5kgc6Ii6Ol1SW8e+GNFPeZvfPIJEw0Ef/OKcI2
9iYMqp4r4Tqq6J+eX3rHwcOsFyhlGz/fC7bZEzwwrGl7SYPDt8SD+EvpW/uubUjr
cdDfn1lZ2xAqUQ==
-----END CERTIFICATE-----
Generated at Fri Jun 19 08:05:59 2026 by rpki-client