Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File:                     1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier:          kcPYTlB5TmKVwaYIZB5PyorB0RiwOTz61xA/+CRb/8U=
Subject key identifier:   DC:37:34:80:C8:73:A7:C7:1F:76:4C:8D:09:D5:7D:4F:FE:39:4D:8F
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer:       /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial:       019F1943ABEBCB936F5D39661906D700F687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number:          09EC
Signing time:             Tue 30 Jun 2026 16:01:32 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:32 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:32 +0000
Files and hashes:         1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: vRCqDHQi7W0svSj8r8TMzKVkFY9fsyCNYyEvXebCMwQ=)
                          2: peT8CTSpQLfO18yCwu4AtxxOTr0.roa (hash: hsGVA7+uUNNAHVu2HVjxr7Jo3CA7cqA+tbxBjJtodL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:ab:eb:cb:93:6f:5d:39:66:19:06:d7:00:f6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
        Validity
            Not Before: Jun 30 16:01:32 2026 GMT
            Not After : Jul  1 16:01:32 2026 GMT
        Subject: CN=dc373480c873a7c71f764c8d09d57d4ffe394d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:55:3d:f2:f9:d6:c8:72:e7:5e:c1:df:ef:
                    7a:3e:a6:a0:23:f2:5b:68:f3:e5:ac:4a:03:86:99:
                    5f:d2:52:cc:c6:08:2c:dd:35:ed:a5:dd:46:e8:4d:
                    3b:24:91:37:49:97:38:ed:b6:c6:3f:54:3a:a5:ea:
                    54:b9:27:83:cb:3b:cc:e0:9c:9a:d3:da:18:0f:9a:
                    8d:5b:7b:f4:a1:8b:00:95:12:e4:1e:49:ae:61:82:
                    cd:b7:16:93:29:a8:81:f6:aa:92:f2:f6:a8:36:a7:
                    59:4b:c7:c0:98:f4:f4:27:d7:6b:f7:ea:15:69:d0:
                    c0:20:6b:c8:54:86:e3:44:17:12:86:40:4b:a5:df:
                    b4:2f:6c:25:01:9a:fd:98:39:09:4a:88:56:6e:42:
                    fb:43:97:f7:e1:40:30:ca:c1:d7:08:cf:3a:06:6e:
                    3e:4b:39:10:d4:05:67:82:5c:23:84:ab:05:78:38:
                    7c:95:83:4d:af:5c:91:d1:bb:b4:ee:e8:17:01:ba:
                    bb:83:b7:1f:0a:8d:97:1c:e1:5c:81:a5:17:7a:98:
                    ae:e2:e5:b5:30:e9:9c:ee:6b:2a:e3:30:b6:3c:38:
                    8d:0c:34:2a:0c:9c:6f:73:74:64:80:17:79:d4:93:
                    91:4d:09:fb:a1:5d:57:d3:2c:3b:45:22:8e:a1:59:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:34:80:C8:73:A7:C7:1F:76:4C:8D:09:D5:7D:4F:FE:39:4D:8F
            X509v3 Authority Key Identifier:
                keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:98:6b:66:b5:ac:5f:9c:65:38:ea:3e:b6:4e:e4:7a:ad:63:
         93:61:49:7a:0a:92:ce:c4:98:ca:de:8a:7b:51:64:dc:ad:b0:
         9e:79:39:c5:2b:4a:48:1c:72:f9:d5:9a:b9:b6:5b:5b:22:c8:
         40:f1:4d:bd:4b:48:40:b4:5d:5c:0e:7a:95:6b:a1:8e:db:3b:
         8b:d0:b2:04:2c:6c:3c:f0:ba:f7:aa:d5:6f:e1:52:2e:63:2c:
         1f:e8:b0:d2:fb:cd:bc:b1:17:87:24:9d:4b:34:07:94:06:63:
         85:83:2d:7e:91:02:85:7e:c2:9d:d3:54:79:17:c6:aa:d3:3c:
         36:34:fe:2a:a1:a3:50:35:a3:98:83:0e:3d:2d:68:34:59:0d:
         83:fb:92:c6:d6:fb:7f:24:ad:6b:57:40:4e:2b:dd:52:26:0a:
         d8:4b:fb:c3:9f:c2:ce:2a:84:b3:88:10:16:53:5b:1f:53:1b:
         51:92:c6:4b:b8:9a:c5:9d:fa:4b:e7:56:42:09:d4:f5:38:92:
         6e:af:ec:94:92:1a:58:de:f1:06:93:37:4a:4b:22:14:bb:ea:
         62:eb:f9:60:1a:dd:2d:92:84:b3:0f:f9:0d:75:76:82:15:c1:
         f5:1a:8d:81:9e:10:52:6d:62:4c:2b:4d:9d:93:87:65:14:2c:
         d9:3d:04:47
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8ZQ6vry5NvXTlmGQbXAPaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh
Mjg5YjQwHhcNMjYwNjMwMTYwMTMyWhcNMjYwNzAxMTYwMTMyWjAzMTEwLwYDVQQD
EyhkYzM3MzQ4MGM4NzNhN2M3MWY3NjRjOGQwOWQ1N2Q0ZmZlMzk0ZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlBVPfL51shy517B3+96PqagI/Jb
aPPlrEoDhplf0lLMxggs3TXtpd1G6E07JJE3SZc47bbGP1Q6pepUuSeDyzvM4Jya
09oYD5qNW3v0oYsAlRLkHkmuYYLNtxaTKaiB9qqS8vaoNqdZS8fAmPT0J9dr9+oV
adDAIGvIVIbjRBcShkBLpd+0L2wlAZr9mDkJSohWbkL7Q5f34UAwysHXCM86Bm4+
SzkQ1AVnglwjhKsFeDh8lYNNr1yR0bu07ugXAbq7g7cfCo2XHOFcgaUXepiu4uW1
MOmc7msq4zC2PDiNDDQqDJxvc3RkgBd51JORTQn7oV1X0yw7RSKOoVm1QwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNw3NIDIc6fHH3ZMjQnVfU/+OU2PMB8GA1UdIwQY
MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1
LTAwZmUwNWMyYmZjNi8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxL2E1MjZjYS0zNzllLTQ5NWQtOGYxNS0wMGZlMDVjMmJm
YzYvMS8xLXMyUUdyb05OclpXejVqZ3dDa1g0NnFpaWJRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASphr
ZrWsX5xlOOo+tk7keq1jk2FJegqSzsSYyt6Ke1Fk3K2wnnk5xStKSBxy+dWaubZb
WyLIQPFNvUtIQLRdXA56lWuhjts7i9CyBCxsPPC696rVb+FSLmMsH+iw0vvNvLEX
hySdSzQHlAZjhYMtfpEChX7CndNUeRfGqtM8NjT+KqGjUDWjmIMOPS1oNFkNg/uS
xtb7fySta1dATivdUiYK2Ev7w5/CziqEs4gQFlNbH1MbUZLGS7iaxZ36S+dWQgnU
9TiSbq/slJIaWN7xBpM3SksiFLvqYuv5YBrdLZKEsw/5DXV2ghXB9RqNgZ4QUm1i
TCtNnZOHZRQs2T0ERw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:27 2026 by rpki-client