Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File:                     1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier:          U1/tcLPBKrwpniJLimMGmWAjDp6yReqfu29LUfdiG6s=
Subject key identifier:   46:87:D4:33:70:52:6D:CB:25:87:40:37:19:4F:F7:17:71:8B:1D:F3
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer:       /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial:       019F18D66C58010DF234334CCC46FD4655F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number:          0BC1
Signing time:             Tue 30 Jun 2026 14:02:13 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:13 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:13 +0000
Files and hashes:         1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: uVIa1nBZAXFskmgg7tZgcv1xBfKUa5lyYfdwcshlSYg=)
                          2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
                          3: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (hash: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:6c:58:01:0d:f2:34:33:4c:cc:46:fd:46:55:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
        Validity
            Not Before: Jun 30 14:02:13 2026 GMT
            Not After : Jul  1 14:02:13 2026 GMT
        Subject: CN=4687d43370526dcb25874037194ff717718b1df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:26:14:b2:7f:d9:38:4e:48:eb:63:35:77:
                    e1:ff:f2:d9:5b:fe:4a:cb:92:a5:d4:38:8a:f6:cc:
                    38:fa:42:aa:ec:5d:ea:c1:39:90:6b:45:9f:d3:eb:
                    44:b2:eb:ef:ee:10:1e:93:ae:32:51:0e:9d:37:eb:
                    37:de:bf:fd:d3:c3:f9:90:82:dc:b8:c5:39:cd:1d:
                    0c:a6:c9:b0:6a:41:91:37:c0:4e:c7:be:2c:1f:b0:
                    a3:56:9f:1a:65:a8:ed:d3:c3:1a:12:5a:e2:eb:58:
                    7f:8a:28:c3:a0:60:8b:5c:bd:41:23:c5:7b:f9:91:
                    c9:13:98:65:db:47:b6:2d:34:cf:e8:53:d6:ec:c6:
                    22:1b:e9:52:ec:2f:d6:33:1e:9a:df:a6:15:87:90:
                    fc:98:fa:b0:9b:cf:7b:61:c3:7a:a9:f0:92:ec:eb:
                    7c:f0:a3:3b:61:37:1b:36:a6:56:cd:e8:82:db:f1:
                    48:c8:ce:d0:f8:36:9b:28:25:4b:f1:82:97:fe:a8:
                    28:04:f2:c2:a7:25:75:a0:7f:ab:24:da:18:15:a3:
                    a9:4f:43:37:74:64:1d:0c:75:3b:8a:45:2b:91:e2:
                    3a:b2:a2:e0:bd:08:5b:80:d2:4d:99:5c:e4:75:09:
                    7d:30:b2:f3:67:71:ba:1c:5e:f6:0c:a2:f4:bf:cf:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:D4:33:70:52:6D:CB:25:87:40:37:19:4F:F7:17:71:8B:1D:F3
            X509v3 Authority Key Identifier:
                keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:79:7f:42:ef:fd:91:8b:1b:fe:c9:57:05:62:bb:fd:73:37:
         fb:c9:f4:f1:cf:6e:3c:0c:99:6e:71:2a:b0:dd:7d:4e:14:53:
         de:e3:fa:3d:a2:0f:21:84:4f:88:06:72:e6:77:ef:52:5d:1d:
         e9:3d:52:8b:d1:e7:03:2a:13:a7:54:c1:8a:dd:8f:ef:dc:c8:
         c5:37:dd:7e:dc:8f:2c:72:8d:ec:9c:4e:02:cb:0e:76:bd:f6:
         2a:eb:bc:e9:3e:67:05:5d:48:dd:76:17:ad:b8:46:a3:3d:90:
         f8:b5:13:f9:0b:5e:3a:12:07:a1:c4:97:27:e0:57:fb:bf:ee:
         5d:b7:5c:41:de:f2:bf:aa:82:d3:73:40:d6:52:ed:3c:08:09:
         24:65:63:25:99:cb:9f:74:e0:73:5f:86:02:1b:55:3e:0c:80:
         77:59:db:da:d0:c0:b0:a3:a8:0a:8d:59:a7:b2:53:f9:43:a4:
         29:7b:d9:e6:ad:96:6a:c5:e8:0a:9b:6f:10:4e:5d:01:8a:67:
         73:34:64:33:b4:7f:ff:ba:3c:ab:63:23:69:5c:ca:1c:78:19:
         bd:36:31:74:c6:b4:5f:30:e4:a9:a5:24:23:cc:bd:d1:0f:cf:
         3f:09:30:b9:70:9f:ba:b0:b1:17:27:ec:84:ba:25:62:88:5d:
         a2:38:9d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1mxYAQ3yNDNMzEb9RlX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3
ZjcyMGEwHhcNMjYwNjMwMTQwMjEzWhcNMjYwNzAxMTQwMjEzWjAzMTEwLwYDVQQD
Eyg0Njg3ZDQzMzcwNTI2ZGNiMjU4NzQwMzcxOTRmZjcxNzcxOGIxZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBAmFLJ/2ThOSOtjNXfh//LZW/5K
y5Kl1DiK9sw4+kKq7F3qwTmQa0Wf0+tEsuvv7hAek64yUQ6dN+s33r/908P5kILc
uMU5zR0MpsmwakGRN8BOx74sH7CjVp8aZajt08MaElri61h/iijDoGCLXL1BI8V7
+ZHJE5hl20e2LTTP6FPW7MYiG+lS7C/WMx6a36YVh5D8mPqwm897YcN6qfCS7Ot8
8KM7YTcbNqZWzeiC2/FIyM7Q+DabKCVL8YKX/qgoBPLCpyV1oH+rJNoYFaOpT0M3
dGQdDHU7ikUrkeI6sqLgvQhbgNJNmVzkdQl9MLLzZ3G6HF72DKL0v89ndwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaH1DNwUm3LJYdANxlP9xdxix3zMB8GA1UdIwQY
MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt
YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk
LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3l/Qu/9
kYsb/slXBWK7/XM3+8n08c9uPAyZbnEqsN19ThRT3uP6PaIPIYRPiAZy5nfvUl0d
6T1Si9HnAyoTp1TBit2P79zIxTfdftyPLHKN7JxOAssOdr32Kuu86T5nBV1I3XYX
rbhGoz2Q+LUT+QteOhIHocSXJ+BX+7/uXbdcQd7yv6qC03NA1lLtPAgJJGVjJZnL
n3Tgc1+GAhtVPgyAd1nb2tDAsKOoCo1Zp7JT+UOkKXvZ5q2WasXoCptvEE5dAYpn
czRkM7R//7o8q2MjaVzKHHgZvTYxdMa0XzDkqaUkI8y90Q/PPwkwuXCfurCxFyfs
hLolYohdojidrg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:25 2026 by rpki-client