Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File:                     55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier:          w3sjhCx6EHLDwGlqozCpHL4zYrLQRXeT8jSo9SUIceg=
Subject key identifier:   80:14:30:7E:6C:55:10:6D:D7:40:81:30:73:A4:51:9E:B8:A9:10:89
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer:       /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial:       019EE88D970E291CE4A1485C8FA0A7ECF49B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number:          146C
Signing time:             Sun 21 Jun 2026 05:00:53 +0000
Manifest this update:     Sun 21 Jun 2026 05:00:53 +0000
Manifest next update:     Mon 22 Jun 2026 05:00:53 +0000
Files and hashes:         1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: PcFEYe1gc10OXZkOUwgRG2Bpik13Hl9sHU1+JZjMmdE=)
                          2: JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa (hash: rObYpAP50FsAJbWUILnwA87gkFrmltk/+8uJWoHJQsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:8d:97:0e:29:1c:e4:a1:48:5c:8f:a0:a7:ec:f4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
        Validity
            Not Before: Jun 21 05:00:53 2026 GMT
            Not After : Jun 22 05:00:53 2026 GMT
        Subject: CN=8014307e6c55106dd740813073a4519eb8a91089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:f1:dc:00:58:ca:9f:ca:49:5d:04:16:a5:
                    aa:c5:5b:b2:c3:7e:2c:0f:a4:9b:5d:f6:cb:e3:80:
                    88:cf:a8:6e:98:ba:0d:5a:2d:0a:24:0e:75:11:dc:
                    79:fc:86:31:18:ca:5c:92:a9:7e:68:be:ac:41:2a:
                    43:4b:14:bb:18:df:f9:3e:51:d9:5a:33:e2:8c:ef:
                    28:80:a6:25:91:49:d4:20:b4:34:85:4d:70:29:9f:
                    13:07:6f:6f:0c:4b:9d:65:1e:a2:e9:fc:4f:6a:69:
                    3d:d6:91:2d:6a:06:6c:e8:d1:b5:21:1f:5c:8b:d2:
                    7c:d1:ec:9e:88:ad:b2:59:30:7b:39:fb:9c:5d:4a:
                    52:93:80:fd:19:c0:18:c1:05:18:7b:30:ac:1c:35:
                    7d:25:65:20:7f:f6:36:d3:f1:34:e1:84:40:64:8a:
                    6d:61:c8:17:3e:e7:8a:2c:00:0a:36:1b:89:63:d8:
                    23:8d:09:bb:38:0d:dc:51:85:54:fd:d7:a6:9d:d6:
                    82:88:7d:7d:b3:53:26:5d:ab:3c:43:1f:d0:df:d2:
                    56:97:c3:5d:9f:f8:be:47:f4:f4:43:31:a6:ff:19:
                    c0:06:04:f5:d9:2b:6a:78:58:19:3c:8a:bc:e0:53:
                    0a:81:2d:a9:12:89:fb:65:b4:fb:e9:ba:1d:e9:3a:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:14:30:7E:6C:55:10:6D:D7:40:81:30:73:A4:51:9E:B8:A9:10:89
            X509v3 Authority Key Identifier:
                keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:74:e0:9c:0d:40:08:ee:c0:fb:6e:75:18:95:1c:e2:41:
         b0:37:3f:4c:58:ff:51:2e:b1:05:8b:b0:ca:c1:2b:16:5c:60:
         73:9b:e8:cd:c8:b4:26:e9:68:9f:92:65:d5:13:c1:a4:04:07:
         13:dd:2b:be:5d:b0:cf:56:06:5e:85:d0:cc:6a:44:a6:74:ed:
         76:2d:81:cb:6f:92:f0:a3:3f:53:4a:46:7b:33:56:52:15:80:
         09:74:f0:39:ed:f9:7a:1b:d7:4a:8b:57:74:4d:c8:cb:13:b5:
         d1:58:c8:85:dc:a2:a3:f8:71:49:7a:76:5f:46:ea:60:d4:05:
         ca:34:1b:0b:50:27:a0:d4:ed:44:40:ce:6f:f3:45:8f:6e:4d:
         5c:83:1b:d6:66:bf:87:39:1b:b5:f0:66:0d:77:e5:82:e5:6a:
         23:0b:ab:48:75:39:54:c1:e5:24:80:89:76:5f:07:bf:9d:51:
         31:36:44:f9:58:2a:aa:46:37:0e:e0:2c:f0:8a:a9:14:f8:d9:
         68:56:4d:bb:5b:73:c9:64:69:39:b8:fe:5c:ca:53:33:f0:95:
         9d:96:4e:a2:5a:b1:50:35:e4:d0:74:78:19:3c:3f:8d:b1:ef:
         4f:7e:5b:45:97:4b:84:92:a8:75:d2:ab:73:9b:d0:51:79:7f:
         d1:c4:cb:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ojZcOKRzkoUhcj6Cn7PSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh
MjQ0ZmEwHhcNMjYwNjIxMDUwMDUzWhcNMjYwNjIyMDUwMDUzWjAzMTEwLwYDVQQD
Eyg4MDE0MzA3ZTZjNTUxMDZkZDc0MDgxMzA3M2E0NTE5ZWI4YTkxMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Czx3ABYyp/KSV0EFqWqxVuyw34s
D6SbXfbL44CIz6humLoNWi0KJA51Edx5/IYxGMpckql+aL6sQSpDSxS7GN/5PlHZ
WjPijO8ogKYlkUnUILQ0hU1wKZ8TB29vDEudZR6i6fxPamk91pEtagZs6NG1IR9c
i9J80eyeiK2yWTB7OfucXUpSk4D9GcAYwQUYezCsHDV9JWUgf/Y20/E04YRAZIpt
YcgXPueKLAAKNhuJY9gjjQm7OA3cUYVU/demndaCiH19s1MmXas8Qx/Q39JWl8Nd
n/i+R/T0QzGm/xnABgT12StqeFgZPIq84FMKgS2pEon7ZbT76bod6ToVWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAUMH5sVRBt10CBMHOkUZ64qRCJMB8GA1UdIwQY
MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt
NDJiZDkyZjMwYTk3LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3
LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDV04JwN
QAjuwPtudRiVHOJBsDc/TFj/US6xBYuwysErFlxgc5vozci0Julon5Jl1RPBpAQH
E90rvl2wz1YGXoXQzGpEpnTtdi2By2+S8KM/U0pGezNWUhWACXTwOe35ehvXSotX
dE3IyxO10VjIhdyio/hxSXp2X0bqYNQFyjQbC1AnoNTtREDOb/NFj25NXIMb1ma/
hzkbtfBmDXflguVqIwurSHU5VMHlJICJdl8Hv51RMTZE+VgqqkY3DuAs8IqpFPjZ
aFZNu1tzyWRpObj+XMpTM/CVnZZOolqxUDXk0HR4GTw/jbHvT35bRZdLhJKoddKr
c5vQUXl/0cTLeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 21 07:13:15 2026 by rpki-client