Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File:                     9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier:          Iz5JiCHa7mKyogdpUYI6qmjiQF+IYqaCWe03RQzLBEE=
Subject key identifier:   48:56:A2:DB:FD:BD:6A:F6:44:BD:A5:B7:4E:54:9F:E1:FB:F4:C8:0D
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer:       /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial:       019EB958871AFBC9998FAF663169EE8E2BF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number:          02B3
Signing time:             Fri 12 Jun 2026 01:00:47 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:47 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:47 +0000
Files and hashes:         1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: gd7xw8UneqJwheRxJZwjUVuEBSmoD6+bOdYSPPFEtj0=)
                          2: ex3V8jEPHC15OeyVNhlPf888Muk.roa (hash: lL8rDUO+fDpEtiUvL1L8BlBnX7C9eguwrFBzGsL8ZPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:87:1a:fb:c9:99:8f:af:66:31:69:ee:8e:2b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
        Validity
            Not Before: Jun 12 01:00:47 2026 GMT
            Not After : Jun 13 01:00:47 2026 GMT
        Subject: CN=4856a2dbfdbd6af644bda5b74e549fe1fbf4c80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:62:b3:dd:50:83:80:17:27:f9:ee:51:07:
                    80:05:a1:cb:a5:68:d8:33:1c:92:a6:7f:36:30:be:
                    eb:56:ea:23:f5:2e:72:8a:75:d2:16:dd:c7:5a:3e:
                    cb:c1:e7:7a:d8:a7:1b:0c:01:1e:df:7c:a5:00:89:
                    00:e8:6c:ea:9b:b6:e3:86:30:dc:5c:aa:04:d0:49:
                    2f:f2:c5:ee:b4:1b:d3:31:fc:a0:ca:ef:8e:bb:d7:
                    3a:13:76:eb:f6:e8:6d:1c:1f:dd:ec:b4:20:68:75:
                    a2:bf:a0:0d:75:46:5d:f0:69:cc:44:1e:91:7b:9f:
                    e1:24:74:dc:8d:8d:92:ce:84:cd:07:a3:ae:3b:b6:
                    68:7a:51:59:0a:8c:7b:d3:ba:79:cd:d5:89:8f:75:
                    df:eb:d1:df:e2:eb:8a:00:53:dd:cc:bf:ac:a7:84:
                    0e:4e:72:94:1a:45:52:52:e3:ef:7e:43:95:e8:86:
                    6f:03:57:dc:47:b7:49:4a:65:54:31:d4:9f:22:e5:
                    a3:1b:b7:43:ca:54:ed:91:a5:0d:ed:3e:7e:51:89:
                    34:71:d2:e0:91:c2:d3:8f:f8:8b:f8:90:7d:89:f5:
                    24:3b:11:8b:27:36:1d:87:3f:28:71:6d:5f:f4:67:
                    0a:bd:e0:28:1b:20:c6:37:73:11:34:4a:fb:a6:c1:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:56:A2:DB:FD:BD:6A:F6:44:BD:A5:B7:4E:54:9F:E1:FB:F4:C8:0D
            X509v3 Authority Key Identifier:
                keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:be:18:9c:9b:77:0f:88:2e:cc:4f:b6:6a:6d:3c:73:bd:40:
         70:f4:69:2d:7e:e4:50:cc:10:ea:68:7f:4f:37:41:d1:19:79:
         f0:ec:6f:02:a2:9a:f2:80:24:80:66:fb:fd:fb:44:e2:5d:a9:
         b8:e4:57:88:98:2f:01:a5:0c:85:d1:23:51:b8:60:9d:77:ca:
         48:aa:a8:56:e2:e4:0c:58:af:54:0a:96:85:77:ea:d1:65:f5:
         26:e7:6b:d0:c2:fb:a4:11:60:86:8d:de:55:00:94:ad:db:ec:
         52:06:8b:23:6b:b2:e4:4b:46:59:e4:43:0d:84:f8:dd:c7:4d:
         4b:1f:4d:88:4e:0a:53:65:c3:52:fc:40:cf:ed:96:6e:13:d2:
         6e:1a:bc:da:ca:1f:91:2a:f5:27:76:4f:3a:1b:eb:e4:82:a5:
         51:32:0b:31:2d:4f:c0:74:ef:dd:67:f5:84:3f:0d:f7:ed:25:
         11:49:97:ae:e2:ca:7c:3e:fd:b2:c6:30:77:6c:a5:2c:15:c4:
         82:ef:55:7e:c3:03:b8:76:03:8c:fa:b4:50:0f:d4:03:e8:c9:
         ec:9b:f9:50:ec:cb:eb:dd:6c:e3:e8:c7:91:af:98:3f:15:b6:
         86:8b:94:b2:72:18:60:6b:e7:10:08:5c:8b:4a:e4:b7:90:58:
         7a:2e:4b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WIca+8mZj69mMWnujivzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx
ZmIzODAwHhcNMjYwNjEyMDEwMDQ3WhcNMjYwNjEzMDEwMDQ3WjAzMTEwLwYDVQQD
Eyg0ODU2YTJkYmZkYmQ2YWY2NDRiZGE1Yjc0ZTU0OWZlMWZiZjRjODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTdis91Qg4AXJ/nuUQeABaHLpWjY
MxySpn82ML7rVuoj9S5yinXSFt3HWj7Lwed62KcbDAEe33ylAIkA6Gzqm7bjhjDc
XKoE0Ekv8sXutBvTMfygyu+Ou9c6E3br9uhtHB/d7LQgaHWiv6ANdUZd8GnMRB6R
e5/hJHTcjY2SzoTNB6OuO7ZoelFZCox707p5zdWJj3Xf69Hf4uuKAFPdzL+sp4QO
TnKUGkVSUuPvfkOV6IZvA1fcR7dJSmVUMdSfIuWjG7dDylTtkaUN7T5+UYk0cdLg
kcLTj/iL+JB9ifUkOxGLJzYdhz8ocW1f9GcKveAoGyDGN3MRNEr7psGTzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhWotv9vWr2RL2lt05Un+H79MgNMB8GA1UdIwQY
MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt
MTNiNzQ2YmJhMjYyLzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy
LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJb4YnJt3
D4guzE+2am08c71AcPRpLX7kUMwQ6mh/TzdB0Rl58OxvAqKa8oAkgGb7/ftE4l2p
uORXiJgvAaUMhdEjUbhgnXfKSKqoVuLkDFivVAqWhXfq0WX1Judr0ML7pBFgho3e
VQCUrdvsUgaLI2uy5EtGWeRDDYT43cdNSx9NiE4KU2XDUvxAz+2WbhPSbhq82sof
kSr1J3ZPOhvr5IKlUTILMS1PwHTv3Wf1hD8N9+0lEUmXruLKfD79ssYwd2ylLBXE
gu9VfsMDuHYDjPq0UA/UA+jJ7Jv5UOzL691s4+jHka+YPxW2houUsnIYYGvnEAhc
i0rkt5BYei5L7w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:12 2026 by rpki-client