Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File:                     sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier:          uvjhbagw3FFyMEnXn29FH72IyMb59vZfcb8CNHhJo/Q=
Subject key identifier:   E2:33:A7:02:0F:EF:BD:C0:B5:2D:7D:D5:A4:41:65:FC:ED:80:EF:04
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer:       /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial:       019EB8EA98B1D6DBA49C8F456783A40EBCBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number:          18E9
Signing time:             Thu 11 Jun 2026 23:00:42 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:42 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:42 +0000
Files and hashes:         1: 3CIM-rszzFckhjZbgzPmZtOKZv4.roa (hash: VqajRiaghj0MLKmKn/iBz4Zyi+LNEnSguYlblCLEBTI=)
                          2: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: aVNUWCcafoHn5pm8aGj2q/X7iO/s2s/BRqO0H4rZmeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:98:b1:d6:db:a4:9c:8f:45:67:83:a4:0e:bc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
        Validity
            Not Before: Jun 11 23:00:42 2026 GMT
            Not After : Jun 12 23:00:42 2026 GMT
        Subject: CN=e233a7020fefbdc0b52d7dd5a44165fced80ef04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:ea:81:25:cd:79:fa:8e:28:df:6d:e6:d4:
                    bf:47:9b:70:c3:76:c4:bf:d1:bc:75:51:3e:0f:e1:
                    c3:e8:28:e3:01:76:68:8c:c2:5d:c4:fc:35:06:61:
                    8a:d3:89:53:24:b6:08:a7:ba:85:27:cb:38:a8:3f:
                    b2:ef:2b:71:97:af:74:90:30:19:12:97:4f:0b:0c:
                    31:75:cc:9e:c7:56:06:54:da:fd:30:b8:c2:70:ba:
                    84:f0:59:aa:83:59:ad:62:fe:3e:8c:c6:d3:34:c5:
                    1a:67:b1:aa:ca:f4:59:3b:cf:eb:ff:51:cd:1b:67:
                    1a:ed:96:c3:99:6c:e7:97:a8:10:13:e3:47:2f:aa:
                    c8:43:ef:4e:d8:fe:08:1d:32:bb:ea:82:b1:6d:f9:
                    e5:76:a8:e5:2e:6d:70:1d:20:69:1b:96:dc:01:fc:
                    8f:ce:db:a8:43:1e:41:f1:f7:38:d7:15:c5:18:33:
                    f2:e9:61:2a:64:c7:82:2d:b2:20:09:8d:d4:2c:95:
                    42:da:65:b4:d0:29:08:7e:ff:a0:ba:7b:7a:9b:9c:
                    85:e3:fa:fe:27:76:b0:b3:7b:49:45:b4:e2:b5:0c:
                    1b:2c:91:da:0c:16:d9:65:6e:e1:de:83:3f:b1:4c:
                    af:6a:1d:23:c7:a0:8f:8a:a3:fb:a3:e5:ca:c5:1b:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:33:A7:02:0F:EF:BD:C0:B5:2D:7D:D5:A4:41:65:FC:ED:80:EF:04
            X509v3 Authority Key Identifier:
                keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:32:c0:b2:19:44:a8:a5:90:43:fe:e8:34:1d:ff:1b:f9:1f:
         3a:ac:30:be:72:9a:77:b2:4a:c6:d1:f6:ad:c1:a4:2e:80:5c:
         2a:2a:98:dc:aa:be:99:d8:1a:12:97:4f:98:83:ca:90:a9:8c:
         36:41:85:eb:ee:f5:c9:e5:ba:df:9b:e3:57:15:9c:e3:f4:bd:
         a2:a4:4d:2b:b7:46:c6:68:d5:6f:d7:b4:b8:f8:8c:7a:1f:dd:
         0b:4d:cc:b6:da:41:e1:a2:a5:8a:30:31:e8:8f:cb:2a:e5:07:
         96:7e:8c:4e:2b:a9:52:62:d1:02:a8:63:72:3b:e2:6b:9f:c2:
         c0:65:40:94:79:fc:c6:7f:73:b7:ce:21:5a:04:63:88:f4:62:
         d7:3e:c5:f3:58:04:5b:52:4d:f2:ad:1c:58:81:2f:b3:09:c7:
         03:70:6d:42:db:db:3d:f1:96:2a:00:23:ca:7c:06:ee:a6:1b:
         21:c5:ff:18:77:23:d2:c7:16:fe:b1:4f:e7:14:86:36:aa:90:
         84:d6:1f:6a:8c:db:52:ab:12:79:91:12:8b:6a:78:f6:0d:c0:
         a5:82:00:d6:70:9e:11:e1:62:2c:a7:c3:1d:f4:47:22:71:d6:
         e1:57:fd:f1:9d:5e:e3:16:67:aa:cb:a5:0a:9e:b7:2d:e5:cd:
         1d:cd:07:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646pix1tuknI9FZ4OkDry7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjFiMTI2ZGFjMGFhMGI3Nzk0ODY0MDBlZGU3MjU0YjI1
ZWVhYTYwHhcNMjYwNjExMjMwMDQyWhcNMjYwNjEyMjMwMDQyWjAzMTEwLwYDVQQD
EyhlMjMzYTcwMjBmZWZiZGMwYjUyZDdkZDVhNDQxNjVmY2VkODBlZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2HqgSXNefqOKN9t5tS/R5tww3bE
v9G8dVE+D+HD6CjjAXZojMJdxPw1BmGK04lTJLYIp7qFJ8s4qD+y7ytxl690kDAZ
EpdPCwwxdcyex1YGVNr9MLjCcLqE8Fmqg1mtYv4+jMbTNMUaZ7GqyvRZO8/r/1HN
G2ca7ZbDmWznl6gQE+NHL6rIQ+9O2P4IHTK76oKxbfnldqjlLm1wHSBpG5bcAfyP
ztuoQx5B8fc41xXFGDPy6WEqZMeCLbIgCY3ULJVC2mW00CkIfv+gunt6m5yF4/r+
J3aws3tJRbTitQwbLJHaDBbZZW7h3oM/sUyvah0jx6CPiqP7o+XKxRvbrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIzpwIP773AtS191aRBZfztgO8EMB8GA1UdIwQY
MBaAFLCxsSbawKoLd5SGQA7eclSyXuqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMt
ZmY4MjRiNDE1NjkzLzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMtZmY4MjRiNDE1Njkz
LzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjLAshlE
qKWQQ/7oNB3/G/kfOqwwvnKad7JKxtH2rcGkLoBcKiqY3Kq+mdgaEpdPmIPKkKmM
NkGF6+71yeW635vjVxWc4/S9oqRNK7dGxmjVb9e0uPiMeh/dC03MttpB4aKlijAx
6I/LKuUHln6MTiupUmLRAqhjcjvia5/CwGVAlHn8xn9zt84hWgRjiPRi1z7F81gE
W1JN8q0cWIEvswnHA3BtQtvbPfGWKgAjynwG7qYbIcX/GHcj0scW/rFP5xSGNqqQ
hNYfaozbUqsSeZESi2p49g3ApYIA1nCeEeFiLKfDHfRHInHW4Vf98Z1e4xZnqsul
Cp63LeXNHc0HXA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:47:07 2026 by rpki-client