Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File:                     Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier:          xImRKRPs4bX5PzkVUcebAzlaRDZ/0UHx6hMmnFFHcxM=
Subject key identifier:   F6:B9:DC:8A:70:89:EB:94:63:E7:67:14:BB:C2:EC:70:22:FD:47:8C
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer:       /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial:       019E921468143EACCD1A7D67B5A3BD525026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number:          14D5
Signing time:             Thu 04 Jun 2026 10:01:11 +0000
Manifest this update:     Thu 04 Jun 2026 10:01:11 +0000
Manifest next update:     Fri 05 Jun 2026 10:01:11 +0000
Files and hashes:         1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: 3nF7VKFH5UXfPfqOvNOX5jUFd5L4pBPNdV4qygI4pdY=)
                          2: o82as8Pp65IOMGZ2l9--UN04jxE.roa (hash: 1ACvBsYWfHGc1kJQlC6LwuaFRNU2JMZS6o4Vp3pXj6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:14:68:14:3e:ac:cd:1a:7d:67:b5:a3:bd:52:50:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
        Validity
            Not Before: Jun  4 10:01:11 2026 GMT
            Not After : Jun  5 10:01:11 2026 GMT
        Subject: CN=f6b9dc8a7089eb9463e76714bbc2ec7022fd478c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:88:ba:77:aa:51:01:24:fb:2e:d9:02:73:
                    d9:68:d8:2d:d8:22:e0:8c:a8:88:3d:0d:78:5f:e7:
                    f4:32:35:63:f9:69:71:a7:ca:d2:db:91:cf:69:bf:
                    ac:9d:fb:13:48:b2:d7:d6:dd:35:57:40:ba:8e:52:
                    9c:72:80:28:25:c4:86:c4:97:81:20:8b:2d:8b:82:
                    1b:c5:33:83:9d:e7:5a:ba:12:ed:fc:db:7c:85:60:
                    76:ab:12:d7:90:03:89:5c:de:e9:fc:75:76:7f:b5:
                    8a:86:86:a2:9e:c1:7f:23:fc:7c:b6:48:58:7b:fe:
                    d2:0e:1b:ac:1c:4f:4a:6b:df:c4:7f:04:4d:c0:61:
                    2d:ab:ec:46:e7:d6:b8:57:fc:b8:26:84:c0:b0:2f:
                    30:21:02:26:75:c2:78:aa:a4:0a:d1:5f:60:68:4c:
                    c3:83:ff:07:d2:cb:3d:6c:d2:54:a4:7e:41:33:04:
                    0c:ef:fc:b4:57:20:5f:46:51:b9:30:91:e4:10:12:
                    9b:9e:fd:e3:66:6e:b9:45:9a:82:7a:c5:cc:de:27:
                    83:a8:cd:6b:e2:21:71:9d:5f:20:b3:ac:e7:db:02:
                    5f:4d:2e:ab:ac:5d:76:ce:ab:91:3c:2c:93:f1:53:
                    64:a1:ed:9c:4b:65:bc:b2:75:13:a8:bd:02:ca:c2:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B9:DC:8A:70:89:EB:94:63:E7:67:14:BB:C2:EC:70:22:FD:47:8C
            X509v3 Authority Key Identifier:
                keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7c:1e:3f:0e:8b:4c:35:72:fa:18:2d:8b:23:71:f0:22:8a:
         8b:eb:93:9c:9f:ca:20:a1:d6:3b:90:6c:d5:09:36:ee:d8:b6:
         6b:ee:9c:4b:9d:c3:cd:4c:55:c2:a2:59:92:aa:58:e5:de:96:
         de:17:d3:25:75:59:45:2b:2b:2a:05:19:98:88:e2:52:7f:e2:
         d5:5b:d8:e7:e4:e4:d5:68:c4:99:af:60:40:b7:3a:35:fb:8a:
         05:34:f7:3a:e8:c3:cb:d5:e6:54:95:c1:89:da:66:9e:b6:73:
         4c:fc:52:f2:ef:1f:77:4b:d1:44:e9:56:8d:73:28:3f:3b:5a:
         79:35:d3:dd:a4:42:24:0e:88:90:37:50:76:3f:a5:f6:27:94:
         1f:0f:10:6d:4e:54:16:86:1d:c3:76:f7:23:64:8d:01:76:27:
         a8:3d:c7:99:83:8e:3e:88:16:17:0f:5a:7c:7f:e0:11:65:8b:
         98:fc:74:cb:2d:1c:a2:41:0d:93:56:3e:02:64:43:e8:a2:9b:
         17:ea:71:fa:dc:30:f6:9c:25:5f:ea:85:17:32:ef:62:09:4f:
         42:bf:81:88:e8:9a:c5:08:6a:fd:e1:7c:6d:31:f5:4c:e9:f5:
         30:4c:fc:ae:0d:2b:78:c0:76:a6:51:51:af:8a:d5:b2:b8:85:
         32:c1:4b:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6SFGgUPqzNGn1ntaO9UlAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzkxYWUyOGE5MWQ1OTkxMzQ2YWVkYWYxN2JmODYwNWM4
Y2YyMmUwHhcNMjYwNjA0MTAwMTExWhcNMjYwNjA1MTAwMTExWjAzMTEwLwYDVQQD
EyhmNmI5ZGM4YTcwODllYjk0NjNlNzY3MTRiYmMyZWM3MDIyZmQ0NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq56IuneqUQEk+y7ZAnPZaNgt2CLg
jKiIPQ14X+f0MjVj+Wlxp8rS25HPab+snfsTSLLX1t01V0C6jlKccoAoJcSGxJeB
IIsti4IbxTODnedauhLt/Nt8hWB2qxLXkAOJXN7p/HV2f7WKhoainsF/I/x8tkhY
e/7SDhusHE9Ka9/EfwRNwGEtq+xG59a4V/y4JoTAsC8wIQImdcJ4qqQK0V9gaEzD
g/8H0ss9bNJUpH5BMwQM7/y0VyBfRlG5MJHkEBKbnv3jZm65RZqCesXM3ieDqM1r
4iFxnV8gs6zn2wJfTS6rrF12zquRPCyT8VNkoe2cS2W8snUTqL0CysIwVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPa53IpwieuUY+dnFLvC7HAi/UeMMB8GA1UdIwQY
MBaAFCc5GuKKkdWZE0au2vF7+GBcjPIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82NjU3OGYtZThiZi00MGUwLWFiMzAt
YTRjMTI4MDc1ODYyLzEvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82NjU3OGYtZThiZi00MGUwLWFiMzAtYTRjMTI4MDc1ODYy
LzEvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnwePw6L
TDVy+hgtiyNx8CKKi+uTnJ/KIKHWO5Bs1Qk27ti2a+6cS53DzUxVwqJZkqpY5d6W
3hfTJXVZRSsrKgUZmIjiUn/i1VvY5+Tk1WjEma9gQLc6NfuKBTT3OujDy9XmVJXB
idpmnrZzTPxS8u8fd0vRROlWjXMoPztaeTXT3aRCJA6IkDdQdj+l9ieUHw8QbU5U
FoYdw3b3I2SNAXYnqD3HmYOOPogWFw9afH/gEWWLmPx0yy0cokENk1Y+AmRD6KKb
F+px+tww9pwlX+qFFzLvYglPQr+BiOiaxQhq/eF8bTH1TOn1MEz8rg0reMB2plFR
r4rVsriFMsFLKw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 16:01:23 2026 by rpki-client