Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File:                     kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier:          xAb0ArZQXh4jrnvQyiZknnl8/Kw0qqNJfV7n0R00AOo=
Subject key identifier:   61:B7:8B:E0:6E:39:04:AB:E7:A7:18:89:BA:00:E3:5D:09:45:E0:96
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer:       /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial:       019F197A6EA23D7E18FBF73CF27D4671477C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number:          135B
Signing time:             Tue 30 Jun 2026 17:01:21 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:21 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:21 +0000
Files and hashes:         1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
                          2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: 0ih3r64U9F2Z+UZE9YRTR5e8muLkjNDb3s7AndjYAo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:6e:a2:3d:7e:18:fb:f7:3c:f2:7d:46:71:47:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
        Validity
            Not Before: Jun 30 17:01:21 2026 GMT
            Not After : Jul  1 17:01:21 2026 GMT
        Subject: CN=61b78be06e3904abe7a71889ba00e35d0945e096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:6f:37:53:85:d0:97:d5:84:76:0b:97:84:
                    f2:71:c4:70:f5:39:bb:26:13:75:c3:4d:47:12:f3:
                    ad:66:99:5e:98:ee:99:11:89:80:d3:7f:65:77:75:
                    b8:b5:01:b2:0f:b5:2f:2e:09:fa:4b:a6:95:89:d4:
                    0d:22:1b:de:ea:45:f8:36:c3:31:d2:2e:18:f3:9f:
                    74:91:7c:6a:8c:cf:d0:28:98:f7:58:0c:5c:d1:f3:
                    9c:bc:5a:01:40:e5:6c:bd:24:52:90:03:f0:ba:5a:
                    ad:93:46:d3:97:38:0e:c7:6f:b4:dc:17:19:cd:b1:
                    3b:96:57:15:8f:7f:6d:41:31:ad:23:54:66:80:48:
                    2a:6c:15:69:90:48:4a:08:2e:39:19:e1:2e:16:07:
                    a7:9d:90:f5:92:6d:e0:5b:07:bf:03:96:6d:a6:a0:
                    81:81:12:b7:b7:fd:ba:1a:5e:f4:fb:df:1d:e6:f5:
                    01:f1:05:59:95:77:a3:1d:a4:20:da:6c:15:3e:6e:
                    f6:a2:98:cd:6a:7b:40:b0:b4:46:f7:bb:25:8e:3c:
                    85:eb:2a:17:f1:ed:c7:d1:38:23:21:59:c9:55:2a:
                    a1:65:01:ad:00:3b:5f:cb:00:78:b3:21:56:e9:bf:
                    b6:eb:ae:21:d8:a4:52:a8:84:12:5b:85:50:aa:8a:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B7:8B:E0:6E:39:04:AB:E7:A7:18:89:BA:00:E3:5D:09:45:E0:96
            X509v3 Authority Key Identifier:
                keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:08:57:38:07:10:da:32:4a:5f:cc:02:96:c1:90:67:72:45:
         c4:95:40:27:d3:ad:ff:40:87:f9:6f:70:86:22:80:6e:53:71:
         1b:92:18:fb:ae:c2:e8:19:02:b5:6f:7c:65:63:36:2d:19:f4:
         c0:91:81:d1:83:0f:98:cb:c6:af:0d:a8:ce:29:cb:07:60:96:
         22:35:c0:cd:3d:15:06:db:f7:7c:1c:14:4f:3a:ad:b1:dc:a2:
         00:5b:64:ca:17:16:8c:9a:af:8c:da:03:a4:03:1d:fb:0c:6a:
         10:52:65:9a:eb:c5:7c:ad:c9:9d:a1:18:e3:c3:93:89:55:51:
         8a:5f:2b:7a:49:45:14:a3:21:71:35:62:e6:8c:73:a9:01:22:
         3a:f6:b0:a3:b6:d5:74:ed:fb:58:54:2c:e8:7e:81:a9:28:7f:
         34:04:25:35:52:5b:4a:16:0e:4c:2c:9a:68:0a:b4:b8:b8:7f:
         2f:1f:19:83:76:91:f0:58:12:71:4d:d4:d7:c9:05:ff:80:42:
         f6:3b:08:0d:9f:00:36:3e:c7:0e:79:9e:d1:94:d8:5b:94:15:
         ac:6d:d1:9d:5f:b7:47:09:d8:67:7f:ee:f2:5a:ea:a1:54:01:
         b4:93:70:e4:59:43:a2:39:f6:b6:e4:2d:28:36:11:31:15:90:
         b3:8a:81:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Zem6iPX4Y+/c88n1GcUd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj
ZWZjNzYwHhcNMjYwNjMwMTcwMTIxWhcNMjYwNzAxMTcwMTIxWjAzMTEwLwYDVQQD
Eyg2MWI3OGJlMDZlMzkwNGFiZTdhNzE4ODliYTAwZTM1ZDA5NDVlMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlhvN1OF0JfVhHYLl4TyccRw9Tm7
JhN1w01HEvOtZplemO6ZEYmA039ld3W4tQGyD7UvLgn6S6aVidQNIhve6kX4NsMx
0i4Y8590kXxqjM/QKJj3WAxc0fOcvFoBQOVsvSRSkAPwulqtk0bTlzgOx2+03BcZ
zbE7llcVj39tQTGtI1RmgEgqbBVpkEhKCC45GeEuFgennZD1km3gWwe/A5ZtpqCB
gRK3t/26Gl70+98d5vUB8QVZlXejHaQg2mwVPm72opjNantAsLRG97sljjyF6yoX
8e3H0TgjIVnJVSqhZQGtADtfywB4syFW6b+2664h2KRSqIQSW4VQqornswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG3i+BuOQSr56cYiboA410JReCWMB8GA1UdIwQY
MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct
MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx
LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwhXOAcQ
2jJKX8wClsGQZ3JFxJVAJ9Ot/0CH+W9whiKAblNxG5IY+67C6BkCtW98ZWM2LRn0
wJGB0YMPmMvGrw2ozinLB2CWIjXAzT0VBtv3fBwUTzqtsdyiAFtkyhcWjJqvjNoD
pAMd+wxqEFJlmuvFfK3JnaEY48OTiVVRil8reklFFKMhcTVi5oxzqQEiOvawo7bV
dO37WFQs6H6BqSh/NAQlNVJbShYOTCyaaAq0uLh/Lx8Zg3aR8FgScU3U18kF/4BC
9jsIDZ8ANj7HDnme0ZTYW5QVrG3RnV+3RwnYZ3/u8lrqoVQBtJNw5FlDojn2tuQt
KDYRMRWQs4qBFA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:23 2026 by rpki-client