Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File:                     aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier:          gfOlI/HzUjUPDoazNLKUz4CxtEhQQo1siXIiwnsmehQ=
Subject key identifier:   F2:72:FC:97:5C:5E:C1:99:B9:3F:11:F1:FB:9A:EF:13:29:4D:40:01
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer:       /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial:       019EB9FD7DBD62AEEC6A2594F0A4E6A95DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number:          18E9
Signing time:             Fri 12 Jun 2026 04:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:58 +0000
Files and hashes:         1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: 2anhzwzuwFWdWOw2fKkblzqn8PtQDgeXQgqQwXlO6w8=)
                          2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:7d:bd:62:ae:ec:6a:25:94:f0:a4:e6:a9:5d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
        Validity
            Not Before: Jun 12 04:00:58 2026 GMT
            Not After : Jun 13 04:00:58 2026 GMT
        Subject: CN=f272fc975c5ec199b93f11f1fb9aef13294d4001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:6a:ba:75:43:69:cc:30:58:80:96:21:d5:
                    fc:7a:62:91:ae:6f:1e:7e:99:ba:ea:af:c7:1e:3a:
                    e3:c1:b2:a3:3b:93:24:cd:60:6b:76:ea:1d:ba:ec:
                    b6:c6:6b:f8:95:18:9b:bf:d2:e2:9a:fd:11:37:08:
                    86:2c:2f:46:fe:47:93:bc:75:10:96:0d:31:81:3a:
                    8f:94:70:42:3c:f7:be:02:fc:d2:a0:a0:29:5b:84:
                    19:bc:9b:a7:07:9d:6b:51:f5:db:fd:ec:a0:54:47:
                    64:9f:97:d7:67:7c:c4:32:be:10:3a:a4:fc:2b:4d:
                    fe:3d:b5:a1:f9:17:a7:ac:2b:ef:f4:02:0c:3a:0f:
                    10:c2:31:4a:7c:10:11:ff:88:94:c7:32:9c:7f:e0:
                    0e:90:fa:4c:07:97:7e:e0:67:c1:41:cc:f3:1d:55:
                    c4:86:c6:fa:75:36:1e:a8:51:30:e3:d4:af:02:94:
                    b6:18:99:e4:5f:35:d5:69:6e:5a:6e:48:7f:25:bc:
                    bd:ec:ee:20:d5:1a:f7:87:71:dd:1d:87:c0:13:93:
                    ad:e9:a7:40:49:42:41:d5:ac:99:b4:dc:af:42:0a:
                    4d:d5:89:6e:7a:48:06:64:0e:82:5f:d0:69:20:93:
                    27:18:8c:1f:42:52:5e:21:24:01:d7:de:a4:a3:30:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:72:FC:97:5C:5E:C1:99:B9:3F:11:F1:FB:9A:EF:13:29:4D:40:01
            X509v3 Authority Key Identifier:
                keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:95:47:27:70:cb:6c:4e:fe:99:41:2f:7a:fa:c1:27:ee:a6:
         7f:af:54:8f:ad:3f:08:aa:64:0d:82:2d:49:92:bf:67:db:3c:
         19:52:47:09:12:06:3f:44:3c:a4:b8:6c:1c:6e:b7:bc:82:a9:
         3a:4c:ee:fd:ce:1e:ca:09:cc:ec:21:a3:34:6e:eb:a6:66:29:
         03:f7:a6:63:90:df:84:62:08:c5:37:32:12:40:4a:9c:e2:b7:
         a2:f3:69:7c:5d:c3:3a:7b:eb:0b:60:1a:af:c2:ca:73:1d:38:
         aa:ae:05:db:1b:83:51:98:cb:9c:5f:f0:c0:56:f8:22:cb:9a:
         1b:95:52:f4:6d:86:3d:3a:71:c0:c5:e7:b0:5f:21:ec:57:18:
         8b:3f:f1:70:73:81:f0:95:c1:b8:89:c0:54:bf:7e:5b:e3:d3:
         8b:0c:18:82:cd:cb:2b:60:ba:2c:af:2d:49:46:64:b8:0a:0d:
         e7:78:95:8c:f1:36:a0:3f:67:8d:4c:ab:00:2a:cf:2c:97:74:
         b4:14:31:b8:71:48:c8:6e:6d:f6:18:79:11:9a:87:36:54:f3:
         d6:8c:43:0f:6d:d0:0e:82:39:9b:1d:6d:1d:09:b3:f9:b5:1e:
         70:8e:f5:e6:38:50:3b:d3:fd:63:7c:bf:07:d9:5b:32:0b:fe:
         23:f8:d1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/X29Yq7saiWU8KTmqV2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjYwNjEyMDQwMDU4WhcNMjYwNjEzMDQwMDU4WjAzMTEwLwYDVQQD
EyhmMjcyZmM5NzVjNWVjMTk5YjkzZjExZjFmYjlhZWYxMzI5NGQ0MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv1qunVDacwwWICWIdX8emKRrm8e
fpm66q/HHjrjwbKjO5MkzWBrduoduuy2xmv4lRibv9Limv0RNwiGLC9G/keTvHUQ
lg0xgTqPlHBCPPe+AvzSoKApW4QZvJunB51rUfXb/eygVEdkn5fXZ3zEMr4QOqT8
K03+PbWh+RenrCvv9AIMOg8QwjFKfBAR/4iUxzKcf+AOkPpMB5d+4GfBQczzHVXE
hsb6dTYeqFEw49SvApS2GJnkXzXVaW5abkh/Jby97O4g1Rr3h3HdHYfAE5Ot6adA
SUJB1ayZtNyvQgpN1YluekgGZA6CX9BpIJMnGIwfQlJeISQB196kozAkSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJy/JdcXsGZuT8R8fua7xMpTUABMB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpVHJ3DL
bE7+mUEvevrBJ+6mf69Uj60/CKpkDYItSZK/Z9s8GVJHCRIGP0Q8pLhsHG63vIKp
Okzu/c4eygnM7CGjNG7rpmYpA/emY5DfhGIIxTcyEkBKnOK3ovNpfF3DOnvrC2Aa
r8LKcx04qq4F2xuDUZjLnF/wwFb4IsuaG5VS9G2GPTpxwMXnsF8h7FcYiz/xcHOB
8JXBuInAVL9+W+PTiwwYgs3LK2C6LK8tSUZkuAoN53iVjPE2oD9njUyrACrPLJd0
tBQxuHFIyG5t9hh5EZqHNlTz1oxDD23QDoI5mx1tHQmz+bUecI715jhQO9P9Y3y/
B9lbMgv+I/jRBw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:12 2026 by rpki-client