Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File:                     1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier:          2Z3WO8kLQvPsbFCmNFkkJI4ZqnZULlbDeJUHMDg7YjE=
Subject key identifier:   45:FF:3B:A0:62:96:88:64:6A:EE:B1:77:E5:DE:CB:E9:23:B0:3D:13
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       019F17F9D0A3834E83498E21CB0D360D6AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number:          12F4
Signing time:             Tue 30 Jun 2026 10:01:15 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:15 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:15 +0000
Files and hashes:         1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: 3Hcj7xYFBPySxlqJkKRQBupWP/IBeL/6Dv8csQ8e7pc=)
                          2: MNcRXpZmo9U1VGyp7iNoe-ahRYc.roa (hash: sUVdf+DEbppS/mcQWvKY4TguTZDnt2ApNazCAD8Sm+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:d0:a3:83:4e:83:49:8e:21:cb:0d:36:0d:6a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: Jun 30 10:01:15 2026 GMT
            Not After : Jul  1 10:01:15 2026 GMT
        Subject: CN=45ff3ba0629688646aeeb177e5decbe923b03d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:de:db:a3:2a:01:e7:3b:53:ea:af:d0:bb:
                    81:17:76:68:96:35:79:f8:4d:d2:5f:e6:7a:9e:1a:
                    f3:7c:4d:1d:62:44:a5:6d:6c:27:7c:20:79:b0:27:
                    74:57:40:c7:34:75:9b:6f:01:c7:c7:c6:e6:91:b5:
                    d7:4b:18:2d:c0:d2:fd:21:14:95:d7:bc:85:f4:3e:
                    d2:7c:61:78:89:d7:88:19:85:26:06:d1:24:ee:ee:
                    66:7b:16:ef:38:5b:06:52:c7:e7:92:23:b0:24:f6:
                    f5:cc:50:e4:55:25:15:06:06:56:ce:5e:43:72:1b:
                    90:37:3e:59:5c:43:e1:ad:79:6e:70:5d:57:29:86:
                    83:b2:e2:07:86:60:d9:d2:29:4d:78:b9:43:ac:9c:
                    c2:0d:ff:36:5c:7e:34:b4:46:48:77:c2:c9:04:7f:
                    1f:85:91:53:34:bb:83:89:8b:8d:7f:08:0f:de:96:
                    97:a7:10:c5:fd:57:21:60:d8:6b:f6:37:c8:26:67:
                    28:a3:35:5d:07:df:85:e5:2b:58:86:a0:60:e1:95:
                    f5:ea:7b:4e:fc:dd:64:d6:97:6e:9e:07:1d:81:06:
                    c6:83:f6:75:b8:56:78:07:6d:d5:c8:71:64:2a:4b:
                    75:14:1b:32:07:1e:31:f7:40:5f:08:30:c3:32:00:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:3B:A0:62:96:88:64:6A:EE:B1:77:E5:DE:CB:E9:23:B0:3D:13
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:f4:be:c2:06:13:6e:4b:0d:82:7e:49:7f:9e:2f:f0:85:
         a1:43:7c:b2:c2:81:70:a7:68:23:3e:77:cb:22:24:52:ba:7d:
         78:31:e0:d4:0d:65:04:dd:7d:5e:6f:af:45:3d:d9:7e:62:6e:
         b6:c0:7a:85:c7:4a:36:55:09:04:79:ee:ce:48:73:c0:1c:63:
         d9:5c:a6:18:45:bb:90:fd:c1:6a:ba:a5:43:4e:32:07:dd:a5:
         8d:87:27:f2:0d:5c:57:d6:19:44:94:24:19:ab:6b:d7:7f:c3:
         b3:8b:2f:4c:94:75:ce:32:81:c1:04:70:52:77:12:b5:30:62:
         b5:b6:aa:9c:8d:03:82:ae:df:84:15:83:0f:45:93:b7:09:6d:
         73:b9:5b:27:e4:be:f5:0e:16:ef:5b:25:55:57:1a:22:d9:aa:
         82:26:e0:ec:fb:66:52:12:e3:53:61:43:80:98:9c:ff:51:9f:
         49:6c:8d:d3:17:48:65:3d:c3:56:47:be:3c:27:10:cf:3b:1b:
         b5:ab:0b:7a:e2:d9:9f:d8:06:87:ee:2f:96:6f:18:dc:6a:2b:
         1c:d3:8a:21:8c:49:01:68:9f:10:ad:5f:fc:01:eb:26:18:dd:
         1b:00:ab:94:ae:f1:4d:82:77:4a:bb:ce:e8:d8:d1:6e:c0:4e:
         02:09:f2:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+dCjg06DSY4hyw02DWr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz
Yzk3OTYwHhcNMjYwNjMwMTAwMTE1WhcNMjYwNzAxMTAwMTE1WjAzMTEwLwYDVQQD
Eyg0NWZmM2JhMDYyOTY4ODY0NmFlZWIxNzdlNWRlY2JlOTIzYjAzZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNLe26MqAec7U+qv0LuBF3ZoljV5
+E3SX+Z6nhrzfE0dYkSlbWwnfCB5sCd0V0DHNHWbbwHHx8bmkbXXSxgtwNL9IRSV
17yF9D7SfGF4ideIGYUmBtEk7u5mexbvOFsGUsfnkiOwJPb1zFDkVSUVBgZWzl5D
chuQNz5ZXEPhrXlucF1XKYaDsuIHhmDZ0ilNeLlDrJzCDf82XH40tEZId8LJBH8f
hZFTNLuDiYuNfwgP3paXpxDF/VchYNhr9jfIJmcoozVdB9+F5StYhqBg4ZX16ntO
/N1k1pdungcdgQbGg/Z1uFZ4B23VyHFkKkt1FBsyBx4x90BfCDDDMgAbJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX/O6Bilohkau6xd+Xey+kjsD0TMB8GA1UdIwQY
MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt
MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1
LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7L0vsIG
E25LDYJ+SX+eL/CFoUN8ssKBcKdoIz53yyIkUrp9eDHg1A1lBN19Xm+vRT3ZfmJu
tsB6hcdKNlUJBHnuzkhzwBxj2VymGEW7kP3BarqlQ04yB92ljYcn8g1cV9YZRJQk
Gatr13/Ds4svTJR1zjKBwQRwUncStTBitbaqnI0Dgq7fhBWDD0WTtwltc7lbJ+S+
9Q4W71slVVcaItmqgibg7PtmUhLjU2FDgJic/1GfSWyN0xdIZT3DVke+PCcQzzsb
tasLeuLZn9gGh+4vlm8Y3GorHNOKIYxJAWifEK1f/AHrJhjdGwCrlK7xTYJ3SrvO
6NjRbsBOAgnymg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:23 2026 by rpki-client