Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
File:                     JvRVgKY2EDzJWr6BCg0GkouaDd8.mft (raw, json)
Hash identifier:          tlHXzmZm28GZNakBHxmD4gli9+Nzpee+TtEoMF5X90A=
Subject key identifier:   14:F4:50:AF:53:25:ED:1F:88:D7:45:02:34:AB:02:EC:64:A7:4D:30
Authority key identifier: 26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
Certificate issuer:       /CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Certificate serial:       019EB9C69F410D6BFFA7127B632ADFE22268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
Manifest number:          011C
Signing time:             Fri 12 Jun 2026 03:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 03:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 03:01:02 +0000
Files and hashes:         1: JvRVgKY2EDzJWr6BCg0GkouaDd8.crl (hash: ljeH5A0hMj/Wqr30D2LnbdhAD5qbFns8b/DnjAHMd5s=)
                          2: w-nnLB0gJHLqHYNGFppYN7WkZFM.roa (hash: QK4oKJXySakBc6G1Ar7UfRyPt44Ci6G96TsVap7g1D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:9f:41:0d:6b:ff:a7:12:7b:63:2a:df:e2:22:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f45580a636103cc95abe810a0d06928b9a0ddf
        Validity
            Not Before: Jun 12 03:01:02 2026 GMT
            Not After : Jun 13 03:01:02 2026 GMT
        Subject: CN=14f450af5325ed1f88d7450234ab02ec64a74d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:68:f2:80:60:0b:9d:26:c1:8a:84:27:f0:
                    89:fc:5a:32:e6:22:68:47:90:e8:84:11:47:dc:34:
                    83:bb:1d:7f:37:50:d2:6c:ca:c0:9c:f4:55:85:a4:
                    28:e4:77:41:ea:e0:81:28:5a:6c:09:bb:a1:59:3c:
                    a0:5a:c5:ef:28:39:c9:5f:a3:79:d8:ca:03:13:71:
                    e4:54:f5:f7:f4:7c:37:c5:a9:08:f6:80:2b:61:64:
                    ff:27:0d:9b:ac:5b:d9:08:a7:25:72:33:cb:5b:9a:
                    c2:12:89:18:34:a6:85:56:1d:c3:05:5d:27:e5:ed:
                    01:5a:9f:13:60:5e:3f:23:37:96:a1:7a:3c:55:64:
                    ed:25:9e:fc:41:1e:5d:cd:e0:72:72:7f:8b:5f:aa:
                    4b:4e:bf:98:6d:59:11:4a:d5:53:1f:c8:c1:73:7d:
                    6d:ab:39:a5:ce:8e:6c:3e:32:48:d6:54:ba:fc:4c:
                    49:3a:16:76:a9:5e:6e:84:14:19:ea:c9:66:51:c3:
                    5f:bf:ce:ec:21:86:62:87:eb:08:c3:a5:bd:02:5f:
                    06:da:a5:ab:36:18:bb:0d:6d:b2:f7:cc:8f:17:68:
                    fb:26:05:87:ee:25:5c:b9:f0:cb:85:61:56:ef:9e:
                    82:81:aa:d5:43:10:c9:53:ee:97:1d:1c:b7:85:45:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F4:50:AF:53:25:ED:1F:88:D7:45:02:34:AB:02:EC:64:A7:4D:30
            X509v3 Authority Key Identifier:
                keyid:26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:81:fc:cc:d7:4c:e0:d3:e7:9a:15:9d:d5:7e:a2:bf:ff:
         c2:15:63:b0:ac:6f:a1:b3:69:91:66:c5:9d:22:7f:72:a6:44:
         dc:0d:1a:6e:56:46:1a:0e:33:85:bd:b3:bc:eb:9c:5e:30:d8:
         5d:36:d1:00:6d:82:0c:82:e0:2f:7f:f2:4c:7c:0f:f1:bc:f4:
         da:22:53:4f:1c:bb:97:38:79:4f:fe:84:d4:61:b3:c3:f5:a2:
         cb:0b:58:a5:b1:86:d8:a9:1b:a8:55:69:1e:2c:21:61:cd:65:
         3f:d9:d1:71:a4:aa:ac:06:8b:b2:e4:67:e3:3a:dd:49:aa:64:
         59:02:1b:94:8d:2a:03:9e:c0:9c:ba:ef:98:06:c8:80:9f:cf:
         fb:65:5b:f0:f3:c7:33:f3:cc:ba:ba:a4:5c:b2:6d:f4:46:ec:
         02:03:13:d0:47:6d:20:8c:bb:6a:14:82:e1:aa:65:bc:76:aa:
         71:4b:08:f2:56:1e:01:99:0a:e8:41:5b:d4:aa:e5:3d:c8:9c:
         20:fe:a3:d1:aa:c7:4c:c2:89:4f:4e:07:53:1a:6f:35:8b:f6:
         cd:b7:d4:c8:d6:90:9e:2a:0f:42:f4:ac:f6:1a:2f:78:c6:ec:
         56:5d:d5:34:d5:e0:2b:84:3e:b1:89:3d:b0:a4:0d:16:f2:d3:
         d2:58:32:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xp9BDWv/pxJ7Yyrf4iJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjQ1NTgwYTYzNjEwM2NjOTVhYmU4MTBhMGQwNjkyOGI5
YTBkZGYwHhcNMjYwNjEyMDMwMTAyWhcNMjYwNjEzMDMwMTAyWjAzMTEwLwYDVQQD
EygxNGY0NTBhZjUzMjVlZDFmODhkNzQ1MDIzNGFiMDJlYzY0YTc0ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVRo8oBgC50mwYqEJ/CJ/Foy5iJo
R5DohBFH3DSDux1/N1DSbMrAnPRVhaQo5HdB6uCBKFpsCbuhWTygWsXvKDnJX6N5
2MoDE3HkVPX39Hw3xakI9oArYWT/Jw2brFvZCKclcjPLW5rCEokYNKaFVh3DBV0n
5e0BWp8TYF4/IzeWoXo8VWTtJZ78QR5dzeBycn+LX6pLTr+YbVkRStVTH8jBc31t
qzmlzo5sPjJI1lS6/ExJOhZ2qV5uhBQZ6slmUcNfv87sIYZih+sIw6W9Al8G2qWr
Nhi7DW2y98yPF2j7JgWH7iVcufDLhWFW756CgarVQxDJU+6XHRy3hUU5xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT0UK9TJe0fiNdFAjSrAuxkp00wMB8GA1UdIwQY
MBaAFCb0VYCmNhA8yVq+gQoNBpKLmg3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZSVmdLWTJFRHpKV3I2QkNnMEdrb3VhRGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZGM2ZDctZjdlOC00ZDkyLTkyOTIt
NzY0MTljYTY3MzJlLzEvSnZSVmdLWTJFRHpKV3I2QkNnMEdrb3VhRGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZGM2ZDctZjdlOC00ZDkyLTkyOTItNzY0MTljYTY3MzJl
LzEvSnZSVmdLWTJFRHpKV3I2QkNnMEdrb3VhRGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7KB/MzX
TODT55oVndV+or//whVjsKxvobNpkWbFnSJ/cqZE3A0ablZGGg4zhb2zvOucXjDY
XTbRAG2CDILgL3/yTHwP8bz02iJTTxy7lzh5T/6E1GGzw/WiywtYpbGG2KkbqFVp
HiwhYc1lP9nRcaSqrAaLsuRn4zrdSapkWQIblI0qA57AnLrvmAbIgJ/P+2Vb8PPH
M/PMurqkXLJt9EbsAgMT0EdtIIy7ahSC4aplvHaqcUsI8lYeAZkK6EFb1KrlPcic
IP6j0arHTMKJT04HUxpvNYv2zbfUyNaQnioPQvSs9hoveMbsVl3VNNXgK4Q+sYk9
sKQNFvLT0lgyWQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:29:22 2026 by rpki-client