Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File:                     9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier:          tr43wOt3E2k9NQSE8h4Jqf791E54A5qgICPwz6CYcTc=
Subject key identifier:   CB:1C:42:33:BA:ED:DD:6F:3A:80:EC:0D:72:E8:CD:A6:06:0F:DC:3C
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer:       /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial:       019F194420433AADB1A9430EF0B595E811A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number:          1400
Signing time:             Tue 30 Jun 2026 16:02:02 +0000
Manifest this update:     Tue 30 Jun 2026 16:02:02 +0000
Manifest next update:     Wed 01 Jul 2026 16:02:02 +0000
Files and hashes:         1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: 0YzLficuIwUsoVz871WzZ5I8PApU2q7CgQhfQKUJPkM=)
                          2: Pp5zt8sDQFE1F-esxp6U3Yjfjsg.asa (hash: EIWWFzbGttNeM62hBQJf2Q30ePev4po/PooTILT2BbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:20:43:3a:ad:b1:a9:43:0e:f0:b5:95:e8:11:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
        Validity
            Not Before: Jun 30 16:02:02 2026 GMT
            Not After : Jul  1 16:02:02 2026 GMT
        Subject: CN=cb1c4233baeddd6f3a80ec0d72e8cda6060fdc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:1f:ff:3b:ea:87:e3:fc:2b:25:dd:8d:d4:
                    e2:68:5f:76:79:08:eb:0e:11:ec:10:39:ee:a7:b7:
                    c8:98:24:16:65:be:cc:47:9b:c6:02:00:9b:3a:87:
                    d4:7e:40:ba:f0:6f:ce:02:9e:ea:80:d0:e2:17:bf:
                    9f:3e:4c:53:1e:4f:ac:f0:bf:57:73:6b:6d:e4:da:
                    f0:ec:7a:3e:55:f3:bf:e7:ea:eb:fd:9f:c7:30:8d:
                    35:da:02:65:c0:71:2c:a0:60:b6:f1:57:b6:c8:0c:
                    dd:e0:5f:5b:48:aa:f2:15:7e:ee:89:eb:74:60:e1:
                    52:3d:c4:5e:93:da:f4:20:a5:7d:83:6e:dc:54:59:
                    44:64:d7:dd:81:42:e3:1c:67:79:84:27:ee:c7:2c:
                    a0:30:5c:bf:9c:6c:fa:66:df:7b:05:22:15:31:32:
                    e4:32:98:b6:fc:3d:7b:4f:bb:d4:93:34:1b:1b:35:
                    11:b8:b9:a5:d3:c9:be:0f:d4:88:f5:cc:a9:df:a9:
                    d4:ca:87:d3:a0:f9:e2:96:a4:a1:35:61:99:89:71:
                    5c:a8:75:57:2f:45:af:77:e9:c1:10:0b:d0:b6:35:
                    93:97:6b:45:40:fe:3e:e4:08:30:4c:90:51:1f:b7:
                    f0:d3:a4:b2:f7:e7:3e:df:aa:85:23:68:cc:4c:f0:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1C:42:33:BA:ED:DD:6F:3A:80:EC:0D:72:E8:CD:A6:06:0F:DC:3C
            X509v3 Authority Key Identifier:
                keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:92:f0:82:d4:99:28:42:d9:6d:c4:33:a6:69:ab:ff:69:90:
         12:02:87:ac:5e:3b:e5:82:ee:c0:ec:6d:de:47:8f:10:c1:cd:
         7f:fe:55:5f:aa:eb:37:27:29:9a:30:e9:9f:54:9f:1b:41:29:
         fe:16:57:2e:6e:a8:3f:7f:67:d4:49:7b:9a:85:ba:21:26:cd:
         e3:bb:df:48:a0:6a:e6:de:f0:95:b4:df:a4:7f:1b:a3:8b:42:
         4d:09:3c:96:37:9c:26:57:95:c3:4a:0b:c4:ad:cf:72:67:1a:
         21:22:5d:e0:ce:e4:62:33:af:65:13:59:a6:d8:f5:c5:bf:27:
         93:ad:59:4e:3d:12:e1:ef:c8:e4:3b:dd:2c:84:62:6a:45:2b:
         9e:5d:bd:fd:ef:9b:7d:f7:a1:7a:c1:47:fa:a3:4c:e4:e0:70:
         01:0e:cb:09:8c:d4:4d:17:a7:28:c6:31:e5:bf:b4:e0:ce:4a:
         c0:a5:3f:de:86:61:f7:c3:5a:d1:02:c5:d4:90:42:fc:a8:c7:
         f1:a2:6b:7b:04:95:65:45:dc:dc:e9:75:61:58:52:94:49:80:
         9f:18:87:71:42:80:bb:68:aa:de:04:1a:39:0e:13:a4:bd:37:
         c5:b4:00:c6:91:20:83:f6:9d:20:82:f5:7d:4e:45:79:1b:3d:
         db:e5:2e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZRCBDOq2xqUMO8LWV6BGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MzM4NjljMzY0MmI1ZTdlYTAyMjhiZjBlMGIyOTVjZWZj
YzRkZGYwHhcNMjYwNjMwMTYwMjAyWhcNMjYwNzAxMTYwMjAyWjAzMTEwLwYDVQQD
EyhjYjFjNDIzM2JhZWRkZDZmM2E4MGVjMGQ3MmU4Y2RhNjA2MGZkYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiIf/zvqh+P8KyXdjdTiaF92eQjr
DhHsEDnup7fImCQWZb7MR5vGAgCbOofUfkC68G/OAp7qgNDiF7+fPkxTHk+s8L9X
c2tt5Nrw7Ho+VfO/5+rr/Z/HMI012gJlwHEsoGC28Ve2yAzd4F9bSKryFX7uiet0
YOFSPcRek9r0IKV9g27cVFlEZNfdgULjHGd5hCfuxyygMFy/nGz6Zt97BSIVMTLk
Mpi2/D17T7vUkzQbGzURuLml08m+D9SI9cyp36nUyofToPnilqShNWGZiXFcqHVX
L0Wvd+nBEAvQtjWTl2tFQP4+5AgwTJBRH7fw06Sy9+c+36qFI2jMTPCRIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMscQjO67d1vOoDsDXLozaYGD9w8MB8GA1UdIwQY
MBaAFPYzhpw2QrXn6gIovw4LKVzvzE3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTct
OGM0YmI0NDg1ZjM0LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTctOGM0YmI0NDg1ZjM0
LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZLwgtSZ
KELZbcQzpmmr/2mQEgKHrF475YLuwOxt3kePEMHNf/5VX6rrNycpmjDpn1SfG0Ep
/hZXLm6oP39n1El7moW6ISbN47vfSKBq5t7wlbTfpH8bo4tCTQk8ljecJleVw0oL
xK3PcmcaISJd4M7kYjOvZRNZptj1xb8nk61ZTj0S4e/I5DvdLIRiakUrnl29/e+b
ffehesFH+qNM5OBwAQ7LCYzUTRenKMYx5b+04M5KwKU/3oZh98Na0QLF1JBC/KjH
8aJrewSVZUXc3Ol1YVhSlEmAnxiHcUKAu2iq3gQaOQ4TpL03xbQAxpEgg/adIIL1
fU5FeRs92+Uuuw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:22 2026 by rpki-client