Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File:                     t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier:          GNBqfmGd3SPipvbaDT+eRV5ebLjt4TVWpFbrBW9jmtU=
Subject key identifier:   65:0C:0F:A6:D6:68:F7:15:A4:71:31:5C:FF:E9:F8:B7:5D:FF:8C:06
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer:       /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial:       019EB9586C89D832FFFBE64B67DFD6443996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number:          1280
Signing time:             Fri 12 Jun 2026 01:00:40 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:40 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:40 +0000
Files and hashes:         1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
                          2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: 9eMYJzvsGsrqSjqeu1GQTO/IhU37jw1peZqSZVdfHiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:6c:89:d8:32:ff:fb:e6:4b:67:df:d6:44:39:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
        Validity
            Not Before: Jun 12 01:00:40 2026 GMT
            Not After : Jun 13 01:00:40 2026 GMT
        Subject: CN=650c0fa6d668f715a471315cffe9f8b75dff8c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:50:5f:49:ef:99:23:3e:6c:a9:76:47:c0:
                    14:27:3b:25:fa:88:08:52:2e:cd:1d:e0:e1:f2:0c:
                    3c:dd:4a:14:00:2d:b6:19:95:ce:31:96:4b:4e:bf:
                    ea:b0:18:81:fc:df:19:44:64:56:ff:f9:eb:69:48:
                    0d:0e:30:6c:f4:93:24:cc:2c:10:33:91:82:0c:88:
                    7e:d9:78:d3:dd:52:8f:0f:86:ba:bd:d1:81:4a:23:
                    5a:b9:a4:7c:7a:a1:7d:26:7f:b4:c4:c5:2b:26:ff:
                    d1:58:4d:d2:43:c5:ca:7d:b5:4e:28:c6:19:51:33:
                    ab:82:22:a3:91:f9:29:8c:01:fd:67:3f:21:fc:4d:
                    8b:c3:58:05:a8:3a:65:5e:87:9c:02:f0:84:d0:fc:
                    2e:05:78:02:b1:59:6b:a5:20:78:9b:9c:15:65:f1:
                    f6:47:ea:70:c0:54:26:42:0f:40:12:8f:22:57:a0:
                    c7:ed:a2:f2:d7:80:7c:e5:58:4b:89:08:ba:76:69:
                    02:91:f6:86:ca:b4:23:63:1a:11:c0:b4:39:c2:89:
                    0b:e8:8d:ab:de:ed:4e:c6:9c:be:79:0b:0f:3e:8f:
                    91:e0:35:07:28:f7:89:33:67:62:1a:b1:99:fa:79:
                    d2:be:c4:15:8c:45:7f:c7:9b:d1:e3:82:0a:2b:3d:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0C:0F:A6:D6:68:F7:15:A4:71:31:5C:FF:E9:F8:B7:5D:FF:8C:06
            X509v3 Authority Key Identifier:
                keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cb:5c:34:31:2e:a9:96:c9:5d:af:06:da:4e:2f:ed:92:14:
         2f:9b:8c:69:b1:40:7f:80:b8:1f:03:0b:40:ce:a4:b2:1b:40:
         9c:63:fe:5e:87:4e:64:4f:51:32:c0:da:6a:d7:bd:44:36:55:
         ac:08:e8:24:f6:bf:e4:5f:43:f1:f4:7f:95:e7:cc:88:6d:a5:
         bb:76:6e:44:db:11:ae:bf:5f:b4:a1:ca:ea:ff:14:98:9c:91:
         34:a5:e0:e3:b4:42:a5:4b:15:85:b9:83:13:a4:92:30:3b:49:
         63:5f:32:47:e9:2c:ee:2f:df:04:19:3f:4b:79:d7:7f:1e:07:
         79:c0:e1:91:b4:d4:7b:fb:6e:f1:5f:a4:42:d9:ed:bd:f9:a8:
         38:72:92:17:b7:23:ec:e8:14:82:ce:22:31:ca:d5:1e:74:1e:
         b7:97:40:9f:61:85:67:f4:34:29:e0:bc:83:55:40:8c:d2:32:
         3b:56:e9:ea:6f:89:28:96:5f:6f:79:60:53:79:5b:54:ce:4e:
         6f:46:fc:a1:0f:a0:dc:d5:82:3e:27:7b:83:71:e8:a4:8f:c1:
         17:9b:2b:d7:71:b1:d8:b1:bf:2c:86:d1:5f:ce:e9:e8:ad:67:
         48:11:6c:33:6d:84:34:79:35:a2:51:c2:e0:84:21:26:e1:25:
         a4:06:db:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WGyJ2DL/++ZLZ9/WRDmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0
ZjRkYzAwHhcNMjYwNjEyMDEwMDQwWhcNMjYwNjEzMDEwMDQwWjAzMTEwLwYDVQQD
Eyg2NTBjMGZhNmQ2NjhmNzE1YTQ3MTMxNWNmZmU5ZjhiNzVkZmY4YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KBQX0nvmSM+bKl2R8AUJzsl+ogI
Ui7NHeDh8gw83UoUAC22GZXOMZZLTr/qsBiB/N8ZRGRW//nraUgNDjBs9JMkzCwQ
M5GCDIh+2XjT3VKPD4a6vdGBSiNauaR8eqF9Jn+0xMUrJv/RWE3SQ8XKfbVOKMYZ
UTOrgiKjkfkpjAH9Zz8h/E2Lw1gFqDplXoecAvCE0PwuBXgCsVlrpSB4m5wVZfH2
R+pwwFQmQg9AEo8iV6DH7aLy14B85VhLiQi6dmkCkfaGyrQjYxoRwLQ5wokL6I2r
3u1Oxpy+eQsPPo+R4DUHKPeJM2diGrGZ+nnSvsQVjEV/x5vR44IKKz3KjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUMD6bWaPcVpHExXP/p+Ldd/4wGMB8GA1UdIwQY
MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt
MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz
LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMtcNDEu
qZbJXa8G2k4v7ZIUL5uMabFAf4C4HwMLQM6kshtAnGP+XodOZE9RMsDaate9RDZV
rAjoJPa/5F9D8fR/lefMiG2lu3ZuRNsRrr9ftKHK6v8UmJyRNKXg47RCpUsVhbmD
E6SSMDtJY18yR+ks7i/fBBk/S3nXfx4HecDhkbTUe/tu8V+kQtntvfmoOHKSF7cj
7OgUgs4iMcrVHnQet5dAn2GFZ/Q0KeC8g1VAjNIyO1bp6m+JKJZfb3lgU3lbVM5O
b0b8oQ+g3NWCPid7g3HopI/BF5sr13Gx2LG/LIbRX87p6K1nSBFsM22ENHk1olHC
4IQhJuElpAbbWA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:59:25 2026 by rpki-client