Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File:                     7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier:          O0VsA+oK8XxljiyYWh55xs1ynRfI+6owI80/jNAxI9c=
Subject key identifier:   58:AD:5D:9B:5F:C4:2B:4C:62:7F:94:DE:0A:F3:A4:ED:2E:74:DE:79
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer:       /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial:       019F11C0B7D9258C44265FADB64DA590DF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number:          0617
Signing time:             Mon 29 Jun 2026 05:01:10 +0000
Manifest this update:     Mon 29 Jun 2026 05:01:10 +0000
Manifest next update:     Tue 30 Jun 2026 05:01:10 +0000
Files and hashes:         1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: HGSqS7qZGMTTaJtYFAw2qBODkIsRmsV2znOt4lHjpP0=)
                          2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:b7:d9:25:8c:44:26:5f:ad:b6:4d:a5:90:df:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
        Validity
            Not Before: Jun 29 05:01:10 2026 GMT
            Not After : Jun 30 05:01:10 2026 GMT
        Subject: CN=58ad5d9b5fc42b4c627f94de0af3a4ed2e74de79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:40:7b:f8:4d:b6:c8:5c:7a:f9:93:c4:2c:
                    50:ff:7e:37:30:83:8c:c2:9a:4a:94:f1:be:c3:28:
                    42:d9:7d:e2:78:f8:ed:fd:17:b0:31:30:56:36:d0:
                    51:ac:30:d9:7c:a8:53:d8:8f:9e:b3:bc:8e:41:70:
                    b5:0f:16:07:21:8d:6a:04:2e:60:ae:22:8c:fa:3e:
                    64:c5:0c:56:58:4e:f3:e4:da:17:95:ea:64:d2:9f:
                    31:8c:54:3b:12:04:34:20:9a:61:9c:83:5e:31:76:
                    98:eb:43:c8:cd:87:ce:70:b7:39:5a:5d:0c:2f:cb:
                    d3:77:59:c3:8b:fe:56:5d:c4:3e:3a:4e:b4:07:cb:
                    f0:25:c2:79:77:2a:00:b5:6e:19:e1:cf:40:63:07:
                    b0:9f:a8:2b:29:97:38:f0:bc:43:f7:ca:3a:8e:37:
                    d8:78:64:9c:91:3a:eb:b6:2e:4e:b8:cd:93:ef:6e:
                    66:9a:9f:6d:bc:2a:77:54:7e:fd:3f:94:d3:7d:bd:
                    8d:6e:ab:37:bb:c5:d1:60:8e:d8:ef:5b:34:e5:2b:
                    96:71:c6:39:3e:f2:52:d9:12:65:f5:48:bd:d6:76:
                    6f:f1:1f:a2:30:a9:fa:69:ec:66:7b:0d:a6:4c:29:
                    7a:a4:27:fe:b3:8b:52:56:f8:ec:67:ff:b0:ef:59:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AD:5D:9B:5F:C4:2B:4C:62:7F:94:DE:0A:F3:A4:ED:2E:74:DE:79
            X509v3 Authority Key Identifier:
                keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:d9:26:67:68:77:09:fb:7f:fb:43:80:cd:52:c4:77:c4:
         c1:d4:47:79:d3:9c:0c:a3:c4:c2:05:6c:e7:6a:5e:b9:8e:d5:
         0a:2d:df:f6:d9:74:f9:61:bd:30:13:b1:33:ad:b8:90:fd:b3:
         c6:9a:b5:1d:8f:d6:52:59:be:22:33:33:eb:6b:83:d9:1c:0e:
         f1:1e:8b:e0:df:87:e3:f8:6c:6b:09:d6:05:2b:52:84:35:53:
         f4:d1:18:7f:e2:67:02:84:63:16:4d:a6:50:1c:1b:f0:5b:5b:
         ad:d3:7b:bc:aa:f2:b2:18:56:3e:fd:bb:dc:4b:1f:74:93:bf:
         07:f3:a8:48:02:f0:e6:e7:4e:32:a7:79:e7:44:02:e9:97:bd:
         23:59:0b:80:9e:f2:3a:e8:db:f5:74:f7:f8:f6:0c:1f:4c:99:
         8d:8d:49:87:c7:2f:fb:97:29:5e:b9:ad:68:6d:63:c5:4a:33:
         d0:fc:b8:d2:73:88:41:43:5e:34:52:dd:ac:4b:00:59:17:e8:
         a1:f0:9b:6b:19:08:57:fa:2f:a4:a2:24:bc:5d:de:b7:15:d8:
         87:ec:2e:9b:16:12:1f:90:6b:cb:a1:df:f3:8a:6a:2e:96:d8:
         65:09:1c:cc:d9:1b:de:2c:7f:ea:e6:df:7b:c8:b9:56:66:48:
         8e:75:f9:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwLfZJYxEJl+ttk2lkN8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk
NTQyMTIwHhcNMjYwNjI5MDUwMTEwWhcNMjYwNjMwMDUwMTEwWjAzMTEwLwYDVQQD
Eyg1OGFkNWQ5YjVmYzQyYjRjNjI3Zjk0ZGUwYWYzYTRlZDJlNzRkZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukVAe/hNtshcevmTxCxQ/343MIOM
wppKlPG+wyhC2X3iePjt/RewMTBWNtBRrDDZfKhT2I+es7yOQXC1DxYHIY1qBC5g
riKM+j5kxQxWWE7z5NoXlepk0p8xjFQ7EgQ0IJphnINeMXaY60PIzYfOcLc5Wl0M
L8vTd1nDi/5WXcQ+Ok60B8vwJcJ5dyoAtW4Z4c9AYwewn6grKZc48LxD98o6jjfY
eGSckTrrti5OuM2T725mmp9tvCp3VH79P5TTfb2Nbqs3u8XRYI7Y71s05SuWccY5
PvJS2RJl9Ui91nZv8R+iMKn6aexmew2mTCl6pCf+s4tSVvjsZ/+w71n+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFitXZtfxCtMYn+U3grzpO0udN55MB8GA1UdIwQY
MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt
MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw
LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdXZJmdo
dwn7f/tDgM1SxHfEwdRHedOcDKPEwgVs52peuY7VCi3f9tl0+WG9MBOxM624kP2z
xpq1HY/WUlm+IjMz62uD2RwO8R6L4N+H4/hsawnWBStShDVT9NEYf+JnAoRjFk2m
UBwb8FtbrdN7vKryshhWPv273EsfdJO/B/OoSALw5udOMqd550QC6Ze9I1kLgJ7y
Oujb9XT3+PYMH0yZjY1Jh8cv+5cpXrmtaG1jxUoz0Py40nOIQUNeNFLdrEsAWRfo
ofCbaxkIV/ovpKIkvF3etxXYh+wumxYSH5Bry6Hf84pqLpbYZQkczNkb3ix/6ubf
e8i5VmZIjnX5Tw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:08 2026 by rpki-client