Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          eENYK4tOEuk/ynnLlUz4Pp/slcjUv6Gnf6fs0I4OccY=
Subject key identifier:   02:C8:D7:0F:EF:30:D7:31:D7:2B:02:3F:D3:7B:38:AC:F9:94:2A:C7
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       019EBE7EB490DF2FE2C82BA25A4302D567EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          0703
Signing time:             Sat 13 Jun 2026 01:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:35 +0000
Files and hashes:         1: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: /3wU64zxk89wQ9pn3D0o0PKMCs8mOZuk/7yPEQ7Am3E=)
                          2: z_44jtrGJfD6zh9PidW-GJCCXns.roa (hash: wkQhSLVYP9oo4jjQ5UZW99eD0rUSG+lto+V5IH7d35w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:b4:90:df:2f:e2:c8:2b:a2:5a:43:02:d5:67:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Jun 13 01:00:35 2026 GMT
            Not After : Jun 14 01:00:35 2026 GMT
        Subject: CN=02c8d70fef30d731d72b023fd37b38acf9942ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:0e:0a:96:80:6b:e8:67:2f:f9:42:51:cf:
                    b6:94:f3:d4:02:49:79:c7:67:9e:9c:dc:66:cb:6d:
                    f8:ae:81:6d:5e:21:f1:45:b4:4f:27:91:c2:85:1d:
                    4e:6e:bc:f0:9e:93:57:aa:3c:25:11:48:fd:80:dc:
                    16:0e:b2:8f:96:3f:59:59:84:a0:af:ae:f3:51:a7:
                    08:a1:6c:57:46:b3:a3:3a:be:a2:ed:18:52:ca:fd:
                    0b:ac:4a:23:b9:5d:e3:0d:35:5e:bd:1b:15:1d:b2:
                    d7:db:f5:9d:b0:0f:bc:80:f6:66:58:ab:a4:9d:15:
                    5e:37:27:ad:e1:52:a9:0c:08:8f:4f:6b:e6:12:29:
                    02:69:cd:a1:57:6a:d5:e1:e1:bf:a5:ed:17:14:e5:
                    a3:c6:7a:2f:1d:00:c6:98:9d:88:d3:c5:18:98:49:
                    06:06:21:a8:a9:f9:79:0e:78:56:21:19:ad:74:26:
                    0a:e5:03:12:93:8e:a1:d5:60:24:56:2e:fa:0e:e5:
                    7d:ec:f9:ea:d0:6f:d9:d1:9d:66:97:af:b5:fd:41:
                    1f:f0:77:a9:30:b5:60:2e:36:5d:4a:0b:f8:81:a8:
                    d4:cc:ff:42:a7:7a:cf:ef:c4:8e:18:9d:de:8f:c4:
                    64:d1:8f:1d:d4:86:9c:49:60:62:2e:a1:f4:5e:e5:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C8:D7:0F:EF:30:D7:31:D7:2B:02:3F:D3:7B:38:AC:F9:94:2A:C7
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f4:3f:23:47:00:17:ce:5c:d0:b0:c9:48:c4:3a:20:b1:4d:
         a6:f0:8e:f0:b2:e0:09:00:3d:a0:2f:e1:9a:8b:2c:e0:f3:87:
         02:bf:2e:f4:31:77:69:70:05:63:68:05:92:81:e2:30:6b:27:
         1d:4a:cd:f8:b5:1a:21:79:cc:7d:2e:32:3b:b6:72:8e:6b:26:
         c3:3d:8f:d0:ec:34:f1:e2:81:0d:18:fe:55:1d:e0:8e:fc:6f:
         09:6c:c9:1f:c4:28:dc:d0:2d:0c:ce:e4:48:22:f4:dc:a4:5d:
         b7:47:45:2a:85:67:b4:38:ac:38:58:06:0a:ff:02:4f:64:fd:
         68:f7:fe:52:97:18:1b:f3:14:da:a9:22:e1:90:ca:8d:25:30:
         9b:d5:10:75:fe:67:4a:43:48:18:73:1c:52:9f:43:bf:f8:2a:
         d2:9a:11:80:17:85:49:45:20:18:7d:37:d1:f4:f1:84:f9:f4:
         b8:30:d0:13:15:bc:4d:48:7e:90:02:02:59:f8:4f:a4:2c:61:
         ed:f8:a2:56:14:eb:0a:f6:a3:69:5b:15:f6:e7:ad:d4:b2:ef:
         f6:35:bd:df:e8:d7:29:e9:ec:98:3f:ea:7f:8e:80:32:5d:f3:
         7f:df:af:37:42:c3:7c:28:cc:77:0a:a7:ef:bf:99:ce:32:b7:
         fc:8a:c9:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+frSQ3y/iyCuiWkMC1WfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Njk5ZTAwYzExNzUxZDAxYjM1ZTM1ZmMwMjk3ZGEyNmVh
Yzc5ZWEwHhcNMjYwNjEzMDEwMDM1WhcNMjYwNjE0MDEwMDM1WjAzMTEwLwYDVQQD
EygwMmM4ZDcwZmVmMzBkNzMxZDcyYjAyM2ZkMzdiMzhhY2Y5OTQyYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4EOCpaAa+hnL/lCUc+2lPPUAkl5
x2eenNxmy234roFtXiHxRbRPJ5HChR1ObrzwnpNXqjwlEUj9gNwWDrKPlj9ZWYSg
r67zUacIoWxXRrOjOr6i7RhSyv0LrEojuV3jDTVevRsVHbLX2/WdsA+8gPZmWKuk
nRVeNyet4VKpDAiPT2vmEikCac2hV2rV4eG/pe0XFOWjxnovHQDGmJ2I08UYmEkG
BiGoqfl5DnhWIRmtdCYK5QMSk46h1WAkVi76DuV97Pnq0G/Z0Z1ml6+1/UEf8Hep
MLVgLjZdSgv4gajUzP9Cp3rP78SOGJ3ej8Rk0Y8d1IacSWBiLqH0XuV2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALI1w/vMNcx1ysCP9N7OKz5lCrHMB8GA1UdIwQY
MBaAFJhpngDBF1HQGzXjX8ApfaJurHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYt
NzYxNTFiYjk3MTlkLzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYtNzYxNTFiYjk3MTlk
LzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPQ/I0cA
F85c0LDJSMQ6ILFNpvCO8LLgCQA9oC/hmoss4POHAr8u9DF3aXAFY2gFkoHiMGsn
HUrN+LUaIXnMfS4yO7Zyjmsmwz2P0Ow08eKBDRj+VR3gjvxvCWzJH8Qo3NAtDM7k
SCL03KRdt0dFKoVntDisOFgGCv8CT2T9aPf+UpcYG/MU2qki4ZDKjSUwm9UQdf5n
SkNIGHMcUp9Dv/gq0poRgBeFSUUgGH030fTxhPn0uDDQExW8TUh+kAICWfhPpCxh
7fiiVhTrCvajaVsV9uet1LLv9jW93+jXKensmD/qf46AMl3zf9+vN0LDfCjMdwqn
77+ZzjK3/IrJRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:14:12 2026 by rpki-client