Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
File:                     P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json)
Hash identifier:          IZ+ZQ4rGx+oPU/AjAXXsNNVLRhWefbEGUF/170BR/ws=
Subject key identifier:   6D:36:CD:98:F4:D3:EC:27:D1:C2:0B:CE:EB:C0:61:FB:2B:DC:C7:B9
Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Certificate issuer:       /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Certificate serial:       019F09995388D82F0F8DD95CC68F153669B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
Manifest number:          0242
Signing time:             Sat 27 Jun 2026 15:01:10 +0000
Manifest this update:     Sat 27 Jun 2026 15:01:10 +0000
Manifest next update:     Sun 28 Jun 2026 15:01:10 +0000
Files and hashes:         1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: n66Lu63yxH98iVKuI0PhQ9Yz5d3Bwr3uNYAT0q2QB/0=)
                          2: wiCmzHMmJI0asghERNxqN-MynS0.roa (hash: bcmBxTUeR+yh0Zn1PK7SL7wVYZreCWWh7r4c30KwASE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:09:99:53:88:d8:2f:0f:8d:d9:5c:c6:8f:15:36:69:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
        Validity
            Not Before: Jun 27 15:01:10 2026 GMT
            Not After : Jun 28 15:01:10 2026 GMT
        Subject: CN=6d36cd98f4d3ec27d1c20bceebc061fb2bdcc7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:e4:8b:f0:13:bc:0a:c6:bb:6f:04:44:e5:
                    0a:fe:d4:34:9f:1e:95:61:41:60:7e:74:35:72:39:
                    03:e6:d8:87:1f:2a:00:97:fe:6a:0c:cd:de:34:54:
                    ce:a2:82:a0:ef:38:94:2d:dc:c6:d1:fb:b1:80:c0:
                    cb:9c:08:0e:ff:bd:3b:86:55:87:55:b9:57:4f:51:
                    37:5b:1e:0f:76:9b:ae:a4:29:72:98:c0:f1:5f:af:
                    4f:ad:7a:8b:b7:f9:ba:bd:26:2c:ad:23:3d:5d:11:
                    4a:a6:27:ac:40:8f:42:51:59:8c:3a:c5:21:09:4b:
                    f8:f7:21:f3:41:e7:e0:eb:a1:af:ec:e6:1c:2d:9c:
                    4e:bc:e4:83:a4:63:26:a8:33:b5:7e:28:df:75:7a:
                    ce:2a:a7:c2:38:84:84:5b:11:4c:93:2d:e2:f8:ac:
                    75:a6:1f:01:81:7e:08:20:f2:45:0d:22:14:ad:7b:
                    6d:94:4d:a1:a4:d0:68:5f:c3:08:b0:b3:cb:a2:76:
                    ad:62:12:84:a0:59:d1:96:4d:81:cc:fc:06:52:39:
                    47:ad:72:f3:de:8c:b2:f9:f1:eb:fd:93:1f:05:44:
                    e9:be:e4:f4:7a:af:74:3b:c2:97:cc:5e:bf:6f:90:
                    41:97:2d:9a:82:68:b3:6d:0e:ab:ab:45:6e:2d:9e:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:CD:98:F4:D3:EC:27:D1:C2:0B:CE:EB:C0:61:FB:2B:DC:C7:B9
            X509v3 Authority Key Identifier:
                keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:eb:98:14:a7:29:d1:00:f1:16:9d:48:46:38:b7:b5:69:c2:
         c1:45:fa:c5:74:cb:12:c8:62:f5:c8:00:6f:f1:8d:a2:8d:55:
         78:0c:f4:cb:5d:b7:9b:b1:48:4c:02:a2:b9:fc:43:b9:c7:13:
         63:05:50:b8:d6:e1:66:f7:2c:b8:a2:f9:e3:a9:71:a4:39:19:
         c1:bf:56:7a:e7:e1:9a:04:56:88:b7:9f:37:14:64:f1:14:f5:
         85:4d:e6:31:ed:8a:5a:19:85:ca:01:50:a8:6a:69:5e:76:ff:
         ad:bd:e4:3b:8f:d4:2b:87:30:9c:75:bb:1c:4c:b6:db:27:1d:
         bf:78:4a:2d:27:15:9d:e8:0a:ff:de:19:35:0b:94:fb:4a:a4:
         b1:81:ee:8d:4c:b0:3c:10:93:a7:cb:ef:e8:19:30:65:06:aa:
         29:bc:0f:72:db:f1:9c:36:8f:41:14:84:35:90:76:f6:42:a9:
         d6:2b:c9:e3:98:c7:07:19:75:52:b3:2e:e6:dc:72:57:21:33:
         f4:24:ed:e6:0d:60:d6:fc:99:6d:69:a3:e9:cd:31:74:9b:da:
         45:6d:af:ee:bd:f2:0a:35:cf:17:e6:94:6f:89:78:85:21:e8:
         d9:ce:84:dc:65:aa:b7:f9:8a:01:10:7b:f1:9f:97:b6:a9:d2:
         ed:92:a1:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8JmVOI2C8Pjdlcxo8VNmm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNGJmZTkyZGUxMGU2NjBkZGY0NWNjMmQxZjVmZmI2MzZl
ZjM1OTAwHhcNMjYwNjI3MTUwMTEwWhcNMjYwNjI4MTUwMTEwWjAzMTEwLwYDVQQD
Eyg2ZDM2Y2Q5OGY0ZDNlYzI3ZDFjMjBiY2VlYmMwNjFmYjJiZGNjN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRDki/ATvArGu28EROUK/tQ0nx6V
YUFgfnQ1cjkD5tiHHyoAl/5qDM3eNFTOooKg7ziULdzG0fuxgMDLnAgO/707hlWH
VblXT1E3Wx4PdpuupClymMDxX69PrXqLt/m6vSYsrSM9XRFKpiesQI9CUVmMOsUh
CUv49yHzQefg66Gv7OYcLZxOvOSDpGMmqDO1fijfdXrOKqfCOISEWxFMky3i+Kx1
ph8BgX4IIPJFDSIUrXttlE2hpNBoX8MIsLPLonatYhKEoFnRlk2BzPwGUjlHrXLz
3oyy+fHr/ZMfBUTpvuT0eq90O8KXzF6/b5BBly2agmizbQ6rq0VuLZ4vHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG02zZj00+wn0cILzuvAYfsr3Me5MB8GA1UdIwQY
MBaAFD9L/pLeEOZg3fRcwtH1/7Y27zWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2Yt
Y2U2NDgyZDBmMWI2LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83ZWFjNGYtNzdkZC00MDc3LWFlM2YtY2U2NDgyZDBmMWI2
LzEvUDB2LWt0NFE1bURkOUZ6QzBmWF90amJ2TlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeuYFKcp
0QDxFp1IRji3tWnCwUX6xXTLEshi9cgAb/GNoo1VeAz0y123m7FITAKiufxDuccT
YwVQuNbhZvcsuKL546lxpDkZwb9WeufhmgRWiLefNxRk8RT1hU3mMe2KWhmFygFQ
qGppXnb/rb3kO4/UK4cwnHW7HEy22ycdv3hKLScVnegK/94ZNQuU+0qksYHujUyw
PBCTp8vv6BkwZQaqKbwPctvxnDaPQRSENZB29kKp1ivJ45jHBxl1UrMu5txyVyEz
9CTt5g1g1vyZbWmj6c0xdJvaRW2v7r3yCjXPF+aUb4l4hSHo2c6E3GWqt/mKARB7
8Z+XtqnS7ZKh0g==
-----END CERTIFICATE-----
Generated at Sun Jun 28 01:08:57 2026 by rpki-client