Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File:                     aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier:          4Qx6A13VRFPYh92vYsfslP3rxaWn9dcPQAMjwcgJ71M=
Subject key identifier:   80:36:CF:8A:76:51:2A:81:06:1E:2B:59:51:E5:EA:F5:39:4A:35:8E
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer:       /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial:       019EB732F5D7CCAC052030CA49D1A8AC5A11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 15:00:30 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:30 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:30 +0000
Files and hashes:         1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: 394My/atpxoSv7qmVPbFPPunpu5BzuZaiE9IGTDNz14=)
                          2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:32:f5:d7:cc:ac:05:20:30:ca:49:d1:a8:ac:5a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
        Validity
            Not Before: Jun 11 15:00:30 2026 GMT
            Not After : Jun 12 15:00:30 2026 GMT
        Subject: CN=8036cf8a76512a81061e2b5951e5eaf5394a358e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:10:c1:dc:72:e9:54:08:c5:17:44:ce:d8:
                    bd:bf:a4:25:0b:92:23:cf:25:ee:b3:bb:71:a9:af:
                    65:17:12:1e:e0:6d:ab:6f:10:92:07:0b:7f:63:c4:
                    fc:8b:b3:e6:fe:34:e7:56:d3:4b:c1:4b:bd:33:c8:
                    89:9d:2c:6b:e3:60:67:4d:0e:b2:0d:13:42:df:02:
                    8f:3b:08:48:1a:8c:3d:00:9e:ba:49:39:1b:4f:a9:
                    7d:53:4e:7a:4e:db:50:52:83:1b:bf:58:22:14:58:
                    aa:79:c3:27:0f:a2:75:19:6a:35:b6:0b:12:e8:d8:
                    13:79:31:ca:63:eb:32:93:5b:c1:16:a3:02:8b:41:
                    a3:c5:90:0b:14:02:1d:21:7a:d1:f0:50:18:15:49:
                    52:98:fc:21:76:8c:bf:fc:b0:d8:47:06:b0:06:f7:
                    b2:30:73:ba:92:11:9e:fe:ea:1c:2b:b5:c8:40:c5:
                    ad:02:21:4b:de:ad:f0:c0:54:fb:c7:63:e5:b2:aa:
                    a2:59:98:ba:35:7b:42:4b:ba:05:37:d2:c2:c7:5c:
                    62:94:ee:ed:96:ba:90:d0:ea:d0:c0:36:01:92:17:
                    48:46:d9:13:67:54:00:b6:d1:c6:7d:42:5d:ed:c0:
                    83:ae:35:5f:52:33:11:ff:0f:1c:bb:a3:04:e9:33:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:36:CF:8A:76:51:2A:81:06:1E:2B:59:51:E5:EA:F5:39:4A:35:8E
            X509v3 Authority Key Identifier:
                keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:23:ef:0b:a9:ce:13:0c:85:45:22:9a:c4:38:01:0b:0c:32:
         8d:8c:de:c2:20:70:b2:57:5d:3c:4c:12:5b:5a:87:8f:96:c6:
         07:ad:f8:e9:18:80:5f:a2:d0:86:06:21:0d:d0:b6:97:8b:91:
         7c:fc:1a:d7:a4:17:8f:fd:f2:65:ba:fe:71:3b:bd:c8:3f:ef:
         1b:a5:3c:9b:17:58:61:26:7f:a1:84:27:3a:b5:46:22:27:67:
         8d:b7:70:ef:0c:0b:f9:d2:19:3e:db:f9:46:b0:37:d4:cd:49:
         5f:3e:f0:78:14:fb:be:aa:65:b8:e7:2f:f6:1d:22:03:7d:31:
         91:62:b3:81:e2:74:4b:3c:af:1d:6a:3e:43:be:4d:00:f4:cd:
         ad:91:d4:32:02:a0:5b:f6:fd:5a:4f:ae:30:52:76:06:33:89:
         26:82:f0:ec:0f:18:ce:e1:85:26:db:54:29:bc:15:ee:35:ea:
         fe:de:10:ae:a1:9f:3a:74:26:18:48:e4:b8:82:50:fe:d5:8f:
         7a:d8:68:a0:fb:70:e8:25:1e:f2:4e:88:ac:1f:6c:a6:e3:05:
         d6:cc:9d:0d:bc:27:76:cb:4c:39:ff:e9:8a:fd:3b:4f:f5:69:
         16:16:d0:23:ec:f9:75:8d:43:72:32:ef:60:aa:5f:2b:4a:b1:
         6b:07:c9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63MvXXzKwFIDDKSdGorFoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjYwNjExMTUwMDMwWhcNMjYwNjEyMTUwMDMwWjAzMTEwLwYDVQQD
Eyg4MDM2Y2Y4YTc2NTEyYTgxMDYxZTJiNTk1MWU1ZWFmNTM5NGEzNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJgQwdxy6VQIxRdEzti9v6QlC5Ij
zyXus7txqa9lFxIe4G2rbxCSBwt/Y8T8i7Pm/jTnVtNLwUu9M8iJnSxr42BnTQ6y
DRNC3wKPOwhIGow9AJ66STkbT6l9U056TttQUoMbv1giFFiqecMnD6J1GWo1tgsS
6NgTeTHKY+syk1vBFqMCi0GjxZALFAIdIXrR8FAYFUlSmPwhdoy//LDYRwawBvey
MHO6khGe/uocK7XIQMWtAiFL3q3wwFT7x2PlsqqiWZi6NXtCS7oFN9LCx1xilO7t
lrqQ0OrQwDYBkhdIRtkTZ1QAttHGfUJd7cCDrjVfUjMR/w8cu6ME6TOTiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA2z4p2USqBBh4rWVHl6vU5SjWOMB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCPvC6nO
EwyFRSKaxDgBCwwyjYzewiBwslddPEwSW1qHj5bGB6346RiAX6LQhgYhDdC2l4uR
fPwa16QXj/3yZbr+cTu9yD/vG6U8mxdYYSZ/oYQnOrVGIidnjbdw7wwL+dIZPtv5
RrA31M1JXz7weBT7vqpluOcv9h0iA30xkWKzgeJ0SzyvHWo+Q75NAPTNrZHUMgKg
W/b9Wk+uMFJ2BjOJJoLw7A8YzuGFJttUKbwV7jXq/t4QrqGfOnQmGEjkuIJQ/tWP
ethooPtw6CUe8k6IrB9spuMF1sydDbwndstMOf/piv07T/VpFhbQI+z5dY1DcjLv
YKpfK0qxawfJxw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:56 2026 by rpki-client