Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          e7T4lXHnIgeqEl7r5ejkXebJ27AJqurISjUVVTW3alw=
Subject key identifier:   F6:56:98:C1:BF:82:88:0E:2E:D1:A3:EC:99:0D:95:3E:04:36:58:7D
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       019F1830A2F212D20DFA3026FE1A131196A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          0B5D
Signing time:             Tue 30 Jun 2026 11:01:08 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:08 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:08 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: fQUPU+dGsr/JAeQ8T/lcgZdi8yo+fa1qMA2WPnr4wNc=)
                          2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:a2:f2:12:d2:0d:fa:30:26:fe:1a:13:11:96:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: Jun 30 11:01:08 2026 GMT
            Not After : Jul  1 11:01:08 2026 GMT
        Subject: CN=f65698c1bf82880e2ed1a3ec990d953e0436587d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:18:a6:4a:5a:b5:49:71:c5:c8:64:e8:4d:
                    fa:21:05:15:e9:4c:00:b0:52:00:f3:3a:39:b3:c2:
                    05:b4:99:07:c2:f9:8c:ce:a9:57:b3:17:a1:c3:89:
                    3c:36:1c:54:04:5d:33:0d:b8:8d:d6:5c:63:54:31:
                    22:5b:6a:bf:a2:7a:5b:bd:ba:f9:37:2b:3d:a0:c7:
                    a0:87:52:b7:4f:ba:f9:81:e8:a1:70:24:35:93:04:
                    87:fd:fe:f4:84:33:83:23:50:af:55:d3:0c:8a:95:
                    7e:05:ed:d8:77:07:e2:0f:cb:20:e7:49:fc:62:ca:
                    c1:da:93:90:99:ed:bb:f0:1c:69:12:dc:fa:c0:34:
                    62:09:5c:0f:10:bf:fc:70:30:87:da:34:80:53:ef:
                    dd:97:24:32:21:65:f5:23:5a:03:69:02:91:9d:3c:
                    0a:74:f9:0b:60:00:be:06:ab:e3:7a:42:c4:30:ac:
                    7f:d7:6b:e9:48:12:bf:ec:62:50:72:38:21:56:95:
                    d4:67:02:b7:cd:aa:87:c5:f6:3c:cf:f2:cb:09:de:
                    fd:2c:97:64:e9:bb:97:09:71:57:7d:c3:02:84:32:
                    9d:2b:c9:d2:ff:d0:a6:36:2f:2f:f3:8d:78:74:d9:
                    f6:35:b1:5a:18:4c:f5:21:cd:e6:96:3c:92:d3:af:
                    d2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:98:C1:BF:82:88:0E:2E:D1:A3:EC:99:0D:95:3E:04:36:58:7D
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0d:07:dd:97:02:8e:88:06:a6:35:71:20:ef:8a:7b:16:d4:
         de:fc:55:2c:ed:55:60:0e:7b:a7:04:9c:81:ac:32:ca:de:84:
         ba:d9:91:66:1e:09:7e:27:a6:e9:fb:cd:23:27:55:25:8a:f5:
         45:97:01:ef:c8:b2:36:f7:20:9d:f8:37:c9:18:7b:b6:75:6b:
         a6:b0:32:69:9e:72:b0:c8:c5:ab:b9:d7:19:21:7a:c9:52:c2:
         24:6c:46:c2:40:f0:4b:51:cf:df:2d:bc:50:e5:51:c7:b9:47:
         ba:29:95:91:b4:52:76:23:f8:66:e8:f0:d3:af:b1:8e:2a:b2:
         ab:8b:bb:9a:12:3f:1b:06:78:48:22:60:2f:3c:63:bc:7e:cc:
         fc:a2:86:2c:cc:8d:58:b0:df:cf:ba:1c:7b:c4:08:d0:5b:f7:
         97:19:ca:15:bf:fa:f6:93:7f:37:91:d8:b9:15:66:73:58:53:
         f6:93:18:08:c7:af:67:16:45:7d:5b:a7:f6:60:2a:c2:53:17:
         f1:8e:52:ac:fb:c5:05:ef:00:a1:52:e2:8b:06:a6:f7:a3:0c:
         81:40:b1:a8:4a:d3:f4:94:7c:76:5b:b2:f7:23:f0:17:2c:24:
         08:e7:b1:6d:2f:ed:49:52:1a:44:9e:0f:83:fb:21:63:b0:9d:
         6f:8b:18:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMKLyEtIN+jAm/hoTEZanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWEzYWEwY2Y4ZGZhOTE2N2QyNGQ5MmVkOGExNmViNGU3
ODA0NGMwHhcNMjYwNjMwMTEwMTA4WhcNMjYwNzAxMTEwMTA4WjAzMTEwLwYDVQQD
EyhmNjU2OThjMWJmODI4ODBlMmVkMWEzZWM5OTBkOTUzZTA0MzY1ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00sYpkpatUlxxchk6E36IQUV6UwA
sFIA8zo5s8IFtJkHwvmMzqlXsxehw4k8NhxUBF0zDbiN1lxjVDEiW2q/onpbvbr5
Nys9oMegh1K3T7r5geihcCQ1kwSH/f70hDODI1CvVdMMipV+Be3YdwfiD8sg50n8
YsrB2pOQme278BxpEtz6wDRiCVwPEL/8cDCH2jSAU+/dlyQyIWX1I1oDaQKRnTwK
dPkLYAC+BqvjekLEMKx/12vpSBK/7GJQcjghVpXUZwK3zaqHxfY8z/LLCd79LJdk
6buXCXFXfcMChDKdK8nS/9CmNi8v8414dNn2NbFaGEz1Ic3mljyS06/SnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZWmMG/gogOLtGj7JkNlT4ENlh9MB8GA1UdIwQY
MBaAFNwaOqDPjfqRZ9JNku2KFutOeARMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUt
MmRkNjUwZWE0YWMzLzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUtMmRkNjUwZWE0YWMz
LzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg0H3ZcC
jogGpjVxIO+KexbU3vxVLO1VYA57pwScgawyyt6EutmRZh4Jfiem6fvNIydVJYr1
RZcB78iyNvcgnfg3yRh7tnVrprAyaZ5ysMjFq7nXGSF6yVLCJGxGwkDwS1HP3y28
UOVRx7lHuimVkbRSdiP4Zujw06+xjiqyq4u7mhI/GwZ4SCJgLzxjvH7M/KKGLMyN
WLDfz7oce8QI0Fv3lxnKFb/69pN/N5HYuRVmc1hT9pMYCMevZxZFfVun9mAqwlMX
8Y5SrPvFBe8AoVLiiwam96MMgUCxqErT9JR8dluy9yPwFywkCOexbS/tSVIaRJ4P
g/shY7Cdb4sYBA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:58 2026 by rpki-client