Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File:                     c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier:          0OEH6Z02bmTXe+SOW4P8Irk0ekcejLAAjycm9tPuamY=
Subject key identifier:   F3:17:27:30:46:1D:E9:9E:78:39:71:2C:FA:1D:A4:99:6C:6F:4D:49
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer:       /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial:       019E97DEC825575F4C62CA362BFAA7E8FB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number:          1946
Signing time:             Fri 05 Jun 2026 13:00:20 +0000
Manifest this update:     Fri 05 Jun 2026 13:00:20 +0000
Manifest next update:     Sat 06 Jun 2026 13:00:20 +0000
Files and hashes:         1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: TIef8wBFijLqG9ld2epgx3o9Xc88ER08zUh3l3r1YGE=)
                          2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:97:de:c8:25:57:5f:4c:62:ca:36:2b:fa:a7:e8:fb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
        Validity
            Not Before: Jun  5 13:00:20 2026 GMT
            Not After : Jun  6 13:00:20 2026 GMT
        Subject: CN=f3172730461de99e7839712cfa1da4996c6f4d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:e8:7a:c5:8a:f5:a0:07:06:54:7e:c9:56:
                    f1:68:b9:9a:1e:b4:64:39:33:9f:8f:05:7a:0e:9f:
                    b6:7c:c0:24:7c:41:14:92:32:4c:bc:22:92:f7:74:
                    90:58:df:a0:c7:f1:53:ce:4e:b3:a0:14:e6:60:d5:
                    15:2a:fb:b0:17:5a:ec:6e:15:6f:ca:f7:75:3d:88:
                    b4:cf:e8:ce:40:7f:a8:81:01:3c:09:2a:f9:4f:af:
                    59:cd:da:22:18:20:03:ce:1a:3a:d9:69:aa:e7:b9:
                    17:9a:a3:6c:b4:20:1e:b6:df:ff:e0:86:01:ac:41:
                    05:e5:57:a3:fe:ee:55:00:23:a8:9d:45:94:98:09:
                    50:9b:ee:82:8d:c4:a0:ea:5b:37:b9:9f:75:eb:76:
                    82:16:c8:3c:7c:c5:fc:04:49:55:09:b4:5b:94:de:
                    a0:bf:0d:5e:b9:73:4a:52:0e:53:ff:c0:ec:83:b7:
                    0d:32:03:0d:9c:2c:8e:82:f9:02:e7:52:27:74:66:
                    84:a3:e9:51:da:9b:3f:1c:16:6a:02:9f:a9:32:7b:
                    09:84:8a:19:e2:e5:49:f9:da:1e:97:c9:78:91:2f:
                    0c:9f:76:67:71:a4:3c:4b:98:4a:a8:f0:37:74:cd:
                    f6:ee:7e:3a:ff:f9:34:fb:0d:05:e3:c8:da:2c:55:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:17:27:30:46:1D:E9:9E:78:39:71:2C:FA:1D:A4:99:6C:6F:4D:49
            X509v3 Authority Key Identifier:
                keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:61:d9:68:7c:20:73:17:a3:8a:ee:21:37:63:df:6f:30:
         d3:12:47:c7:34:6a:8d:f0:13:9c:f5:a9:f1:6f:0d:57:2e:ed:
         8a:45:e9:4a:8a:f9:47:99:b7:68:8a:69:91:e4:7a:fb:85:71:
         67:d1:cc:a5:19:f1:d4:2e:24:9f:52:3d:80:25:ba:82:3d:c2:
         66:05:4f:b3:14:24:d9:a3:38:45:83:37:92:11:f3:7d:21:0a:
         c1:0e:1b:78:d2:f1:30:08:a4:95:48:95:87:b6:aa:2a:0a:3f:
         93:bf:4a:a7:86:37:e9:f3:91:aa:b0:12:1c:17:dc:9f:97:90:
         19:a6:c2:12:b1:61:8d:00:b9:e4:ff:71:e1:6b:0a:34:80:be:
         ff:e7:d4:d2:5f:42:e9:2f:6e:85:b6:d7:28:05:c2:eb:b6:54:
         dc:33:9b:19:88:93:36:22:87:0e:36:fa:e0:30:6f:a2:16:1f:
         4c:03:65:b4:65:32:3d:16:4c:e0:8e:16:79:26:4b:39:17:bd:
         1c:f0:04:81:aa:fc:f3:7d:2e:df:dd:77:15:27:b6:4b:5e:98:
         7d:e7:c1:e3:a3:f2:b0:35:89:5d:0d:4f:d3:52:b5:19:09:ae:
         18:a3:68:ca:8f:3d:e4:cc:0b:da:63:62:a4:65:56:b6:cf:e9:
         8f:a0:2f:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6X3sglV19MYso2K/qn6Pt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3
ODhlNmUwHhcNMjYwNjA1MTMwMDIwWhcNMjYwNjA2MTMwMDIwWjAzMTEwLwYDVQQD
EyhmMzE3MjczMDQ2MWRlOTllNzgzOTcxMmNmYTFkYTQ5OTZjNmY0ZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJnoesWK9aAHBlR+yVbxaLmaHrRk
OTOfjwV6Dp+2fMAkfEEUkjJMvCKS93SQWN+gx/FTzk6zoBTmYNUVKvuwF1rsbhVv
yvd1PYi0z+jOQH+ogQE8CSr5T69ZzdoiGCADzho62Wmq57kXmqNstCAett//4IYB
rEEF5Vej/u5VACOonUWUmAlQm+6CjcSg6ls3uZ9163aCFsg8fMX8BElVCbRblN6g
vw1euXNKUg5T/8Dsg7cNMgMNnCyOgvkC51IndGaEo+lR2ps/HBZqAp+pMnsJhIoZ
4uVJ+doel8l4kS8Mn3ZncaQ8S5hKqPA3dM327n46//k0+w0F48jaLFVeXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMXJzBGHemeeDlxLPodpJlsb01JMB8GA1UdIwQY
MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt
YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj
LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcJh2Wh8
IHMXo4ruITdj328w0xJHxzRqjfATnPWp8W8NVy7tikXpSor5R5m3aIppkeR6+4Vx
Z9HMpRnx1C4kn1I9gCW6gj3CZgVPsxQk2aM4RYM3khHzfSEKwQ4beNLxMAiklUiV
h7aqKgo/k79Kp4Y36fORqrASHBfcn5eQGabCErFhjQC55P9x4WsKNIC+/+fU0l9C
6S9uhbbXKAXC67ZU3DObGYiTNiKHDjb64DBvohYfTANltGUyPRZM4I4WeSZLORe9
HPAEgar8830u3913FSe2S16YfefB46PysDWJXQ1P01K1GQmuGKNoyo895MwL2mNi
pGVWts/pj6AvrA==
-----END CERTIFICATE-----
Generated at Fri Jun 5 20:00:46 2026 by rpki-client