Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File:                     Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier:          z+wFFWWz/nwLkqwSGyeXX6geOcfojntywWxvWMyYLKY=
Subject key identifier:   DA:3A:C6:6A:05:A9:BA:23:90:0A:D8:86:45:A8:95:99:9F:57:0A:A3
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer:       /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial:       019F1A5660FAB1916C63940090CFA2778823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number:          0A97
Signing time:             Tue 30 Jun 2026 21:01:36 +0000
Manifest this update:     Tue 30 Jun 2026 21:01:36 +0000
Manifest next update:     Wed 01 Jul 2026 21:01:36 +0000
Files and hashes:         1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: 9+M6lNRDS6hU9KKkszwTzSaQijhdFypDEbCsRQHE6Kg=)
                          2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:56:60:fa:b1:91:6c:63:94:00:90:cf:a2:77:88:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
        Validity
            Not Before: Jun 30 21:01:36 2026 GMT
            Not After : Jul  1 21:01:36 2026 GMT
        Subject: CN=da3ac66a05a9ba23900ad88645a895999f570aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:1c:4b:e7:05:68:85:f3:2b:e1:88:49:26:
                    3a:32:8e:65:e1:86:fe:0f:a2:b9:ec:e7:d6:8f:89:
                    20:1e:8c:1a:a2:71:75:71:fa:d6:96:f3:09:d0:d4:
                    05:ad:e3:14:6b:cb:a5:ff:d3:84:e4:1e:44:f5:f6:
                    56:fe:fd:c8:9e:bd:56:8b:36:74:15:28:89:67:7f:
                    b7:0a:d4:52:48:1f:c4:a3:ca:d1:d3:0b:3b:89:31:
                    4f:4e:d2:de:8f:96:42:58:c3:c0:db:d4:b1:6d:70:
                    49:36:8d:ac:31:ca:35:a3:61:9f:2e:74:b4:82:c0:
                    ce:39:a2:4d:10:2e:13:be:cb:02:74:64:4d:e2:6c:
                    b2:4e:73:2c:80:f6:92:a4:a3:3f:2f:14:71:eb:9c:
                    ac:4b:e6:a8:f4:41:41:90:4e:ba:d4:52:a2:83:64:
                    d6:00:1b:34:bb:cf:3f:b1:92:12:c0:73:54:e0:a0:
                    56:f5:04:6f:59:d2:5a:9f:45:27:0c:51:49:14:bc:
                    de:71:2e:6f:ba:fe:18:94:3f:9e:e7:6a:07:43:2e:
                    1b:56:bb:fd:7e:33:6f:b2:46:0a:dd:5b:eb:ee:0a:
                    1d:3f:53:c2:60:f5:4e:be:64:be:fe:4b:72:f5:46:
                    15:ab:fb:77:5f:90:1a:2e:f7:de:b9:24:b1:ef:fe:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:C6:6A:05:A9:BA:23:90:0A:D8:86:45:A8:95:99:9F:57:0A:A3
            X509v3 Authority Key Identifier:
                keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e7:a3:95:fe:e5:04:81:63:b2:cc:c6:15:3f:01:6f:5d:a2:
         53:f1:a2:f1:33:ae:55:a9:43:cc:4a:f8:8c:1a:44:ea:4d:e3:
         14:ad:f0:dd:62:8f:71:51:be:6a:47:34:c2:46:56:ad:a4:76:
         e5:6b:78:1b:a3:1e:f9:ac:f9:21:77:f4:44:57:de:97:61:c5:
         9c:a3:03:84:9d:a1:1e:9b:26:2c:cb:3e:a3:6b:b3:94:55:45:
         1f:3e:33:cb:c3:d2:76:96:a1:d0:5c:ca:31:94:fe:c3:30:ab:
         8a:3e:00:4a:08:28:40:75:61:33:03:05:b9:1a:80:51:8f:60:
         0b:f6:83:99:3d:36:14:c6:a5:67:a6:47:3a:19:39:f2:f1:02:
         bc:eb:5d:77:10:b1:86:b3:94:0d:9b:4c:02:db:47:e1:67:c5:
         af:1e:22:9f:f8:8d:f7:7a:f6:e7:08:89:13:6c:58:ad:d4:a5:
         67:f7:92:d0:d5:f9:73:98:7e:82:16:da:3d:9b:6d:46:20:f7:
         a9:6d:f1:d3:f6:f4:c7:27:83:5e:88:ab:4c:72:04:0d:12:ac:
         e8:52:3b:fe:49:16:21:63:24:c7:8c:a2:df:da:4e:a9:1a:09:
         c0:d1:5a:e7:0c:40:47:c5:e6:36:90:15:e0:fa:fd:30:d6:b3:
         4e:8a:85:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aVmD6sZFsY5QAkM+id4gjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi
ZDk3ZTQwHhcNMjYwNjMwMjEwMTM2WhcNMjYwNzAxMjEwMTM2WjAzMTEwLwYDVQQD
EyhkYTNhYzY2YTA1YTliYTIzOTAwYWQ4ODY0NWE4OTU5OTlmNTcwYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8kcS+cFaIXzK+GISSY6Mo5l4Yb+
D6K57OfWj4kgHowaonF1cfrWlvMJ0NQFreMUa8ul/9OE5B5E9fZW/v3Inr1WizZ0
FSiJZ3+3CtRSSB/Eo8rR0ws7iTFPTtLej5ZCWMPA29SxbXBJNo2sMco1o2GfLnS0
gsDOOaJNEC4TvssCdGRN4myyTnMsgPaSpKM/LxRx65ysS+ao9EFBkE661FKig2TW
ABs0u88/sZISwHNU4KBW9QRvWdJan0UnDFFJFLzecS5vuv4YlD+e52oHQy4bVrv9
fjNvskYK3Vvr7godP1PCYPVOvmS+/kty9UYVq/t3X5AaLvfeuSSx7/56+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo6xmoFqbojkArYhkWolZmfVwqjMB8GA1UdIwQY
MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct
NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi
LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuejlf7l
BIFjsszGFT8Bb12iU/Gi8TOuValDzEr4jBpE6k3jFK3w3WKPcVG+akc0wkZWraR2
5Wt4G6Me+az5IXf0RFfel2HFnKMDhJ2hHpsmLMs+o2uzlFVFHz4zy8PSdpah0FzK
MZT+wzCrij4ASggoQHVhMwMFuRqAUY9gC/aDmT02FMalZ6ZHOhk58vECvOtddxCx
hrOUDZtMAttH4WfFrx4in/iN93r25wiJE2xYrdSlZ/eS0NX5c5h+ghbaPZttRiD3
qW3x0/b0xyeDXoirTHIEDRKs6FI7/kkWIWMkx4yi39pOqRoJwNFa5wxAR8XmNpAV
4Pr9MNazToqFhg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:38:08 2026 by rpki-client