Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File:                     5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier:          VUcFgVo8yz6uOgM+rhSIEME2LKOiqTmeM5pGOY+dHsU=
Subject key identifier:   AB:56:97:F8:BE:B2:0B:59:46:22:07:94:14:03:79:46:B9:09:4C:1B
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer:       /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial:       019F18677D4E20774F9D3C136C134D913F53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number:          14DD
Signing time:             Tue 30 Jun 2026 12:01:03 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:03 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:03 +0000
Files and hashes:         1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: n4xGc/PnLTcQbkVwWRzrIBg/QGMufLTWnHpe2cr0XPI=)
                          2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:7d:4e:20:77:4f:9d:3c:13:6c:13:4d:91:3f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
        Validity
            Not Before: Jun 30 12:01:03 2026 GMT
            Not After : Jul  1 12:01:03 2026 GMT
        Subject: CN=ab5697f8beb20b594622079414037946b9094c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:9d:63:9b:9b:86:7c:ac:f9:3d:28:c2:76:
                    9b:de:fd:0f:a6:02:3f:86:1d:31:7c:a9:2c:91:39:
                    17:f0:b8:51:32:b9:b1:35:9d:49:46:94:3a:f7:c7:
                    90:dc:b7:04:8d:45:8c:d6:99:4a:c2:97:f5:ca:43:
                    33:47:3d:5d:70:03:bf:c5:0e:a6:12:90:7e:ad:5e:
                    0a:1d:47:61:c6:d4:63:02:c5:7c:bd:91:fc:55:0b:
                    8a:3d:ee:7c:55:49:cb:4b:13:29:d3:d1:18:87:a7:
                    9e:07:71:92:2c:4f:48:f8:68:95:b1:06:42:b5:54:
                    64:1d:1a:44:f0:b7:14:53:02:e4:94:18:9b:17:c2:
                    00:8d:af:ef:52:4c:30:cb:9b:4d:b8:01:c7:9c:5b:
                    4c:1d:a1:f5:17:14:bd:8c:ca:4b:75:b0:50:9b:92:
                    87:37:cb:cf:1a:4c:3d:cd:b8:90:22:73:2a:c1:16:
                    4b:3e:26:32:81:44:f9:09:1e:61:65:ad:c0:76:60:
                    67:91:9b:72:26:55:a3:19:11:50:9a:2d:0c:af:f9:
                    39:e1:9c:bd:b3:4f:f1:69:1e:80:ee:b9:e0:34:93:
                    cc:49:33:9f:0e:ca:12:a3:81:0f:1c:d6:6c:88:38:
                    08:a0:f2:aa:f7:02:a4:62:7f:3c:3f:5c:81:d6:57:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:56:97:F8:BE:B2:0B:59:46:22:07:94:14:03:79:46:B9:09:4C:1B
            X509v3 Authority Key Identifier:
                keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:68:b0:b4:6f:f7:bf:e1:b7:88:9d:b7:2c:92:18:66:92:
         09:c0:f2:dc:1b:55:0a:23:ab:d2:1c:91:17:1e:2b:e4:61:8c:
         4b:21:3e:50:bd:c2:bf:99:5b:5f:b9:3c:d7:2e:97:51:eb:21:
         43:ce:d6:69:be:0f:2c:e6:67:65:d8:36:d8:0c:51:7c:66:a3:
         a9:19:6b:ca:5a:2d:a9:11:39:ce:4c:e8:1b:a5:f2:40:3e:23:
         de:a6:a7:a5:55:b6:ed:ca:af:47:c0:c1:55:0a:4b:73:81:9e:
         cb:48:71:e7:82:95:27:9e:da:96:91:bd:87:6e:d5:e7:24:72:
         4c:75:41:82:34:13:44:8c:47:e8:4d:42:05:db:50:20:be:7c:
         3e:8e:c7:c0:7d:21:71:f9:ec:4e:d4:00:40:89:4d:06:e7:c5:
         04:83:0b:3c:10:77:f4:f4:51:c2:11:2a:53:87:ff:c0:d1:57:
         bd:2f:05:e1:c3:89:8b:52:95:be:4f:65:ee:58:a6:15:ca:4e:
         6b:5f:1c:42:f3:1d:c5:bb:f3:72:b7:58:ca:46:00:c9:18:44:
         1b:a5:76:59:85:d5:e8:19:37:89:d5:3d:ec:13:be:55:77:2c:
         87:13:1e:3d:67:fc:1c:56:c5:63:1c:cb:6b:5e:d7:38:a8:a2:
         0f:22:77:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ31OIHdPnTwTbBNNkT9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4
ZjhmMzgwHhcNMjYwNjMwMTIwMTAzWhcNMjYwNzAxMTIwMTAzWjAzMTEwLwYDVQQD
EyhhYjU2OTdmOGJlYjIwYjU5NDYyMjA3OTQxNDAzNzk0NmI5MDk0YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHmdY5ubhnys+T0ownab3v0PpgI/
hh0xfKkskTkX8LhRMrmxNZ1JRpQ698eQ3LcEjUWM1plKwpf1ykMzRz1dcAO/xQ6m
EpB+rV4KHUdhxtRjAsV8vZH8VQuKPe58VUnLSxMp09EYh6eeB3GSLE9I+GiVsQZC
tVRkHRpE8LcUUwLklBibF8IAja/vUkwwy5tNuAHHnFtMHaH1FxS9jMpLdbBQm5KH
N8vPGkw9zbiQInMqwRZLPiYygUT5CR5hZa3AdmBnkZtyJlWjGRFQmi0Mr/k54Zy9
s0/xaR6A7rngNJPMSTOfDsoSo4EPHNZsiDgIoPKq9wKkYn88P1yB1lcBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtWl/i+sgtZRiIHlBQDeUa5CUwbMB8GA1UdIwQY
MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt
NDcyZDg4MmU5ZDcyLzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy
LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0tosLRv
97/ht4idtyySGGaSCcDy3BtVCiOr0hyRFx4r5GGMSyE+UL3Cv5lbX7k81y6XUesh
Q87Wab4PLOZnZdg22AxRfGajqRlrylotqRE5zkzoG6XyQD4j3qanpVW27cqvR8DB
VQpLc4Gey0hx54KVJ57alpG9h27V5yRyTHVBgjQTRIxH6E1CBdtQIL58Po7HwH0h
cfnsTtQAQIlNBufFBIMLPBB39PRRwhEqU4f/wNFXvS8F4cOJi1KVvk9l7limFcpO
a18cQvMdxbvzcrdYykYAyRhEG6V2WYXV6Bk3idU97BO+VXcshxMePWf8HFbFYxzL
a17XOKiiDyJ3gA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:19 2026 by rpki-client