Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File:                     LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier:          91n21MmDtUkiv2oMLf/L52gci7O6PjIuub7mKfnvzTs=
Subject key identifier:   1E:0F:00:EA:E9:1E:0A:6B:2C:18:A5:2E:F3:6A:D7:10:58:F5:51:53
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer:       /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial:       019EB87D12A5C6A46BE23C78A2587AE4F921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number:          1206
Signing time:             Thu 11 Jun 2026 21:01:04 +0000
Manifest this update:     Thu 11 Jun 2026 21:01:04 +0000
Manifest next update:     Fri 12 Jun 2026 21:01:04 +0000
Files and hashes:         1: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: 7cZZTugNT9LvkAO3mMhr+kKmW6mwXNH4cnWDEAm1XC8=)
                          2: ZgrpUK3TQHZ--50rt1VhXzg3NfA.roa (hash: GHDjEI2YfdMwBWwNuedHeMpEANaKhvt6G9klIThtEis=)
                          3: uJ00F8qIfVMMrHchmdDbvZw-2tg.roa (hash: t7V/RCs2b24oev8xL9bKPY+EhCLc2I+OwMw22paUwcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7d:12:a5:c6:a4:6b:e2:3c:78:a2:58:7a:e4:f9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
        Validity
            Not Before: Jun 11 21:01:04 2026 GMT
            Not After : Jun 12 21:01:04 2026 GMT
        Subject: CN=1e0f00eae91e0a6b2c18a52ef36ad71058f55153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:00:64:c4:e6:0e:ee:fd:13:2c:6c:7c:71:
                    09:76:89:e3:0b:17:3d:78:76:e5:11:f4:33:49:d6:
                    f5:23:70:f1:3d:c2:02:bf:9b:6f:b4:97:81:78:d3:
                    f8:28:c3:f3:84:2a:1e:dc:5b:37:f0:c3:69:de:8f:
                    cd:4a:21:22:d3:14:36:17:d2:1a:f5:be:ad:0f:df:
                    d0:56:4e:6f:e0:37:29:8b:40:7a:43:84:3a:c3:ef:
                    68:d8:6e:cb:36:5d:51:0e:ca:a2:a9:62:e3:dd:f2:
                    dc:66:02:61:89:27:e4:ef:14:06:f2:b5:11:13:f2:
                    f9:91:78:d6:ce:5a:6d:0d:a7:52:72:bb:6c:d0:e4:
                    24:2b:df:81:23:e6:45:0a:be:d8:50:3d:b3:a5:47:
                    b1:3c:d7:70:a5:39:3b:12:e1:4c:b2:91:e8:c1:1f:
                    8b:cb:a2:3f:0c:a4:7f:03:a5:f8:8e:da:88:fc:b0:
                    53:46:a4:57:fe:f8:d9:5f:72:7d:0c:39:bc:3b:98:
                    9d:a8:18:f9:7b:a9:b5:36:cf:9b:56:2a:9c:07:9b:
                    d6:84:c4:d7:3a:ee:2e:3e:75:51:2e:b1:a7:8b:c5:
                    5c:5c:5e:a8:20:44:0e:3d:46:dd:cc:0d:1c:64:e0:
                    be:03:37:46:a9:26:8e:16:3d:da:c4:00:d7:e5:1c:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0F:00:EA:E9:1E:0A:6B:2C:18:A5:2E:F3:6A:D7:10:58:F5:51:53
            X509v3 Authority Key Identifier:
                keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:39:bc:ed:d8:e8:73:f7:69:4a:09:7d:59:bc:e0:fd:c6:e0:
         e1:26:12:43:66:c7:f2:e1:f8:58:42:86:06:e4:94:73:70:88:
         f5:06:3a:55:83:70:93:e9:f3:18:97:fa:47:42:21:69:0f:3c:
         70:b7:3d:6c:ed:1d:95:e6:31:23:56:f6:4e:5d:54:8c:ab:67:
         bb:cb:f6:50:cc:e4:ac:63:f1:cf:2f:c2:d8:25:bf:46:47:f9:
         23:8d:27:59:50:86:83:62:a8:07:be:22:27:a0:db:c8:a4:ef:
         44:21:cf:66:0b:29:44:f7:1f:2c:3c:77:d4:c1:82:08:d2:97:
         55:67:8c:09:1f:1d:4f:14:3c:c2:c7:8a:0d:d8:a0:47:1b:97:
         9d:e5:b7:94:af:50:1e:cf:e9:5c:c3:53:4f:89:d8:5b:c9:1d:
         51:4e:e7:15:78:3e:de:d6:75:ef:9e:5e:17:9d:83:c3:47:2b:
         59:27:21:72:91:f3:3a:4f:a7:bb:57:05:b3:0d:3f:07:24:0b:
         d4:67:7a:88:01:2b:27:ec:41:05:8d:4e:15:8c:1b:9b:fa:b1:
         69:c9:fd:39:31:3f:26:40:3b:de:eb:b4:c7:9c:f5:b6:2f:fb:
         c5:db:dc:2a:8b:a0:63:d5:69:88:e4:3d:bf:6f:5b:1d:fb:d5:
         c5:ad:51:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fRKlxqRr4jx4olh65PkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx
YWM0N2UwHhcNMjYwNjExMjEwMTA0WhcNMjYwNjEyMjEwMTA0WjAzMTEwLwYDVQQD
EygxZTBmMDBlYWU5MWUwYTZiMmMxOGE1MmVmMzZhZDcxMDU4ZjU1MTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOMAZMTmDu79EyxsfHEJdonjCxc9
eHblEfQzSdb1I3DxPcICv5tvtJeBeNP4KMPzhCoe3Fs38MNp3o/NSiEi0xQ2F9Ia
9b6tD9/QVk5v4Dcpi0B6Q4Q6w+9o2G7LNl1RDsqiqWLj3fLcZgJhiSfk7xQG8rUR
E/L5kXjWzlptDadScrts0OQkK9+BI+ZFCr7YUD2zpUexPNdwpTk7EuFMspHowR+L
y6I/DKR/A6X4jtqI/LBTRqRX/vjZX3J9DDm8O5idqBj5e6m1Ns+bViqcB5vWhMTX
Ou4uPnVRLrGni8VcXF6oIEQOPUbdzA0cZOC+AzdGqSaOFj3axADX5RzMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4PAOrpHgprLBilLvNq1xBY9VFTMB8GA1UdIwQY
MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt
Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx
LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDm87djo
c/dpSgl9Wbzg/cbg4SYSQ2bH8uH4WEKGBuSUc3CI9QY6VYNwk+nzGJf6R0IhaQ88
cLc9bO0dleYxI1b2Tl1UjKtnu8v2UMzkrGPxzy/C2CW/Rkf5I40nWVCGg2KoB74i
J6DbyKTvRCHPZgspRPcfLDx31MGCCNKXVWeMCR8dTxQ8wseKDdigRxuXneW3lK9Q
Hs/pXMNTT4nYW8kdUU7nFXg+3tZ1755eF52Dw0crWSchcpHzOk+nu1cFsw0/ByQL
1Gd6iAErJ+xBBY1OFYwbm/qxacn9OTE/JkA73uu0x5z1ti/7xdvcKougY9VpiOQ9
v29bHfvVxa1RDw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:36:48 2026 by rpki-client