Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File:                     2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier:          HFcDKATddVhYCNnzbpyxgh+us/ko2D8Sj4uGmgJBHQ8=
Subject key identifier:   96:19:C8:38:A6:76:58:F0:54:CB:3A:DD:82:DF:B4:0F:83:A6:12:B2
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer:       /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial:       019F190CEF859997040702BACC676DCB90D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number:          0FF3
Signing time:             Tue 30 Jun 2026 15:01:45 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:45 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:45 +0000
Files and hashes:         1: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: 4SVzgCDtnUizISkBpkGPTQT67KdWEsOc3UOAZfVI+O4=)
                          2: 5xg54AVWW6Xi4BJUknnWOr4xprs.roa (hash: dLKpdsBaGDiqHhkCmoQj4IsxNnhuKkpCJzE6NQ8QV10=)
                          3: 7NjBGXkoqrpJtik6hyWam_91fPM.roa (hash: Cd/yxor3wZg6xcWw81ojOZAbyI0L65eF/W7E8e19B7M=)
                          4: bb-V_rGf3B0QiaioeNxnU56I040.roa (hash: 4nxBn8kzAZLq0QSt7O7jxqlGii0yEkqJb0VFpRa6+jU=)
                          5: tpwdEfzMyWWx6VArR0hVjMo-3q8.roa (hash: UHSQrSMMwMC/F3MwzFHNY7G8M39N7oYGsjXC+3amyxw=)
                          6: xC0dGwS2hqJMFjJkASOl38eG4CQ.roa (hash: o1etJOQuElRRT8k2/A1UeIK9/USuVlD2nFRLc2q3+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:ef:85:99:97:04:07:02:ba:cc:67:6d:cb:90:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
        Validity
            Not Before: Jun 30 15:01:45 2026 GMT
            Not After : Jul  1 15:01:45 2026 GMT
        Subject: CN=9619c838a67658f054cb3add82dfb40f83a612b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:73:cf:35:1c:75:dc:db:d7:57:7b:ac:80:3c:
                    bc:de:0e:08:c1:14:29:74:27:d8:bb:60:de:43:d1:
                    de:e7:b2:ba:ec:3c:b6:11:7a:3c:e9:e2:85:dc:d1:
                    d9:e1:a4:d9:fd:1d:d3:e6:b5:45:99:18:5f:a5:46:
                    db:e4:0c:2e:69:1a:48:8f:d7:76:96:c6:11:b1:e3:
                    84:65:5c:34:45:f1:1c:0c:12:e9:2b:01:f1:0f:e7:
                    8c:c3:65:64:d6:fd:aa:4f:d5:6e:49:78:bc:07:7f:
                    bc:ed:b1:cd:be:27:46:59:eb:99:27:59:09:05:de:
                    52:4e:67:4c:cc:1e:c5:58:f8:49:51:10:50:cf:e6:
                    7c:62:73:fb:b7:c4:e3:47:be:b8:84:02:b8:c4:67:
                    ec:82:c0:4b:60:96:0e:2f:73:9f:a5:db:c2:41:35:
                    ff:0d:3d:e9:a4:07:bf:ac:da:2b:d5:52:19:a3:39:
                    9f:4b:05:d0:6c:7c:6c:d8:83:64:d5:ae:bc:ca:5a:
                    83:08:7d:68:1d:99:29:9b:2e:90:d6:e3:a4:0f:56:
                    a8:4d:fd:83:e1:c5:28:1a:dc:26:a9:b6:1d:c1:14:
                    b9:c6:e8:91:67:3a:f0:75:58:ef:8d:81:87:a3:68:
                    27:30:1a:8c:be:c1:d0:55:a4:51:f6:17:95:54:a4:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:C8:38:A6:76:58:F0:54:CB:3A:DD:82:DF:B4:0F:83:A6:12:B2
            X509v3 Authority Key Identifier:
                keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:f4:2c:7b:40:ee:a6:5e:11:71:c3:5c:5c:7a:bf:84:32:
         20:5e:f9:53:73:7e:06:e9:c2:b6:3b:f3:f1:fc:f8:98:18:cb:
         bf:a6:ef:3d:6b:6a:b9:93:5a:1e:ba:1d:ba:a4:04:d7:67:c9:
         c5:4e:5f:4b:17:c7:25:bb:55:0a:b0:5e:58:aa:0d:d0:5a:ea:
         a8:c5:ae:92:b0:0a:01:71:66:6d:13:4e:30:73:75:59:b2:f4:
         3e:77:72:05:23:9a:be:3c:54:3a:b9:e0:43:62:4a:34:90:1c:
         3e:a6:83:89:7f:38:00:8b:fa:69:06:38:fd:10:ab:66:a2:d4:
         33:89:82:e5:96:64:60:35:0c:2c:c0:eb:22:0e:2b:93:5e:03:
         f9:33:17:b5:ea:76:f0:40:ea:d4:74:2a:01:58:48:59:77:eb:
         61:4d:13:f2:5c:96:f2:e6:53:30:85:3b:da:c0:65:80:05:ec:
         ad:c8:cd:9c:98:51:46:d7:b5:49:a6:3f:03:29:59:bb:c9:e1:
         ac:a4:9d:85:57:95:8c:4d:8e:ae:fc:bb:51:4e:34:df:2d:64:
         d0:a1:84:6c:cc:d8:48:58:fb:a6:03:60:77:51:d3:ca:53:8d:
         e7:96:ed:36:b1:07:77:c9:6a:a1:a5:c5:9d:77:14:6b:61:56:
         ae:92:d7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDO+FmZcEBwK6zGdty5DYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGIzM2NkZGI3OTliN2JjZjVkM2RjZTAwNGZkYmE4YzNl
ODY0ZmYwHhcNMjYwNjMwMTUwMTQ1WhcNMjYwNzAxMTUwMTQ1WjAzMTEwLwYDVQQD
Eyg5NjE5YzgzOGE2NzY1OGYwNTRjYjNhZGQ4MmRmYjQwZjgzYTYxMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XPPNRx13NvXV3usgDy83g4IwRQp
dCfYu2DeQ9He57K67Dy2EXo86eKF3NHZ4aTZ/R3T5rVFmRhfpUbb5AwuaRpIj9d2
lsYRseOEZVw0RfEcDBLpKwHxD+eMw2Vk1v2qT9VuSXi8B3+87bHNvidGWeuZJ1kJ
Bd5STmdMzB7FWPhJURBQz+Z8YnP7t8TjR764hAK4xGfsgsBLYJYOL3OfpdvCQTX/
DT3ppAe/rNor1VIZozmfSwXQbHxs2INk1a68ylqDCH1oHZkpmy6Q1uOkD1aoTf2D
4cUoGtwmqbYdwRS5xuiRZzrwdVjvjYGHo2gnMBqMvsHQVaRR9heVVKTD4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYZyDimdljwVMs63YLftA+DphKyMB8GA1UdIwQY
MBaAFNoLM83beZt7z109zgBP26jD6GT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQt
NzczM2JkODg4ZTI4LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQtNzczM2JkODg4ZTI4
LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANp30LHtA
7qZeEXHDXFx6v4QyIF75U3N+BunCtjvz8fz4mBjLv6bvPWtquZNaHroduqQE12fJ
xU5fSxfHJbtVCrBeWKoN0FrqqMWukrAKAXFmbRNOMHN1WbL0PndyBSOavjxUOrng
Q2JKNJAcPqaDiX84AIv6aQY4/RCrZqLUM4mC5ZZkYDUMLMDrIg4rk14D+TMXtep2
8EDq1HQqAVhIWXfrYU0T8lyW8uZTMIU72sBlgAXsrcjNnJhRRte1SaY/AylZu8nh
rKSdhVeVjE2Orvy7UU403y1k0KGEbMzYSFj7pgNgd1HTylON55btNrEHd8lqoaXF
nXcUa2FWrpLXKA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:15:57 2026 by rpki-client