Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File:                     8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier:          OcNOcSZ+bPem/PCSEx5Lg7iKj5N2DWP8kuWLNVrsXSg=
Subject key identifier:   75:4F:61:86:98:3A:A6:D0:B6:29:D6:4D:52:BB:8C:0A:F3:48:BD:DE
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer:       /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial:       019F17F91F1E601F4B78A12DC7A2C6E3DBCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number:          07DF
Signing time:             Tue 30 Jun 2026 10:00:30 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:30 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:30 +0000
Files and hashes:         1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: xunImn2+YpCTUmx/bjANTU3+fZYiXVLzspuc3d/CnkA=)
                          2: e40GPVZTDeirYIdOqaP1aapsCXg.asa (hash: h+tl9RH2sA+blXZerCx7ZNM5+m8vY3pFl3hXGBoDo4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:1f:1e:60:1f:4b:78:a1:2d:c7:a2:c6:e3:db:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
        Validity
            Not Before: Jun 30 10:00:30 2026 GMT
            Not After : Jul  1 10:00:30 2026 GMT
        Subject: CN=754f6186983aa6d0b629d64d52bb8c0af348bdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:be:ea:6b:7b:2f:fd:80:7d:1b:e0:a2:10:
                    9f:30:01:94:c7:b9:47:21:5a:b6:c0:d0:77:27:5a:
                    d0:ee:c7:29:78:8f:64:02:d6:85:8d:ab:89:09:a4:
                    94:ca:bb:bc:9d:72:94:58:fa:d2:5a:31:1e:a4:39:
                    c6:ab:cb:99:11:ea:7e:d0:c1:02:ed:88:9b:70:e4:
                    4c:54:d3:0e:41:7f:c8:4e:2e:3c:0e:59:64:5e:b8:
                    30:3f:3d:27:5f:89:48:d6:c2:7b:32:4d:5f:b5:ce:
                    fd:5b:d2:2f:2e:d4:3a:88:da:f5:cb:3e:8d:45:1c:
                    62:98:99:40:df:4f:6d:92:2d:b0:57:8f:bc:83:a6:
                    4b:6a:dd:2f:8d:e9:0d:07:57:91:42:de:a2:43:27:
                    ca:82:f9:88:77:66:a6:13:f8:c2:2f:cc:fa:5b:ed:
                    ff:a4:de:58:84:ee:4d:c9:85:66:52:20:4e:65:6e:
                    3e:1b:41:ef:bf:d8:90:ce:c2:ac:e4:68:d4:d1:d0:
                    fd:e3:0f:37:6d:12:fa:c9:6d:af:c6:e1:4d:77:d0:
                    09:c3:d5:90:26:67:15:7b:d5:61:e7:5b:1c:da:a8:
                    4f:a7:c9:50:17:cc:f6:55:b8:e0:68:8d:e3:d1:5f:
                    18:5d:72:f4:13:de:0f:41:f4:17:93:21:89:13:20:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4F:61:86:98:3A:A6:D0:B6:29:D6:4D:52:BB:8C:0A:F3:48:BD:DE
            X509v3 Authority Key Identifier:
                keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:55:a2:44:b4:11:d5:27:fa:28:5e:e0:5a:8f:44:0a:f5:91:
         b5:a2:61:6b:85:f0:3b:3a:20:71:c3:54:74:bb:04:d7:9c:3a:
         0b:41:06:42:98:cf:6f:b7:d1:06:4b:1e:fc:e2:bd:c1:07:e3:
         73:b3:53:23:30:df:fb:b3:9e:a5:52:82:6e:9c:b3:76:49:1a:
         78:1b:53:bc:92:eb:a0:6d:64:91:9d:40:2f:1e:7f:0c:00:b0:
         3f:ee:84:57:77:e4:ef:f2:d2:28:b7:2d:d6:90:b6:e7:0f:f3:
         ae:c1:d8:0b:a5:3d:df:56:29:f3:be:eb:75:af:c7:eb:7c:1d:
         a8:02:04:d2:79:a0:9a:f0:12:7c:31:57:9c:72:4b:9f:76:ba:
         5b:8d:08:f5:7f:00:24:10:a6:da:d7:22:3f:ec:cf:e5:dd:33:
         b0:97:e8:24:93:83:04:32:9f:05:cb:85:01:24:b8:e8:c7:c6:
         db:ea:ef:34:9d:2e:5a:f6:66:df:3a:54:ec:fc:89:f4:4f:7f:
         9d:56:88:ab:49:fb:7e:08:5b:87:60:06:7f:57:b5:1f:30:a4:
         79:80:8e:6e:57:ea:20:4f:19:5c:b1:6e:9d:94:03:64:8b:b6:
         47:d3:7e:06:79:2a:3f:66:20:d5:97:6f:5a:07:c0:59:b4:9a:
         7c:33:b1:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+R8eYB9LeKEtx6LG49vKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTE1MzAxMWRlNDU4NmFkOGE4MDM4ODdlZTdkMmIwMGFl
ZmQ2MWIwHhcNMjYwNjMwMTAwMDMwWhcNMjYwNzAxMTAwMDMwWjAzMTEwLwYDVQQD
Eyg3NTRmNjE4Njk4M2FhNmQwYjYyOWQ2NGQ1MmJiOGMwYWYzNDhiZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEe+6mt7L/2AfRvgohCfMAGUx7lH
IVq2wNB3J1rQ7scpeI9kAtaFjauJCaSUyru8nXKUWPrSWjEepDnGq8uZEep+0MEC
7YibcORMVNMOQX/ITi48DllkXrgwPz0nX4lI1sJ7Mk1ftc79W9IvLtQ6iNr1yz6N
RRximJlA309tki2wV4+8g6ZLat0vjekNB1eRQt6iQyfKgvmId2amE/jCL8z6W+3/
pN5YhO5NyYVmUiBOZW4+G0Hvv9iQzsKs5GjU0dD94w83bRL6yW2vxuFNd9AJw9WQ
JmcVe9Vh51sc2qhPp8lQF8z2VbjgaI3j0V8YXXL0E94PQfQXkyGJEyDEBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVPYYaYOqbQtinWTVK7jArzSL3eMB8GA1UdIwQY
MBaAFPIRUwEd5Fhq2KgDiH7n0rAK79YbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzct
MjgyNTM3MGM5NWZlLzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzctMjgyNTM3MGM5NWZl
LzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElWiRLQR
1Sf6KF7gWo9ECvWRtaJha4XwOzogccNUdLsE15w6C0EGQpjPb7fRBkse/OK9wQfj
c7NTIzDf+7OepVKCbpyzdkkaeBtTvJLroG1kkZ1ALx5/DACwP+6EV3fk7/LSKLct
1pC25w/zrsHYC6U931Yp877rda/H63wdqAIE0nmgmvASfDFXnHJLn3a6W40I9X8A
JBCm2tciP+zP5d0zsJfoJJODBDKfBcuFASS46MfG2+rvNJ0uWvZm3zpU7PyJ9E9/
nVaIq0n7fghbh2AGf1e1HzCkeYCOblfqIE8ZXLFunZQDZIu2R9N+BnkqP2Yg1Zdv
WgfAWbSafDOxQA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:51 2026 by rpki-client