Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File:                     CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier:          VusnlXHotMJWK1s16nnjuxVmFs6db9E/EOT79+LVqpc=
Subject key identifier:   4F:6B:5A:AF:BF:99:82:6C:E3:7F:34:A7:9F:3E:A7:3C:30:C9:35:6A
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer:       /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial:       019F186752126F8C8F8D140895B56DE17746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number:          08B2
Signing time:             Tue 30 Jun 2026 12:00:51 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:51 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:51 +0000
Files and hashes:         1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: ZDucyH5Mf7iFf2yGLWua6OB67/dJka3ud4L76Gu50i8=)
                          2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:52:12:6f:8c:8f:8d:14:08:95:b5:6d:e1:77:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
        Validity
            Not Before: Jun 30 12:00:51 2026 GMT
            Not After : Jul  1 12:00:51 2026 GMT
        Subject: CN=4f6b5aafbf99826ce37f34a79f3ea73c30c9356a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:97:d7:4b:6f:b8:94:5d:09:12:7a:0a:db:
                    62:25:ba:3d:31:2c:28:aa:a2:be:ad:c6:49:e5:82:
                    6c:d6:ce:df:e6:1a:d6:dc:16:46:04:af:67:47:da:
                    5b:97:5d:89:d9:59:50:3f:36:57:65:a1:5d:df:65:
                    88:ce:d5:e3:8b:b1:51:fb:d1:1b:dd:e6:c3:6f:14:
                    74:05:77:fa:6a:17:6e:ea:a7:8d:fd:fe:69:11:3e:
                    6c:0b:aa:c0:fc:40:a0:09:fe:03:50:db:d5:f5:b9:
                    b2:ac:b4:48:ac:f5:55:d5:a8:c2:0f:cd:3e:74:7f:
                    9f:05:df:9c:32:a2:87:ce:c7:a1:fa:ec:b4:fe:c1:
                    4f:3d:ce:2e:1b:0b:79:bf:7e:ec:cd:22:7f:76:83:
                    db:5f:bf:fd:05:1e:57:fa:4f:73:e6:ee:64:67:9f:
                    fa:88:f2:49:b4:d3:d6:5b:e0:2c:e8:30:dd:a9:27:
                    52:db:cd:ee:dd:01:40:08:09:15:9a:9e:aa:aa:2a:
                    a5:3b:0d:a9:bb:59:f2:15:86:3d:20:22:b6:3f:43:
                    73:e7:be:e8:48:e8:75:34:94:3b:ee:e8:0d:72:64:
                    0e:d4:5e:dc:0e:b0:18:49:a0:78:cf:d6:e3:27:d0:
                    aa:ed:31:33:cf:aa:1d:03:aa:36:fb:54:90:75:1d:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6B:5A:AF:BF:99:82:6C:E3:7F:34:A7:9F:3E:A7:3C:30:C9:35:6A
            X509v3 Authority Key Identifier:
                keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:3d:92:44:89:08:04:8e:6d:94:79:38:0e:82:95:70:77:
         ba:96:55:fd:db:d3:68:59:74:55:80:c6:6c:ea:7b:6d:29:86:
         4f:e0:f7:87:cc:64:17:9e:55:e3:bf:de:75:46:d7:b6:70:58:
         c7:ac:95:a2:89:38:a0:53:83:9d:03:3f:84:42:88:2c:7b:53:
         de:32:9e:8f:c7:b8:ba:46:c3:fb:a8:4e:d4:aa:81:32:50:6f:
         49:01:c4:9a:22:d8:b0:6b:42:19:e5:2e:53:83:48:c1:e5:9f:
         0c:19:cc:c3:b4:59:a7:4b:53:57:8e:71:fb:de:51:8a:26:b4:
         f9:f7:49:14:75:8e:9f:d5:07:af:c1:59:13:ff:c3:f6:e0:ef:
         8e:ae:3e:2e:15:51:82:26:f9:be:0e:f3:2e:de:45:a2:e0:ef:
         88:87:d8:93:68:93:37:6c:56:7d:1f:a4:91:49:16:ba:ba:55:
         ce:e2:f5:05:b7:27:88:d7:cd:88:7c:21:ee:28:66:89:6c:b9:
         c8:7c:d2:c6:2f:f7:d9:1f:99:a2:c3:8b:5b:f4:ac:35:f6:bc:
         73:dc:1e:be:11:1e:73:20:52:af:1f:ee:9e:01:86:fa:84:61:
         5d:e4:73:96:5d:59:6e:de:68:30:d4:61:09:d1:45:56:ea:db:
         58:df:9a:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ1ISb4yPjRQIlbVt4XdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj
YjFkYzkwHhcNMjYwNjMwMTIwMDUxWhcNMjYwNzAxMTIwMDUxWjAzMTEwLwYDVQQD
Eyg0ZjZiNWFhZmJmOTk4MjZjZTM3ZjM0YTc5ZjNlYTczYzMwYzkzNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGGX10tvuJRdCRJ6CttiJbo9MSwo
qqK+rcZJ5YJs1s7f5hrW3BZGBK9nR9pbl12J2VlQPzZXZaFd32WIztXji7FR+9Eb
3ebDbxR0BXf6ahdu6qeN/f5pET5sC6rA/ECgCf4DUNvV9bmyrLRIrPVV1ajCD80+
dH+fBd+cMqKHzseh+uy0/sFPPc4uGwt5v37szSJ/doPbX7/9BR5X+k9z5u5kZ5/6
iPJJtNPWW+As6DDdqSdS283u3QFACAkVmp6qqiqlOw2pu1nyFYY9ICK2P0Nz577o
SOh1NJQ77ugNcmQO1F7cDrAYSaB4z9bjJ9Cq7TEzz6odA6o2+1SQdR3DzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9rWq+/mYJs4380p58+pzwwyTVqMB8GA1UdIwQY
MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt
NTc0NjJjMjgzMjk0LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0
LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvQ9kkSJ
CASObZR5OA6ClXB3upZV/dvTaFl0VYDGbOp7bSmGT+D3h8xkF55V47/edUbXtnBY
x6yVook4oFODnQM/hEKILHtT3jKej8e4ukbD+6hO1KqBMlBvSQHEmiLYsGtCGeUu
U4NIweWfDBnMw7RZp0tTV45x+95Riia0+fdJFHWOn9UHr8FZE//D9uDvjq4+LhVR
gib5vg7zLt5FouDviIfYk2iTN2xWfR+kkUkWurpVzuL1BbcniNfNiHwh7ihmiWy5
yHzSxi/32R+ZosOLW/SsNfa8c9wevhEecyBSrx/ungGG+oRhXeRzll1Zbt5oMNRh
CdFFVurbWN+azw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:35 2026 by rpki-client