Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File:                     gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier:          FuYC7HBPGJZ5MT+l3x1jSZlr8K+jotfG6/sZa9C01SE=
Subject key identifier:   6F:3F:C0:42:40:F3:8E:84:D5:CA:90:DD:7D:E0:98:CB:42:28:5C:CE
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer:       /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial:       019EBB7D5FCB2305CB291083CC170AE09F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number:          1088
Signing time:             Fri 12 Jun 2026 11:00:16 +0000
Manifest this update:     Fri 12 Jun 2026 11:00:16 +0000
Manifest next update:     Sat 13 Jun 2026 11:00:16 +0000
Files and hashes:         1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
                          2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: cc1tdStZEHws7qeqyhCuUGuJw+kBHBrePTtW7//z6Ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:7d:5f:cb:23:05:cb:29:10:83:cc:17:0a:e0:9f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
        Validity
            Not Before: Jun 12 11:00:16 2026 GMT
            Not After : Jun 13 11:00:16 2026 GMT
        Subject: CN=6f3fc04240f38e84d5ca90dd7de098cb42285cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:ad:2d:f9:f8:2f:c7:5e:db:13:93:ae:26:
                    1f:0b:38:8a:00:cb:95:ff:0d:7f:84:ee:b5:43:cb:
                    c0:84:d8:aa:61:ad:da:23:20:c7:54:ac:5e:20:91:
                    4a:31:02:64:84:6e:06:af:a2:df:0d:06:3e:18:89:
                    d2:74:2d:12:e3:38:69:96:00:06:2f:07:bd:a9:7b:
                    1d:34:18:dc:85:20:0f:09:24:91:31:88:32:04:1c:
                    80:82:61:a2:18:f7:96:70:68:75:36:6c:a9:1a:ca:
                    01:b3:2b:71:35:f1:a9:0c:38:c8:d8:da:f4:dc:4e:
                    e6:b6:f9:93:0a:4b:2d:36:35:4d:14:c2:bb:52:e0:
                    6b:85:42:90:8f:45:0d:cb:5d:19:3e:b9:7d:dd:ed:
                    23:c7:9b:91:ff:39:58:72:ea:b0:bf:64:b2:3f:c1:
                    69:b6:0c:26:e7:7e:ce:b4:c6:f0:10:c2:35:58:a2:
                    83:23:c0:f9:99:d2:35:00:c6:d4:12:8d:11:d4:de:
                    bb:4c:38:6d:f3:9f:1a:ee:5e:29:89:17:b9:d0:fa:
                    10:58:5a:e5:31:2b:15:2f:0e:78:13:3f:78:8a:d4:
                    4c:e8:8a:44:03:17:c9:40:5b:01:ee:60:72:2a:22:
                    83:a2:59:d5:90:f9:be:25:10:b5:7d:c2:63:bb:62:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3F:C0:42:40:F3:8E:84:D5:CA:90:DD:7D:E0:98:CB:42:28:5C:CE
            X509v3 Authority Key Identifier:
                keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:69:89:e3:c5:55:73:9f:dd:0b:1b:b5:74:e5:a1:e6:7a:fc:
         a9:99:76:59:8b:29:87:34:09:25:65:c6:29:76:ae:df:8b:d9:
         e1:5d:62:00:c7:fe:6e:fa:fc:58:22:ff:de:30:c6:c8:14:bf:
         25:1f:3d:a1:13:22:b5:95:c1:c2:44:7f:70:4e:b9:e3:16:2f:
         f1:28:6e:91:0b:2a:eb:d1:f1:43:52:4e:6b:63:cb:5b:a8:48:
         2c:ec:73:28:e0:3f:60:bb:02:24:b5:51:5b:c7:b4:d4:e9:54:
         08:f2:ee:d3:57:14:96:4f:e3:ca:41:1f:c2:67:d1:df:fc:c1:
         57:3b:8e:51:92:b3:fc:38:d0:cb:52:60:60:f0:f8:e0:15:16:
         4f:5a:97:b7:cd:23:f3:2a:64:a3:45:26:78:bb:da:d8:37:0b:
         ce:c1:22:d7:18:42:28:5b:f0:bf:18:9b:79:5e:48:ce:ba:82:
         f7:fa:0c:f6:28:e8:43:83:9b:8a:a8:e1:b1:1c:74:96:a2:c1:
         f6:29:3e:1c:57:06:67:76:8c:06:e2:59:47:ae:37:29:28:7d:
         f2:3c:22:c0:f7:bf:fb:82:84:eb:24:0e:79:41:60:23:35:c1:
         4a:52:b4:f1:28:76:89:ba:1d:d8:2f:c4:0f:37:9c:72:fb:1c:
         25:b6:57:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ67fV/LIwXLKRCDzBcK4J+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjYwNjEyMTEwMDE2WhcNMjYwNjEzMTEwMDE2WjAzMTEwLwYDVQQD
Eyg2ZjNmYzA0MjQwZjM4ZTg0ZDVjYTkwZGQ3ZGUwOThjYjQyMjg1Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9etLfn4L8de2xOTriYfCziKAMuV
/w1/hO61Q8vAhNiqYa3aIyDHVKxeIJFKMQJkhG4Gr6LfDQY+GInSdC0S4zhplgAG
Lwe9qXsdNBjchSAPCSSRMYgyBByAgmGiGPeWcGh1NmypGsoBsytxNfGpDDjI2Nr0
3E7mtvmTCkstNjVNFMK7UuBrhUKQj0UNy10ZPrl93e0jx5uR/zlYcuqwv2SyP8Fp
tgwm537OtMbwEMI1WKKDI8D5mdI1AMbUEo0R1N67TDht858a7l4piRe50PoQWFrl
MSsVLw54Ez94itRM6IpEAxfJQFsB7mByKiKDolnVkPm+JRC1fcJju2IINQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8/wEJA846E1cqQ3X3gmMtCKFzOMB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWmJ48VV
c5/dCxu1dOWh5nr8qZl2WYsphzQJJWXGKXau34vZ4V1iAMf+bvr8WCL/3jDGyBS/
JR89oRMitZXBwkR/cE654xYv8ShukQsq69HxQ1JOa2PLW6hILOxzKOA/YLsCJLVR
W8e01OlUCPLu01cUlk/jykEfwmfR3/zBVzuOUZKz/DjQy1JgYPD44BUWT1qXt80j
8ypko0UmeLva2DcLzsEi1xhCKFvwvxibeV5IzrqC9/oM9ijoQ4ObiqjhsRx0lqLB
9ik+HFcGZ3aMBuJZR643KSh98jwiwPe/+4KE6yQOeUFgIzXBSlK08Sh2ibod2C/E
DzeccvscJbZXuw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 13:55:29 2026 by rpki-client