Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File:                     8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier:          QNZTnPOA8nDTnjdshHEdbRjI44upy7bO3MYOS9npgIc=
Subject key identifier:   30:13:53:63:F8:B4:D3:8D:15:35:B1:FA:AF:C7:16:B3:29:EE:12:68
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer:       /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial:       019E31171577B6D966FDEFA80155093C71E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number:          0B4C
Signing time:             Sat 16 May 2026 14:00:56 +0000
Manifest this update:     Sat 16 May 2026 14:00:56 +0000
Manifest next update:     Sun 17 May 2026 14:00:56 +0000
Files and hashes:         1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: m9VcezjFwVPiTPF3i9IE6GZv/psLFj9T+gX6/tE4Sqo=)
                          2: Y3IZ9qCwUd5F2pR3sNX6lIyY6Pw.roa (hash: LV0AUIrFJfTCffSGhCZkNnJY82iWH8kCbOJwGo9wRiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:15:77:b6:d9:66:fd:ef:a8:01:55:09:3c:71:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
        Validity
            Not Before: May 16 14:00:56 2026 GMT
            Not After : May 17 14:00:56 2026 GMT
        Subject: CN=30135363f8b4d38d1535b1faafc716b329ee1268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:d4:46:5d:05:56:fb:40:f6:bf:ad:60:fb:
                    1d:50:7b:2f:e1:86:0f:1b:db:62:f5:4d:77:1c:36:
                    78:8d:26:15:36:ca:68:b5:77:53:58:2c:10:3f:4e:
                    9c:86:7a:14:c6:31:88:8f:e0:d4:17:f1:16:7b:64:
                    53:d5:80:d9:f1:4f:91:4a:6d:27:85:17:84:32:04:
                    34:04:9c:ef:85:3a:ea:8e:3c:da:0e:3e:a4:d3:65:
                    9e:cf:31:39:5b:4d:e4:1b:05:39:aa:81:ae:35:3a:
                    7e:5f:ed:6a:bf:c5:8d:ab:ef:b8:23:6a:fc:12:f1:
                    4c:44:8f:80:8e:11:f8:f2:e1:b4:a2:61:d0:c5:48:
                    a9:0d:d8:0f:c4:00:92:0f:e4:d8:81:eb:d5:5b:62:
                    3e:a8:bb:d6:77:55:73:87:3b:1c:46:e1:0a:66:2f:
                    d2:eb:1c:86:a2:f4:6a:3e:eb:55:6a:62:4e:95:bd:
                    e1:7e:3a:0f:92:c9:9b:56:c3:e9:c5:34:94:17:ef:
                    65:40:d6:96:00:dd:3e:fb:c6:d2:26:ce:b3:3a:6b:
                    da:7a:6b:b2:d6:45:4f:12:95:35:5b:2f:c6:76:5b:
                    13:69:06:66:b3:71:eb:76:68:5d:9f:9f:f7:58:df:
                    d1:93:a9:3f:70:84:dd:98:1e:6c:2c:94:57:83:00:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:13:53:63:F8:B4:D3:8D:15:35:B1:FA:AF:C7:16:B3:29:EE:12:68
            X509v3 Authority Key Identifier:
                keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c9:22:87:bf:17:a8:4a:0b:42:13:11:53:b4:49:7b:9d:59:
         91:39:ca:63:98:a5:6e:5c:c5:17:2e:52:8c:eb:82:a0:f2:f6:
         05:fc:68:e0:2d:85:10:ae:ad:24:81:67:0a:8c:d0:51:f4:6e:
         6c:13:67:24:9c:7d:03:19:b0:59:90:78:8d:66:9d:7a:a5:c6:
         e9:52:b4:25:63:0c:b9:9a:4a:cf:68:e0:d3:13:a8:15:d0:0b:
         a5:88:08:38:6e:55:ac:72:8d:37:14:fe:50:67:bd:84:a5:a3:
         7f:93:20:e0:bb:38:a1:cc:8a:e4:ee:07:00:c8:00:a4:78:e7:
         19:29:37:5a:40:ce:e6:47:07:2d:e1:f8:c8:f4:1f:c2:f9:5b:
         94:7e:a2:c6:2b:4d:75:58:a7:b3:e0:83:82:ca:84:87:54:b9:
         b2:fa:3f:7d:29:f4:eb:89:0e:7d:35:b7:7a:7b:d3:77:40:6d:
         25:f0:85:92:bb:46:e7:da:02:48:6e:ae:4c:59:22:e0:8b:16:
         95:68:54:29:c7:c2:9b:ec:c7:cd:74:0b:37:34:cf:68:ad:2d:
         6f:a4:e2:c8:5e:af:15:b1:54:e4:5d:ca:f3:29:3d:84:89:f2:
         af:25:8b:d2:dc:37:3f:80:24:f5:07:ae:4d:d8:5d:2d:6c:e0:
         52:f9:37:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xFxV3ttlm/e+oAVUJPHHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOWE2OTk1ODAxODVkNjUxMDAxNWUxZDJjYTE5ZWZmNDM2
NDFlZGMwHhcNMjYwNTE2MTQwMDU2WhcNMjYwNTE3MTQwMDU2WjAzMTEwLwYDVQQD
EygzMDEzNTM2M2Y4YjRkMzhkMTUzNWIxZmFhZmM3MTZiMzI5ZWUxMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLbURl0FVvtA9r+tYPsdUHsv4YYP
G9ti9U13HDZ4jSYVNspotXdTWCwQP06chnoUxjGIj+DUF/EWe2RT1YDZ8U+RSm0n
hReEMgQ0BJzvhTrqjjzaDj6k02WezzE5W03kGwU5qoGuNTp+X+1qv8WNq++4I2r8
EvFMRI+AjhH48uG0omHQxUipDdgPxACSD+TYgevVW2I+qLvWd1VzhzscRuEKZi/S
6xyGovRqPutVamJOlb3hfjoPksmbVsPpxTSUF+9lQNaWAN0++8bSJs6zOmvaemuy
1kVPEpU1Wy/GdlsTaQZms3Hrdmhdn5/3WN/Rk6k/cITdmB5sLJRXgwBQywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDATU2P4tNONFTWx+q/HFrMp7hJoMB8GA1UdIwQY
MBaAFPKaaZWAGF1lEAFeHSyhnv9DZB7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTIt
OGU2YTI5NWY4MDZmLzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTItOGU2YTI5NWY4MDZm
LzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8kih78X
qEoLQhMRU7RJe51ZkTnKY5ilblzFFy5SjOuCoPL2Bfxo4C2FEK6tJIFnCozQUfRu
bBNnJJx9AxmwWZB4jWadeqXG6VK0JWMMuZpKz2jg0xOoFdALpYgIOG5VrHKNNxT+
UGe9hKWjf5Mg4Ls4ocyK5O4HAMgApHjnGSk3WkDO5kcHLeH4yPQfwvlblH6ixitN
dVins+CDgsqEh1S5svo/fSn064kOfTW3envTd0BtJfCFkrtG59oCSG6uTFki4IsW
lWhUKcfCm+zHzXQLNzTPaK0tb6TiyF6vFbFU5F3K8yk9hInyryWL0tw3P4Ak9Qeu
TdhdLWzgUvk3mA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:49 2026 by rpki-client