Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File:                     ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier:          GmQ3aMrcwTl2nSgQxRDqFHA9S5fFghlYIut2EkuamVg=
Subject key identifier:   8C:FF:EF:79:39:83:58:64:9F:28:1C:91:C9:C2:F2:FA:76:A2:62:57
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer:       /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial:       019F1265A7D50213503BCFF86A07DA6E9B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number:          161D
Signing time:             Mon 29 Jun 2026 08:01:19 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:19 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:19 +0000
Files and hashes:         1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
                          2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: Gnv0dnE53L1sEB6NPpZ3j3TjeErzhnAwB+VeWqBfI7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:a7:d5:02:13:50:3b:cf:f8:6a:07:da:6e:9b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
        Validity
            Not Before: Jun 29 08:01:19 2026 GMT
            Not After : Jun 30 08:01:19 2026 GMT
        Subject: CN=8cffef79398358649f281c91c9c2f2fa76a26257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:28:38:f5:ab:4e:e5:4c:f3:b6:46:38:a4:
                    b7:ad:27:a8:84:82:6c:fd:c3:89:65:5a:af:cf:c9:
                    42:15:6f:19:75:17:7d:3a:94:9f:a5:7a:bc:46:43:
                    e1:7e:7e:7a:bf:b1:93:2b:6d:c2:4d:03:8a:37:4d:
                    08:bc:17:f4:16:7b:fa:8d:88:77:76:d0:1d:3d:53:
                    df:6a:fc:3f:de:06:13:05:19:bd:7d:d0:c0:1d:64:
                    71:66:f3:ad:85:d6:28:12:a9:03:ba:e9:f0:f1:b1:
                    01:1a:4b:73:71:15:47:a9:e5:b9:19:80:ac:d6:86:
                    97:83:9e:b2:79:a5:a4:ae:ea:94:f7:f7:a3:36:ec:
                    fd:97:59:5d:17:8d:a1:3c:a6:5b:3a:e1:bf:9b:2e:
                    51:01:f4:7c:e6:f0:df:6e:32:d1:7b:78:29:df:79:
                    b2:03:5d:34:d1:c7:22:5e:20:84:46:6b:df:a9:d1:
                    b1:49:7d:f0:10:bd:94:bf:bc:bc:ef:d6:25:fe:83:
                    96:75:c8:43:18:8a:e2:02:5e:68:2f:ea:eb:ab:22:
                    81:bc:aa:2d:73:1a:69:21:25:12:74:55:be:c6:2d:
                    02:b9:f1:03:fa:02:be:66:d3:7a:4a:a6:02:58:7a:
                    a9:4e:43:ec:29:24:b8:70:e3:7f:23:c9:4e:2e:7a:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FF:EF:79:39:83:58:64:9F:28:1C:91:C9:C2:F2:FA:76:A2:62:57
            X509v3 Authority Key Identifier:
                keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:aa:d2:5b:b0:70:01:3a:71:94:41:82:dd:c2:21:aa:6f:d0:
         83:94:65:2e:35:96:56:d5:63:4a:ba:4d:53:45:0e:f1:45:b4:
         39:dd:12:f0:79:65:58:dd:98:4c:9c:99:85:34:a3:7a:6e:36:
         4e:5a:f2:45:72:37:f4:06:a9:3d:71:5d:c9:4d:73:c7:48:24:
         ff:4b:fe:b8:b6:2b:c2:02:5a:ee:96:c6:d8:92:00:e1:1a:33:
         82:c5:5c:74:14:53:bc:14:53:a8:9c:6e:2b:4c:6c:96:78:7b:
         69:bd:ea:e6:c1:16:a7:b6:bf:45:aa:a9:b3:6f:d0:f8:40:e7:
         1c:40:ca:2e:f4:41:ba:07:29:57:a1:ad:95:e4:05:8c:e5:09:
         f2:54:e2:2a:4a:b0:4d:b7:66:75:18:3f:83:be:5d:1c:f0:95:
         b2:75:f9:f2:0a:71:c1:96:60:c3:d4:b7:08:41:49:c2:5a:69:
         be:4a:d1:bf:a4:3d:0a:c7:96:95:1d:50:02:6d:6d:85:ee:0b:
         de:7d:5e:f9:b2:b5:e0:27:e5:63:8d:3a:da:97:9d:05:50:73:
         26:b5:32:10:69:91:2b:1d:ab:21:89:7f:b2:f8:c7:5e:16:06:
         dd:9b:7b:55:41:e0:d7:f7:e6:e5:6f:d7:97:a9:7e:28:59:87:
         78:58:64:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZafVAhNQO8/4agfabptdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTg3Y2E1YjhhZWUxOTVjYzhjYWRjZmI0OGM1NDRiMTgx
NDc3ZWYwHhcNMjYwNjI5MDgwMTE5WhcNMjYwNjMwMDgwMTE5WjAzMTEwLwYDVQQD
Eyg4Y2ZmZWY3OTM5ODM1ODY0OWYyODFjOTFjOWMyZjJmYTc2YTI2MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApggoOPWrTuVM87ZGOKS3rSeohIJs
/cOJZVqvz8lCFW8ZdRd9OpSfpXq8RkPhfn56v7GTK23CTQOKN00IvBf0Fnv6jYh3
dtAdPVPfavw/3gYTBRm9fdDAHWRxZvOthdYoEqkDuunw8bEBGktzcRVHqeW5GYCs
1oaXg56yeaWkruqU9/ejNuz9l1ldF42hPKZbOuG/my5RAfR85vDfbjLRe3gp33my
A1000cciXiCERmvfqdGxSX3wEL2Uv7y879Yl/oOWdchDGIriAl5oL+rrqyKBvKot
cxppISUSdFW+xi0CufED+gK+ZtN6SqYCWHqpTkPsKSS4cON/I8lOLnrSMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIz/73k5g1hknygckcnC8vp2omJXMB8GA1UdIwQY
MBaAFGoYfKW4ruGVzIytz7SMVEsYFHfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmIt
YmYwM2RjODM3OTAwLzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmItYmYwM2RjODM3OTAw
LzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6rSW7Bw
ATpxlEGC3cIhqm/Qg5RlLjWWVtVjSrpNU0UO8UW0Od0S8HllWN2YTJyZhTSjem42
TlryRXI39AapPXFdyU1zx0gk/0v+uLYrwgJa7pbG2JIA4RozgsVcdBRTvBRTqJxu
K0xslnh7ab3q5sEWp7a/Raqps2/Q+EDnHEDKLvRBugcpV6GtleQFjOUJ8lTiKkqw
TbdmdRg/g75dHPCVsnX58gpxwZZgw9S3CEFJwlppvkrRv6Q9CseWlR1QAm1the4L
3n1e+bK14CflY4062pedBVBzJrUyEGmRKx2rIYl/svjHXhYG3Zt7VUHg1/fm5W/X
l6l+KFmHeFhkzA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:55 2026 by rpki-client