Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          CE1bohxNkWti9XUBor+VsEEVDXWmfT2X4v4uZokjZks=
Subject key identifier:   7F:86:E5:8E:8F:4D:8C:9F:49:D6:10:D7:5E:DE:31:AB:78:DD:F1:55
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       019EB50D9969B194A3B6DCEF84ADFB5777FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          08CC
Signing time:             Thu 11 Jun 2026 05:00:27 +0000
Manifest this update:     Thu 11 Jun 2026 05:00:27 +0000
Manifest next update:     Fri 12 Jun 2026 05:00:27 +0000
Files and hashes:         1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: MTPTGcX1HVJ0WRhttJFezmXLDPtTBhNOValZrH21+7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:0d:99:69:b1:94:a3:b6:dc:ef:84:ad:fb:57:77:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Jun 11 05:00:27 2026 GMT
            Not After : Jun 12 05:00:27 2026 GMT
        Subject: CN=7f86e58e8f4d8c9f49d610d75ede31ab78ddf155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:c3:90:a1:e4:53:2b:4f:d1:89:9d:8c:b3:
                    a7:fc:56:3c:a8:dc:cb:b0:3f:77:68:c8:c0:6a:7f:
                    35:57:0d:68:a0:f5:66:67:ae:e6:ef:00:ae:a0:2c:
                    4e:7d:ec:b9:97:d8:35:4b:75:b7:4b:da:13:0e:87:
                    90:15:1c:c9:00:0b:56:d4:db:de:00:c6:f4:f1:35:
                    3f:d9:ef:91:9a:c3:b6:18:2e:bb:16:44:62:96:10:
                    c0:9a:64:22:1b:e1:b8:ee:e1:7d:91:ce:d9:28:69:
                    45:67:9f:a9:bb:ee:a5:38:b7:a0:72:ea:a5:c8:55:
                    7b:13:22:e4:3e:ba:ed:84:e6:e7:19:5b:f9:ee:17:
                    d6:2f:02:a9:1f:aa:97:42:b4:51:c0:d7:f3:bc:6b:
                    fc:35:29:33:97:ae:7b:6a:9f:e4:26:5d:65:fb:55:
                    c5:02:b6:18:32:c7:e7:60:a7:10:02:b4:75:f1:05:
                    a6:cc:e9:28:8b:d9:97:42:89:3f:aa:b7:13:83:57:
                    e7:2c:cf:85:b9:4e:11:d5:ee:87:a3:47:98:e8:ca:
                    10:b1:f4:da:14:34:e0:d9:cb:8c:19:08:70:d9:bd:
                    e9:3f:4c:96:a1:45:43:3e:de:4a:99:89:2b:e1:23:
                    4e:f6:f0:bc:94:52:d2:0e:0a:8b:ee:4f:2e:91:22:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:86:E5:8E:8F:4D:8C:9F:49:D6:10:D7:5E:DE:31:AB:78:DD:F1:55
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:4a:e3:7c:12:88:9c:67:09:84:74:60:42:93:89:cd:61:
         26:03:21:15:f6:f1:ba:fa:ad:6e:a8:4c:5c:e6:b6:9b:7c:d0:
         c7:1e:4a:ad:54:de:28:6f:1d:34:d3:7b:fd:25:43:f5:e3:18:
         6f:44:9e:29:5a:03:33:2e:17:aa:5f:88:cb:75:ba:12:17:e8:
         4c:07:40:56:39:86:be:db:d9:41:49:fe:5d:f9:98:97:92:85:
         45:ab:02:72:a3:75:71:b3:9d:d1:fd:63:30:3a:16:94:ff:9a:
         4c:a2:76:6a:d5:35:cc:ed:ca:a2:61:c0:0b:ba:12:75:ca:c8:
         01:5d:02:a1:ac:0e:24:9b:34:9b:c1:a0:b9:23:a1:9e:c6:ef:
         75:8a:4a:ad:98:8e:c3:53:c1:87:b8:0b:a8:9c:20:ce:5d:d6:
         e9:47:e5:34:d0:2f:73:36:35:42:c5:f9:bf:d2:dd:28:e5:8f:
         d6:27:5a:2a:63:10:5e:dc:8e:39:25:e4:64:27:e7:f2:4c:24:
         b8:97:20:fd:8b:89:0f:56:22:a3:36:da:90:01:8d:36:d1:c5:
         bd:47:91:07:02:95:eb:6d:ff:95:82:74:19:4a:25:19:d6:c1:
         57:fa:fb:32:1c:78:38:bb:fd:bc:8b:e7:bf:a9:80:b5:3b:28:
         92:3c:d5:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ61DZlpsZSjttzvhK37V3f9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmI1NjkzYjgyNjFmYjUzOWZlYTNiMTNjODE3MTE1ZjAw
YzE4ZGYwHhcNMjYwNjExMDUwMDI3WhcNMjYwNjEyMDUwMDI3WjAzMTEwLwYDVQQD
Eyg3Zjg2ZTU4ZThmNGQ4YzlmNDlkNjEwZDc1ZWRlMzFhYjc4ZGRmMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdDDkKHkUytP0YmdjLOn/FY8qNzL
sD93aMjAan81Vw1ooPVmZ67m7wCuoCxOfey5l9g1S3W3S9oTDoeQFRzJAAtW1Nve
AMb08TU/2e+RmsO2GC67FkRilhDAmmQiG+G47uF9kc7ZKGlFZ5+pu+6lOLegcuql
yFV7EyLkPrrthObnGVv57hfWLwKpH6qXQrRRwNfzvGv8NSkzl657ap/kJl1l+1XF
ArYYMsfnYKcQArR18QWmzOkoi9mXQok/qrcTg1fnLM+FuU4R1e6Ho0eY6MoQsfTa
FDTg2cuMGQhw2b3pP0yWoUVDPt5KmYkr4SNO9vC8lFLSDgqL7k8ukSIewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+G5Y6PTYyfSdYQ117eMat43fFVMB8GA1UdIwQY
MBaAFJgrVpO4Jh+1Of6jsTyBcRXwDBjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYt
MWRhNGI5Mjc5OWY2LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYtMWRhNGI5Mjc5OWY2
LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8BK43wS
iJxnCYR0YEKTic1hJgMhFfbxuvqtbqhMXOa2m3zQxx5KrVTeKG8dNNN7/SVD9eMY
b0SeKVoDMy4Xql+Iy3W6EhfoTAdAVjmGvtvZQUn+XfmYl5KFRasCcqN1cbOd0f1j
MDoWlP+aTKJ2atU1zO3KomHAC7oSdcrIAV0CoawOJJs0m8GguSOhnsbvdYpKrZiO
w1PBh7gLqJwgzl3W6UflNNAvczY1QsX5v9LdKOWP1idaKmMQXtyOOSXkZCfn8kwk
uJcg/YuJD1YiozbakAGNNtHFvUeRBwKV623/lYJ0GUolGdbBV/r7Mhx4OLv9vIvn
v6mAtTsokjzVEg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 15:52:35 2026 by rpki-client