Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
File:                     8grs7rj8hZw3YvMTcflKAE24zEI.mft (raw, json)
Hash identifier:          0TrAs58HWtNFHuM+urVarUYWbi/f+i/1z1LZDLm8h7Y=
Subject key identifier:   77:BF:38:BA:2C:52:03:2C:93:BD:69:D6:04:29:37:D6:8B:4D:3D:37
Authority key identifier: F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
Certificate issuer:       /CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Certificate serial:       019EB845B4C5542022E692045E33A5A8BFD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
Manifest number:          010F
Signing time:             Thu 11 Jun 2026 20:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:36 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:36 +0000
Files and hashes:         1: 8grs7rj8hZw3YvMTcflKAE24zEI.crl (hash: HxKH7Xs1isqshorS+sv0JsqISPGAknyvhw2T9pFPP5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:b4:c5:54:20:22:e6:92:04:5e:33:a5:a8:bf:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
        Validity
            Not Before: Jun 11 20:00:36 2026 GMT
            Not After : Jun 12 20:00:36 2026 GMT
        Subject: CN=77bf38ba2c52032c93bd69d6042937d68b4d3d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:95:a1:3b:0c:dc:dc:f0:3f:28:72:cc:9d:
                    f7:61:2c:00:41:0b:c4:51:bf:cf:69:3d:d3:dd:bd:
                    bf:5b:21:c8:5d:c6:4e:e6:42:55:67:4b:fe:8d:d5:
                    60:e4:c4:c4:67:61:8d:1c:ab:7f:1c:fe:6b:6d:2e:
                    d1:8a:68:ee:44:d9:df:32:61:a5:18:db:6b:44:a3:
                    3d:00:10:96:7f:db:1d:db:3b:2f:d6:14:c7:9c:23:
                    43:54:b5:f3:99:ee:b0:98:f2:91:13:62:16:e2:e1:
                    f1:74:c7:66:cf:2a:8c:72:b8:68:f0:09:c2:95:a5:
                    90:86:26:1b:3d:33:cd:c4:6b:21:7d:f8:5e:c3:8a:
                    2f:0b:3c:68:89:56:68:33:9f:bf:7a:4a:50:c1:74:
                    32:8b:6e:41:fd:dd:ff:7f:42:29:4b:93:a9:10:3f:
                    26:37:73:74:28:40:5f:1b:e1:1e:b7:39:0e:16:20:
                    ef:40:cf:86:0e:04:98:3c:58:ad:4a:ce:e5:8b:6a:
                    d1:0e:7a:4d:4c:f6:75:80:cc:1f:af:bb:c5:63:17:
                    96:02:04:8d:8a:5e:f2:f2:a4:85:b9:f2:56:bc:36:
                    c4:94:21:b5:b1:b9:5b:a7:ba:74:cd:ed:a9:35:c8:
                    03:bd:ba:e2:6d:ae:cd:83:a9:57:4d:ac:8c:78:66:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BF:38:BA:2C:52:03:2C:93:BD:69:D6:04:29:37:D6:8B:4D:3D:37
            X509v3 Authority Key Identifier:
                keyid:F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:32:41:76:cc:b3:e6:d6:e7:a3:53:ab:6b:8f:f2:1d:4b:
         1e:bb:1a:c6:44:eb:df:a2:81:86:94:5e:7e:2c:85:b6:b7:e9:
         e0:c3:52:5d:2d:2b:a0:dd:04:76:9a:d0:c1:d6:e2:bf:da:b1:
         54:a2:f1:04:29:e1:31:25:dd:b5:fb:f6:d8:13:72:f4:62:98:
         4d:67:98:40:f4:60:9c:d7:f3:90:de:50:37:d3:75:41:b8:6e:
         eb:c2:69:5f:02:47:34:94:96:3d:48:6c:61:db:ff:12:13:41:
         f1:2b:b2:4c:38:51:44:d9:19:e3:fb:48:25:8a:7b:3d:18:ed:
         70:b0:46:fa:9f:72:46:e6:46:61:aa:ec:db:e6:ab:a0:92:6e:
         0c:6b:61:c3:73:9a:f7:bc:3c:24:22:e8:80:30:4d:2d:d3:f9:
         eb:50:d4:49:6e:ab:ff:69:7f:eb:fa:2a:c3:c0:ce:8c:5a:2b:
         e2:18:90:e0:1e:94:23:a3:6b:9b:60:be:c3:2b:e1:bd:0c:85:
         44:31:c9:2f:0d:71:9d:63:fb:e2:71:6a:80:3e:24:37:18:92:
         64:31:b2:f1:7b:79:7d:5a:94:9c:00:7f:a7:28:79:0f:24:d6:
         14:fb:40:53:d4:cd:ef:20:c0:83:d9:df:7c:65:b3:0b:05:82:
         d9:a3:a1:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RbTFVCAi5pIEXjOlqL/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGFlY2VlYjhmYzg1OWMzNzYyZjMxMzcxZjk0YTAwNGRi
OGNjNDIwHhcNMjYwNjExMjAwMDM2WhcNMjYwNjEyMjAwMDM2WjAzMTEwLwYDVQQD
Eyg3N2JmMzhiYTJjNTIwMzJjOTNiZDY5ZDYwNDI5MzdkNjhiNGQzZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuomVoTsM3NzwPyhyzJ33YSwAQQvE
Ub/PaT3T3b2/WyHIXcZO5kJVZ0v+jdVg5MTEZ2GNHKt/HP5rbS7RimjuRNnfMmGl
GNtrRKM9ABCWf9sd2zsv1hTHnCNDVLXzme6wmPKRE2IW4uHxdMdmzyqMcrho8AnC
laWQhiYbPTPNxGshffhew4ovCzxoiVZoM5+/ekpQwXQyi25B/d3/f0IpS5OpED8m
N3N0KEBfG+EetzkOFiDvQM+GDgSYPFitSs7li2rRDnpNTPZ1gMwfr7vFYxeWAgSN
il7y8qSFufJWvDbElCG1sblbp7p0ze2pNcgDvbriba7Ng6lXTayMeGZGjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe/OLosUgMsk71p1gQpN9aLTT03MB8GA1UdIwQY
MBaAFPIK7O64/IWcN2LzE3H5SgBNuMxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xMDYyZTctNDM1ZC00YTkxLWExZTQt
YmQ2ZmFmMDIyYmY2LzEvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xMDYyZTctNDM1ZC00YTkxLWExZTQtYmQ2ZmFmMDIyYmY2
LzEvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZoyQXbM
s+bW56NTq2uP8h1LHrsaxkTr36KBhpRefiyFtrfp4MNSXS0roN0EdprQwdbiv9qx
VKLxBCnhMSXdtfv22BNy9GKYTWeYQPRgnNfzkN5QN9N1Qbhu68JpXwJHNJSWPUhs
Ydv/EhNB8SuyTDhRRNkZ4/tIJYp7PRjtcLBG+p9yRuZGYars2+aroJJuDGthw3Oa
97w8JCLogDBNLdP561DUSW6r/2l/6/oqw8DOjFor4hiQ4B6UI6Nrm2C+wyvhvQyF
RDHJLw1xnWP74nFqgD4kNxiSZDGy8Xt5fVqUnAB/pyh5DyTWFPtAU9TN7yDAg9nf
fGWzCwWC2aOhPg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:37 2026 by rpki-client