Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File:                     jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier:          bOxAGLEMdCzfBCOUt2o2lOqEhy4vaYLQajwYkGWaD0g=
Subject key identifier:   9F:69:50:F9:4E:07:D2:C2:B3:B8:9E:D9:B4:A4:40:33:0C:D1:08:78
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer:       /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial:       019EB8B48E3D3CF4A77DF2F00221D6E44A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number:          05F4
Signing time:             Thu 11 Jun 2026 22:01:40 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:40 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:40 +0000
Files and hashes:         1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: jbCZO6qo4zyt2YBpuAqTGVtdsfj5iGhLEULwLdWwYdQ=)
                          2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:8e:3d:3c:f4:a7:7d:f2:f0:02:21:d6:e4:4a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
        Validity
            Not Before: Jun 11 22:01:40 2026 GMT
            Not After : Jun 12 22:01:40 2026 GMT
        Subject: CN=9f6950f94e07d2c2b3b89ed9b4a440330cd10878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:4b:5f:fd:ff:85:90:4f:dd:c1:69:f3:2b:
                    8f:58:99:07:2b:f2:df:18:bd:71:dc:a7:03:c3:5b:
                    0e:a1:17:b5:15:d7:32:35:e6:d9:7f:fe:50:bf:2f:
                    b9:7d:90:1e:cb:03:ed:25:1e:41:fa:c3:88:c6:3d:
                    75:e6:ef:5e:35:d9:2a:63:f4:b9:c8:f6:91:aa:5d:
                    35:24:7f:bd:41:96:12:51:93:71:25:74:7a:7a:5f:
                    29:00:be:ba:7d:b9:5c:84:d6:1d:f8:c5:b8:5f:97:
                    b5:4f:b0:b2:5f:e8:4b:32:a4:1c:b7:6f:e7:80:61:
                    39:e2:10:41:f3:46:46:fa:6f:3e:44:99:fd:48:c4:
                    77:d3:6a:56:e1:83:59:9e:10:10:aa:d3:41:8b:19:
                    c0:38:6b:3a:aa:4c:20:ea:31:50:a2:dd:8f:42:01:
                    40:c3:90:56:77:1a:d8:d7:33:96:94:d4:b9:13:e9:
                    17:b3:74:cb:89:de:12:f4:7d:a4:08:80:f9:3a:30:
                    71:cb:1f:92:11:a9:c6:1b:19:ea:33:8c:04:ff:1c:
                    9b:c9:25:99:77:1d:ba:46:7a:16:24:1e:b6:37:32:
                    9b:f2:40:2c:09:63:70:ff:af:5b:86:1a:d1:ab:21:
                    85:3c:1a:64:f7:7a:4a:30:c9:63:c4:d5:4c:4b:1a:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:69:50:F9:4E:07:D2:C2:B3:B8:9E:D9:B4:A4:40:33:0C:D1:08:78
            X509v3 Authority Key Identifier:
                keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:16:8a:d9:79:6f:30:ac:ec:e6:9d:be:56:16:d6:d2:d6:25:
         82:2c:aa:ac:2b:13:c6:e2:7b:e2:7b:89:b6:57:a6:db:cd:56:
         45:19:7a:7c:89:f3:dc:c8:24:28:01:e8:2d:1f:1f:6d:7d:49:
         d2:fa:8f:d3:9b:8f:2e:3c:7b:cb:bf:5f:a6:ad:41:4c:2c:93:
         f3:d1:5a:a0:cc:cc:d7:94:5a:d4:1d:d8:67:b2:86:93:26:8a:
         fa:e4:fa:12:d9:b4:23:cd:2d:9d:f5:3f:c4:fe:76:ac:1c:f8:
         ee:d4:b7:57:c1:e7:e9:b8:61:ae:4b:2a:04:fe:b2:e9:73:bc:
         bf:d4:e6:29:a7:fe:10:e1:db:d6:73:42:87:39:51:20:45:5e:
         34:92:67:ce:34:be:fd:c5:ce:f4:0e:43:b0:f0:09:05:83:6d:
         aa:f3:9f:10:5c:44:0b:b3:9a:78:de:d6:05:3e:d7:d1:40:2b:
         f5:79:8e:84:e6:6d:15:a2:5e:99:e0:dc:fe:c9:bd:08:11:c1:
         e6:f8:7b:d4:34:3c:82:1b:01:16:d2:dc:9e:7b:ed:9a:03:da:
         e4:9a:03:f0:e2:76:05:0b:de:c9:9e:9e:0b:19:12:a6:3e:64:
         96:bd:2d:4a:7f:09:25:db:99:5e:30:b9:64:aa:49:67:96:d6:
         86:70:25:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tI49PPSnffLwAiHW5EqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODBiNDU0NTVkODk3MzFmODdiYjUzZjRkYmU2NDExODk4
MzdkNGUwHhcNMjYwNjExMjIwMTQwWhcNMjYwNjEyMjIwMTQwWjAzMTEwLwYDVQQD
Eyg5ZjY5NTBmOTRlMDdkMmMyYjNiODllZDliNGE0NDAzMzBjZDEwODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kVLX/3/hZBP3cFp8yuPWJkHK/Lf
GL1x3KcDw1sOoRe1FdcyNebZf/5Qvy+5fZAeywPtJR5B+sOIxj115u9eNdkqY/S5
yPaRql01JH+9QZYSUZNxJXR6el8pAL66fblchNYd+MW4X5e1T7CyX+hLMqQct2/n
gGE54hBB80ZG+m8+RJn9SMR302pW4YNZnhAQqtNBixnAOGs6qkwg6jFQot2PQgFA
w5BWdxrY1zOWlNS5E+kXs3TLid4S9H2kCID5OjBxyx+SEanGGxnqM4wE/xybySWZ
dx26RnoWJB62NzKb8kAsCWNw/69bhhrRqyGFPBpk93pKMMljxNVMSxp90wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9pUPlOB9LCs7ie2bSkQDMM0Qh4MB8GA1UdIwQY
MBaAFI2AtFRV2Jcx+Hu1P02+ZBGJg31OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTct
MzgwZTViZGZhNWUwLzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTctMzgwZTViZGZhNWUw
LzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBaK2Xlv
MKzs5p2+VhbW0tYlgiyqrCsTxuJ74nuJtlem281WRRl6fInz3MgkKAHoLR8fbX1J
0vqP05uPLjx7y79fpq1BTCyT89FaoMzM15Ra1B3YZ7KGkyaK+uT6Etm0I80tnfU/
xP52rBz47tS3V8Hn6bhhrksqBP6y6XO8v9TmKaf+EOHb1nNChzlRIEVeNJJnzjS+
/cXO9A5DsPAJBYNtqvOfEFxEC7OaeN7WBT7X0UAr9XmOhOZtFaJemeDc/sm9CBHB
5vh71DQ8ghsBFtLcnnvtmgPa5JoD8OJ2BQveyZ6eCxkSpj5klr0tSn8JJduZXjC5
ZKpJZ5bWhnAlzA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:47:53 2026 by rpki-client