Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File:                     C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier:          wxuink1tR/Nf8Vu0wbpMfdumDsUwcbN0EsMzSJTCfIE=
Subject key identifier:   3C:2A:DA:82:23:B6:21:8E:27:37:94:17:FC:E2:72:62:C6:58:AD:C5
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer:       /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial:       019F2811CBE3148D812D8BD705517F7B9176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number:          1990
Signing time:             Fri 03 Jul 2026 13:01:22 +0000
Manifest this update:     Fri 03 Jul 2026 13:01:22 +0000
Manifest next update:     Sat 04 Jul 2026 13:01:22 +0000
Files and hashes:         1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: rM1BUU6MYTa4XutZ3rVJ29UVGPGHXPcqZuiLrB010rM=)
                          2: _1uaADsxq12x8Ida7C5U5GdcwqY.roa (hash: M/706uhTR0kxovup6hnBaKH4VlgykklF/JkrjqrTN+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:11:cb:e3:14:8d:81:2d:8b:d7:05:51:7f:7b:91:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
        Validity
            Not Before: Jul  3 13:01:22 2026 GMT
            Not After : Jul  4 13:01:22 2026 GMT
        Subject: CN=3c2ada8223b6218e27379417fce27262c658adc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:8c:3f:0b:fc:3d:02:ee:37:bd:13:64:a5:
                    e0:f9:fe:6f:7b:ba:d1:bc:a3:45:e8:b7:d0:00:4a:
                    1b:cc:9f:3b:5a:48:1e:c8:24:72:c2:2f:cb:79:c3:
                    62:0c:5e:23:1a:bc:28:8e:ee:28:ea:10:9c:06:cb:
                    e8:a0:99:09:6a:d5:b8:a9:6d:c6:29:7a:b1:e4:9b:
                    0b:1a:f7:a3:1b:b0:6a:6e:73:cb:a4:d5:ee:fb:d5:
                    f6:a9:49:1e:a1:e9:90:88:f2:54:53:3b:6a:e5:cd:
                    ba:4e:85:7a:a5:d6:da:f2:bc:1e:68:1b:07:25:4f:
                    c4:6e:eb:03:54:0f:66:1b:9d:28:6a:6b:69:16:6f:
                    21:03:b2:1d:b5:b6:33:0c:3b:59:03:53:87:6b:87:
                    0e:d5:33:b0:67:ab:da:54:77:01:dd:6c:62:b4:e6:
                    f2:e6:36:e2:6c:ca:16:e6:45:8a:1f:64:42:3e:58:
                    d4:db:11:3a:c6:e2:35:a3:0c:c3:ce:98:76:14:01:
                    57:9e:b4:03:ad:55:1c:69:05:1d:dd:fa:04:76:d3:
                    fa:fc:62:e7:f8:08:6a:f6:4b:70:53:a0:1a:26:34:
                    6a:fc:0a:27:af:46:9b:81:8c:93:cc:1f:96:fb:c0:
                    64:17:68:7e:31:4b:d8:7d:82:b4:0e:71:aa:ff:76:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:DA:82:23:B6:21:8E:27:37:94:17:FC:E2:72:62:C6:58:AD:C5
            X509v3 Authority Key Identifier:
                keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:81:db:f9:6b:47:9d:29:22:c0:61:1b:be:1d:2f:17:c4:4e:
         94:96:03:d8:03:dd:38:da:d1:15:28:cd:20:14:db:3d:5e:c8:
         48:02:64:40:37:d5:a8:5e:72:d0:71:ac:c5:bb:bd:b9:6d:b5:
         2d:4d:49:68:68:6f:6f:bc:aa:ff:4a:1e:69:d6:7f:d6:70:b5:
         02:b8:2b:6c:ab:08:39:7f:14:b3:02:9a:78:75:47:be:e6:6e:
         8b:36:6b:0e:9f:6c:ed:dc:6c:09:dd:e8:8b:1a:59:6a:1f:55:
         12:e5:49:83:1b:ee:d6:7c:53:8e:a9:4e:5b:c7:11:c4:cd:68:
         ef:3e:b2:51:85:59:2c:71:f0:f7:c3:17:e2:74:b7:5d:e0:af:
         c5:30:45:b5:7b:38:4b:73:2e:5d:a8:01:4a:99:b8:42:24:e4:
         63:5e:6e:a9:34:ff:de:08:cf:b3:27:da:63:27:d1:f8:c1:4d:
         e1:90:7c:1c:a3:4f:43:8e:2f:58:c5:83:1f:dc:45:09:17:f3:
         8e:0a:d4:c4:78:89:f0:fe:9d:82:02:c6:10:6e:61:0d:82:66:
         b5:89:22:9a:e8:e7:3c:8a:84:09:94:72:a0:cb:1c:e0:39:47:
         af:72:ac:17:74:d5:31:b3:13:b5:0e:97:83:03:35:0a:b9:02:
         9d:0d:49:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8oEcvjFI2BLYvXBVF/e5F2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzg5MzM3NWFkMTU1YjVmZmNlZDNjYmVlMjUzNWI4NjU5
ZmUzODkwHhcNMjYwNzAzMTMwMTIyWhcNMjYwNzA0MTMwMTIyWjAzMTEwLwYDVQQD
EygzYzJhZGE4MjIzYjYyMThlMjczNzk0MTdmY2UyNzI2MmM2NThhZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9SMPwv8PQLuN70TZKXg+f5ve7rR
vKNF6LfQAEobzJ87WkgeyCRywi/LecNiDF4jGrwoju4o6hCcBsvooJkJatW4qW3G
KXqx5JsLGvejG7BqbnPLpNXu+9X2qUkeoemQiPJUUztq5c26ToV6pdba8rweaBsH
JU/EbusDVA9mG50oamtpFm8hA7IdtbYzDDtZA1OHa4cO1TOwZ6vaVHcB3WxitOby
5jbibMoW5kWKH2RCPljU2xE6xuI1owzDzph2FAFXnrQDrVUcaQUd3foEdtP6/GLn
+Ahq9ktwU6AaJjRq/Aonr0abgYyTzB+W+8BkF2h+MUvYfYK0DnGq/3boYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwq2oIjtiGOJzeUF/zicmLGWK3FMB8GA1UdIwQY
MBaAFAvIkzda0VW1/87Ty+4lNbhln+OJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUt
MGVkMDc4ZjRiY2FmLzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUtMGVkMDc4ZjRiY2Fm
LzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYHb+WtH
nSkiwGEbvh0vF8ROlJYD2APdONrRFSjNIBTbPV7ISAJkQDfVqF5y0HGsxbu9uW21
LU1JaGhvb7yq/0oeadZ/1nC1ArgrbKsIOX8UswKaeHVHvuZuizZrDp9s7dxsCd3o
ixpZah9VEuVJgxvu1nxTjqlOW8cRxM1o7z6yUYVZLHHw98MX4nS3XeCvxTBFtXs4
S3MuXagBSpm4QiTkY15uqTT/3gjPsyfaYyfR+MFN4ZB8HKNPQ44vWMWDH9xFCRfz
jgrUxHiJ8P6dggLGEG5hDYJmtYkimujnPIqECZRyoMsc4DlHr3KsF3TVMbMTtQ6X
gwM1CrkCnQ1JGg==
-----END CERTIFICATE-----
Generated at Fri Jul 3 21:21:20 2026 by rpki-client