Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File:                     8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier:          EZ47/egmDBv24Q6lWdNMgI4qwVfUjtwKDe9ROaVJTbA=
Subject key identifier:   FA:79:C5:AD:CF:6A:A1:92:FD:5A:D5:EC:F9:6C:84:A1:D0:2D:36:CF
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer:       /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial:       019E2ADE7B79E863908801C6A4AC7906ADED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number:          0B19
Signing time:             Fri 15 May 2026 09:01:24 +0000
Manifest this update:     Fri 15 May 2026 09:01:24 +0000
Manifest next update:     Sat 16 May 2026 09:01:24 +0000
Files and hashes:         1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: f8f/rjAXS7Cftd0nRj0WPTSNvJVSIVWkHB4EJDxK81Y=)
                          2: i2cZnlYGJSDWJ6GKJm4zBpOtiSE.roa (hash: yQNvuB3MUN74TcqegiLU8qLGixGGpPrYKgj9auUBTzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:de:7b:79:e8:63:90:88:01:c6:a4:ac:79:06:ad:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
        Validity
            Not Before: May 15 09:01:24 2026 GMT
            Not After : May 16 09:01:24 2026 GMT
        Subject: CN=fa79c5adcf6aa192fd5ad5ecf96c84a1d02d36cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8a:5c:ba:50:c6:90:b5:b0:6d:31:3c:66:3b:
                    b1:4c:a8:e7:0c:4e:1e:93:94:41:a6:36:a6:d2:2f:
                    0c:89:1b:70:03:6e:3e:ce:31:d0:24:f1:35:31:db:
                    5c:27:d2:d4:8d:5f:c9:ee:19:0b:39:a6:6d:69:14:
                    7a:3b:06:7c:07:53:27:5e:c8:06:75:ce:51:06:b2:
                    85:d7:dc:f9:d8:a9:22:37:03:de:22:57:ba:f6:4e:
                    8b:7c:02:3f:2b:95:b1:88:6b:8e:c2:ef:21:9f:78:
                    81:83:3c:19:b3:47:69:10:36:65:5d:3c:77:91:6c:
                    3e:74:88:db:17:1c:03:cb:d6:a5:95:8e:a0:70:52:
                    71:b0:07:ca:54:3c:ec:2e:91:24:92:04:60:aa:00:
                    68:a4:24:e0:ce:d3:e8:6d:32:df:37:72:bc:88:f0:
                    97:cf:fb:b3:ba:d3:1f:e9:6d:e6:1a:09:01:86:99:
                    92:c7:c7:49:1e:e4:28:98:c4:29:4d:02:e3:b0:79:
                    d8:d9:62:53:81:e8:5b:74:32:fe:21:a2:8b:0e:90:
                    dd:5c:d9:13:fd:95:2b:60:7f:cd:03:0b:97:43:f8:
                    3a:9f:d0:f1:3d:8d:03:d1:a9:72:32:0f:c2:e7:66:
                    ea:a8:9a:4e:0d:f0:f5:18:8d:23:c1:38:0e:be:b1:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:79:C5:AD:CF:6A:A1:92:FD:5A:D5:EC:F9:6C:84:A1:D0:2D:36:CF
            X509v3 Authority Key Identifier:
                keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d9:b7:f1:1a:24:de:76:2d:a7:59:30:f7:a2:ce:51:3c:0f:
         05:9e:5d:56:5c:af:96:4c:2c:7f:8d:77:c8:97:ae:c8:2a:34:
         bf:c6:de:c6:80:a9:da:b4:d9:f1:12:fc:88:9a:b5:2b:73:62:
         9d:ab:a0:76:9d:42:1e:90:54:44:cb:51:3e:f8:d8:68:05:61:
         27:e3:52:3f:ab:33:10:f5:37:84:49:9d:43:d4:f7:b5:75:a4:
         48:a3:37:ee:3e:5e:1d:6b:71:26:b3:b0:2c:57:08:d1:d1:37:
         1d:3f:cb:33:b2:ac:c6:97:5a:04:a5:c4:3d:1e:fb:b5:e3:39:
         ee:5c:ba:5e:1f:76:fd:9b:7b:05:ae:5f:8c:5d:b2:c6:1e:a6:
         1c:23:fd:b8:a1:06:29:76:3e:da:18:56:af:67:3c:07:ed:a1:
         3c:95:f0:96:8c:80:e0:75:fa:19:e5:99:69:cc:d5:5e:70:44:
         6a:13:43:2e:1a:64:5b:57:45:ca:d3:05:6c:5f:e3:14:74:ae:
         6e:58:ba:4e:71:04:61:df:55:20:90:a5:ad:fd:7d:92:4b:4e:
         50:10:15:fd:f2:e3:bb:0e:58:d6:c6:5d:7a:98:83:c6:33:c7:
         c7:aa:c3:67:d9:bb:95:22:3c:13:a4:7b:e2:8f:aa:3f:bb:d7:
         50:a4:85:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4q3nt56GOQiAHGpKx5Bq3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGEwOGViOGZhN2JlZTZhMzE4M2UzMmRlNTFhMmYzY2Nk
NGFlNDcwHhcNMjYwNTE1MDkwMTI0WhcNMjYwNTE2MDkwMTI0WjAzMTEwLwYDVQQD
EyhmYTc5YzVhZGNmNmFhMTkyZmQ1YWQ1ZWNmOTZjODRhMWQwMmQzNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYpculDGkLWwbTE8ZjuxTKjnDE4e
k5RBpjam0i8MiRtwA24+zjHQJPE1MdtcJ9LUjV/J7hkLOaZtaRR6OwZ8B1MnXsgG
dc5RBrKF19z52KkiNwPeIle69k6LfAI/K5WxiGuOwu8hn3iBgzwZs0dpEDZlXTx3
kWw+dIjbFxwDy9allY6gcFJxsAfKVDzsLpEkkgRgqgBopCTgztPobTLfN3K8iPCX
z/uzutMf6W3mGgkBhpmSx8dJHuQomMQpTQLjsHnY2WJTgehbdDL+IaKLDpDdXNkT
/ZUrYH/NAwuXQ/g6n9DxPY0D0alyMg/C52bqqJpODfD1GI0jwTgOvrE4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp5xa3PaqGS/VrV7PlshKHQLTbPMB8GA1UdIwQY
MBaAFPCKCOuPp77moxg+Mt5RovPM1K5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hYjExYzktMjVkNS00M2ZhLTliZDMt
YjFlYzI4YzY3Yzc0LzEvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hYjExYzktMjVkNS00M2ZhLTliZDMtYjFlYzI4YzY3Yzc0
LzEvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtm38Rok
3nYtp1kw96LOUTwPBZ5dVlyvlkwsf413yJeuyCo0v8bexoCp2rTZ8RL8iJq1K3Ni
naugdp1CHpBURMtRPvjYaAVhJ+NSP6szEPU3hEmdQ9T3tXWkSKM37j5eHWtxJrOw
LFcI0dE3HT/LM7KsxpdaBKXEPR77teM57ly6Xh92/Zt7Ba5fjF2yxh6mHCP9uKEG
KXY+2hhWr2c8B+2hPJXwloyA4HX6GeWZaczVXnBEahNDLhpkW1dFytMFbF/jFHSu
bli6TnEEYd9VIJClrf19kktOUBAV/fLjuw5Y1sZdepiDxjPHx6rDZ9m7lSI8E6R7
4o+qP7vXUKSFDg==
-----END CERTIFICATE-----
Generated at Fri May 15 16:05:00 2026 by rpki-client