Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File:                     iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier:          yPDw8tdUMm9UyV2oDkLKa7YNUTmUORZLr32T6ksaRtc=
Subject key identifier:   B0:8E:35:F0:E5:16:0D:20:54:BA:5D:9C:A9:73:79:63:82:15:CB:F4
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer:       /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial:       019EE77AF8AA2BBF13B80AEFCA52269AE4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number:          0C86
Signing time:             Sun 21 Jun 2026 00:00:56 +0000
Manifest this update:     Sun 21 Jun 2026 00:00:56 +0000
Manifest next update:     Mon 22 Jun 2026 00:00:56 +0000
Files and hashes:         1: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: sO3qQQ/G0D//dMAo9THrktklrcgtEc4ykxtH/qQKUgU=)
                          2: lf_obYLkdv0nF0_npBLfEGEUr5g.roa (hash: SJ8whxb+V86Y+QBEXZUDuhEOcL67d4x2EIlsWGzE0Ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:7a:f8:aa:2b:bf:13:b8:0a:ef:ca:52:26:9a:e4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
        Validity
            Not Before: Jun 21 00:00:56 2026 GMT
            Not After : Jun 22 00:00:56 2026 GMT
        Subject: CN=b08e35f0e5160d2054ba5d9ca97379638215cbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:b2:81:cf:2f:c2:78:a2:54:c9:3b:f0:a8:
                    4f:d8:cb:e2:69:47:d1:54:0d:94:c9:75:9d:c4:98:
                    b6:3f:91:33:bd:f0:52:b0:99:cc:90:89:ab:08:8a:
                    06:7b:44:85:9a:2f:45:90:80:ba:82:57:e2:94:67:
                    5c:9b:15:3c:76:5f:3e:85:9b:b4:cf:9f:b3:55:c1:
                    00:06:aa:d0:36:83:a4:3c:83:31:a8:34:b1:b9:5a:
                    67:1b:ff:be:3d:b6:28:45:d8:ef:fb:4e:7e:0b:48:
                    61:27:55:f3:9f:51:d3:5a:d6:c6:bf:5f:0e:43:c8:
                    1d:41:2d:b8:4d:16:a5:da:e2:eb:c5:9e:60:39:c7:
                    ed:e4:a2:24:2f:74:3c:ce:1c:3a:5e:ec:6a:33:80:
                    40:31:7d:e2:48:fd:9d:06:e7:ca:db:26:8c:0a:5e:
                    cd:4a:cc:b6:4b:a2:c3:2d:14:47:15:2b:14:23:8b:
                    3f:96:dd:b2:ba:7c:e4:8c:20:f4:52:bc:02:fe:d7:
                    12:57:d9:a4:3f:e5:5c:74:3d:b9:11:28:ef:25:30:
                    d1:86:99:19:f7:cc:c6:88:f6:8d:ae:d8:f8:48:8a:
                    9f:2e:98:ed:69:8c:ff:fe:28:fb:67:7b:67:98:95:
                    b4:d1:53:06:ba:28:05:1a:b5:78:0e:90:13:4e:83:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8E:35:F0:E5:16:0D:20:54:BA:5D:9C:A9:73:79:63:82:15:CB:F4
            X509v3 Authority Key Identifier:
                keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f7:cb:c0:e9:f9:d8:50:50:b3:1a:ba:a1:3c:ad:5d:24:df:
         17:f3:ea:76:17:68:9b:10:74:d8:76:e4:6e:f6:e8:c6:27:05:
         bb:57:0d:b1:05:55:fc:95:e6:15:42:d6:fa:36:83:7f:7e:b4:
         73:65:22:e0:2e:40:e8:d2:6f:a0:3c:8b:fa:e8:11:a6:5a:3c:
         37:08:e1:f7:3f:be:1b:d0:01:2b:dc:e2:70:22:aa:4f:b8:ba:
         1c:0d:9b:1e:cf:03:25:68:37:ac:02:0b:fd:02:12:79:99:4c:
         cc:30:a9:eb:fe:1c:b7:d4:38:ec:00:7b:2e:1f:09:00:4e:60:
         61:84:04:f5:96:b7:5f:19:53:c3:9c:a4:6e:bc:44:83:fe:a2:
         b5:fa:53:38:46:c0:e7:e8:9b:03:b2:dd:28:15:2d:f5:d1:7c:
         71:5b:44:3f:42:44:77:d5:18:ad:de:b6:03:7f:1f:b3:d1:93:
         30:3d:d1:61:97:f8:be:f8:32:72:69:e3:5b:96:85:1c:55:30:
         a9:bb:25:ea:f6:e5:98:f5:ed:22:32:c8:63:55:b7:e6:45:49:
         ac:bb:21:8f:a9:89:93:68:53:8a:33:d8:83:d1:da:06:12:47:
         5b:f3:8b:01:f8:6d:c2:38:43:9a:41:aa:15:c2:37:e3:6f:c9:
         91:da:e3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7neviqK78TuArvylImmuTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTRiOTNmZWI3MWRkZTI4MjNiNzBjN2RiYjc5ZTBmOTli
NTZjMWIwHhcNMjYwNjIxMDAwMDU2WhcNMjYwNjIyMDAwMDU2WjAzMTEwLwYDVQQD
EyhiMDhlMzVmMGU1MTYwZDIwNTRiYTVkOWNhOTczNzk2MzgyMTVjYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEqygc8vwniiVMk78KhP2MviaUfR
VA2UyXWdxJi2P5EzvfBSsJnMkImrCIoGe0SFmi9FkIC6glfilGdcmxU8dl8+hZu0
z5+zVcEABqrQNoOkPIMxqDSxuVpnG/++PbYoRdjv+05+C0hhJ1Xzn1HTWtbGv18O
Q8gdQS24TRal2uLrxZ5gOcft5KIkL3Q8zhw6XuxqM4BAMX3iSP2dBufK2yaMCl7N
Ssy2S6LDLRRHFSsUI4s/lt2yunzkjCD0UrwC/tcSV9mkP+VcdD25ESjvJTDRhpkZ
98zGiPaNrtj4SIqfLpjtaYz//ij7Z3tnmJW00VMGuigFGrV4DpATToNiHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCONfDlFg0gVLpdnKlzeWOCFcv0MB8GA1UdIwQY
MBaAFIrkuT/rcd3igjtwx9u3ng+ZtWwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDct
MjljNTE3NjkwMmM2LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDctMjljNTE3NjkwMmM2
LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/fLwOn5
2FBQsxq6oTytXSTfF/PqdhdomxB02HbkbvboxicFu1cNsQVV/JXmFULW+jaDf360
c2Ui4C5A6NJvoDyL+ugRplo8Nwjh9z++G9ABK9zicCKqT7i6HA2bHs8DJWg3rAIL
/QISeZlMzDCp6/4ct9Q47AB7Lh8JAE5gYYQE9Za3XxlTw5ykbrxEg/6itfpTOEbA
5+ibA7LdKBUt9dF8cVtEP0JEd9UYrd62A38fs9GTMD3RYZf4vvgycmnjW5aFHFUw
qbsl6vblmPXtIjLIY1W35kVJrLshj6mJk2hTijPYg9HaBhJHW/OLAfhtwjhDmkGq
FcI342/Jkdrjjg==
-----END CERTIFICATE-----
Generated at Sun Jun 21 08:37:57 2026 by rpki-client