Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          aucAJ1wGdLZWfTitQP1s0P0a9Os0OwrPvHLIr9NKuK4=
Subject key identifier:   3C:B0:1B:95:18:65:6D:5D:E6:33:D5:C5:6E:3B:50:85:46:54:5B:B0
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019F118A70ACC9536F973D92DBE31F6FA45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          1579
Signing time:             Mon 29 Jun 2026 04:01:53 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:53 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:53 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: 2OeTEXkmvfbVDZNYS9iBc5dBjcQH+TedTcE+mwMivOU=)
                          2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=)
                          3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=)
                          4: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
                          5: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=)
                          6: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
                          7: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=)
                          8: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
                          9: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=)
                          10: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
                          11: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=)
                          12: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
                          13: id-lxRpZAXWjSQIYTHcFpR-BOiA.roa (hash: DJLygWwBzeOc6zwCMgS/e3psiWC9iHIdC8QxaCCmABU=)
                          14: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=)
                          15: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
                          16: vEGsYuYY06TvYutYs-QyPdXXq4Q.roa (hash: UCMk3rT/wVrhtk6MMSMiEAtXXbsHSrVjnWedze014rg=)
                          17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:8a:70:ac:c9:53:6f:97:3d:92:db:e3:1f:6f:a4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Jun 29 04:01:53 2026 GMT
            Not After : Jun 30 04:01:53 2026 GMT
        Subject: CN=3cb01b9518656d5de633d5c56e3b508546545bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3c:17:83:11:17:d0:f5:3a:80:ef:3b:42:aa:
                    db:9b:d0:a8:f2:28:40:3b:07:f8:e0:e9:77:9a:71:
                    c1:35:6b:1b:ed:dc:e9:97:a6:f0:25:5c:0d:14:46:
                    4b:0a:9b:a7:4a:47:6e:8f:3f:0e:b8:3f:65:f2:ac:
                    34:b9:36:46:aa:67:99:85:df:d9:83:b0:75:ba:a2:
                    37:78:65:d2:42:43:76:f7:22:6f:39:08:a7:5b:25:
                    65:77:9e:43:a0:d1:ac:66:d3:61:d8:f6:df:7d:28:
                    a8:5d:45:2a:7b:a9:0f:2a:9a:38:35:88:83:49:43:
                    49:31:0c:76:86:13:b1:b1:cf:d6:c7:50:7e:74:ab:
                    eb:9a:30:48:99:38:e7:e2:18:16:37:08:eb:92:2d:
                    80:ae:ab:13:f3:73:20:36:0f:10:71:1f:39:4f:bf:
                    eb:11:7b:f7:e2:07:fd:c0:67:f8:05:03:e6:c6:95:
                    82:d3:a8:67:a7:a9:e3:0d:10:ad:1d:68:97:08:35:
                    dd:9c:f5:d3:43:c4:cd:b3:a5:25:d0:90:0a:69:15:
                    96:f7:7b:75:15:69:73:a7:12:03:2c:89:fc:f8:1f:
                    8f:71:24:25:54:e8:69:a1:1a:90:7f:e8:29:5c:89:
                    39:3e:a5:26:d2:df:31:e3:91:bc:04:0d:35:06:99:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B0:1B:95:18:65:6D:5D:E6:33:D5:C5:6E:3B:50:85:46:54:5B:B0
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:07:c7:33:36:21:29:14:ef:35:38:73:0e:11:8f:28:3e:62:
         ee:00:d0:96:5d:b4:a8:e4:09:27:44:e9:59:0b:cd:f1:ac:16:
         d9:a8:8d:d7:90:89:33:c6:3b:d7:7e:d4:28:2a:3d:0a:4c:54:
         a8:22:98:6b:5e:1a:1f:e9:5f:41:b9:06:d5:57:ea:c0:d6:f2:
         8a:97:48:6d:b1:a7:84:ac:a5:5b:e4:7c:71:20:4d:d2:19:c7:
         6d:05:6d:81:cc:89:49:f6:a6:5e:0f:81:08:85:2d:de:20:32:
         c0:5e:d6:aa:92:12:43:2f:8c:e1:4b:06:43:5a:75:36:b8:00:
         c3:e8:5b:78:bb:7d:d1:90:06:04:d1:8b:17:65:0b:ce:36:2b:
         62:f3:14:49:d5:38:43:62:a6:93:10:a6:63:92:e8:37:2a:66:
         c2:82:48:70:d8:7f:98:af:4f:5b:36:96:fb:e0:22:c3:39:7f:
         53:cd:96:df:5c:66:b7:f7:fe:1b:0c:06:f4:d9:bf:df:9f:b0:
         af:a0:ca:81:70:22:67:2b:4b:1f:94:2a:f2:84:42:b5:32:ea:
         43:73:cf:88:e0:6d:cc:5d:7f:08:72:77:91:fa:99:d8:8f:5b:
         72:0c:a5:84:c7:8a:b4:8e:16:ff:56:94:47:8a:61:63:c2:c4:
         89:22:a6:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RinCsyVNvlz2S2+Mfb6RaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjYwNjI5MDQwMTUzWhcNMjYwNjMwMDQwMTUzWjAzMTEwLwYDVQQD
EygzY2IwMWI5NTE4NjU2ZDVkZTYzM2Q1YzU2ZTNiNTA4NTQ2NTQ1YmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TwXgxEX0PU6gO87Qqrbm9Co8ihA
Owf44Ol3mnHBNWsb7dzpl6bwJVwNFEZLCpunSkdujz8OuD9l8qw0uTZGqmeZhd/Z
g7B1uqI3eGXSQkN29yJvOQinWyVld55DoNGsZtNh2PbffSioXUUqe6kPKpo4NYiD
SUNJMQx2hhOxsc/Wx1B+dKvrmjBImTjn4hgWNwjrki2ArqsT83MgNg8QcR85T7/r
EXv34gf9wGf4BQPmxpWC06hnp6njDRCtHWiXCDXdnPXTQ8TNs6Ul0JAKaRWW93t1
FWlzpxIDLIn8+B+PcSQlVOhpoRqQf+gpXIk5PqUm0t8x45G8BA01Bpm6YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDywG5UYZW1d5jPVxW47UIVGVFuwMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAfHMzYh
KRTvNThzDhGPKD5i7gDQll20qOQJJ0TpWQvN8awW2aiN15CJM8Y7137UKCo9CkxU
qCKYa14aH+lfQbkG1VfqwNbyipdIbbGnhKylW+R8cSBN0hnHbQVtgcyJSfamXg+B
CIUt3iAywF7WqpISQy+M4UsGQ1p1NrgAw+hbeLt90ZAGBNGLF2ULzjYrYvMUSdU4
Q2KmkxCmY5LoNypmwoJIcNh/mK9PWzaW++Aiwzl/U82W31xmt/f+GwwG9Nm/35+w
r6DKgXAiZytLH5Qq8oRCtTLqQ3PPiOBtzF1/CHJ3kfqZ2I9bcgylhMeKtI4W/1aU
R4phY8LEiSKmFQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:35 2026 by rpki-client