Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
File:                     1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft (raw, json)
Hash identifier:          wzHp0W49YfjKHbe1iofepJ6TEvqtDbVSyKOtgGvDBso=
Subject key identifier:   89:8E:35:B5:5D:24:D7:98:B5:1A:87:A0:5C:6B:19:BA:CF:AA:3A:C7
Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
Certificate issuer:       /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Certificate serial:       019EB6FBC70D75B046D40EE0E9C32730D22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
Manifest number:          016D
Signing time:             Thu 11 Jun 2026 14:00:14 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:14 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:14 +0000
Files and hashes:         1: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl (hash: MhiATNtPgJ6EkADfgjnBrBV+W0LPv2spfO3og1Z3fck=)
                          2: Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (hash: OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fb:c7:0d:75:b0:46:d4:0e:e0:e9:c3:27:30:d2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
        Validity
            Not Before: Jun 11 14:00:14 2026 GMT
            Not After : Jun 12 14:00:14 2026 GMT
        Subject: CN=898e35b55d24d798b51a87a05c6b19bacfaa3ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:16:40:e5:4a:72:a9:4b:5a:02:b7:48:42:
                    d7:c9:0a:5c:2c:de:96:58:34:98:9a:f1:a8:47:93:
                    94:48:0a:ed:a0:38:0a:30:c9:4e:17:b2:e8:de:61:
                    9e:8d:39:d2:5d:85:2d:a5:e5:42:53:5a:cd:ef:dd:
                    95:82:63:06:d1:41:0f:1b:69:c3:57:ce:37:9f:2c:
                    bf:5e:8a:a4:8f:9b:5a:fd:87:9b:c8:6f:40:bf:ce:
                    0a:ce:92:d0:1a:d5:4e:98:3d:f8:a3:fe:0c:b2:40:
                    c5:c1:04:5a:75:3b:89:29:e1:92:4e:68:29:16:ba:
                    7d:33:ee:f8:28:91:46:8e:ca:1a:87:00:15:24:81:
                    25:24:88:35:7a:14:41:a0:af:d2:f7:a0:7d:99:81:
                    ba:b1:7f:c7:e8:33:87:81:d8:ad:52:75:fc:0a:cd:
                    c5:bd:e0:9b:bb:f8:81:36:da:07:e9:d7:1c:e5:8b:
                    77:0b:8e:30:0f:6c:71:80:9b:96:79:57:6a:02:7b:
                    c8:58:ba:6a:69:7e:97:3a:7b:0a:c3:2b:29:97:63:
                    41:f7:43:d3:eb:56:8b:e3:b7:68:32:6c:e8:cb:af:
                    fa:76:90:dd:d7:3b:36:b7:ae:c5:37:0d:af:07:ed:
                    4c:c2:61:13:f2:4e:ef:6f:e0:e8:a3:b5:ff:90:7c:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8E:35:B5:5D:24:D7:98:B5:1A:87:A0:5C:6B:19:BA:CF:AA:3A:C7
            X509v3 Authority Key Identifier:
                keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:83:44:e9:66:38:b2:b9:a1:15:0b:33:38:8d:6e:46:6c:
         2b:77:09:7f:fd:20:97:ea:3d:1a:ed:51:0e:b7:ce:fd:63:a4:
         af:7d:69:8d:51:80:35:90:79:1f:7a:12:4a:b7:f7:a0:75:f3:
         7c:f5:d3:5f:d0:98:99:79:f9:0f:b8:18:6d:a0:4f:86:11:83:
         59:df:29:9d:a2:86:95:a6:ed:bc:08:e1:36:07:01:5c:d6:ac:
         be:f6:02:ba:be:5e:9d:c4:b3:74:fd:69:e8:cc:55:ae:cd:87:
         83:f4:17:fc:b5:76:4f:bb:51:4d:24:a9:0b:3c:94:c5:55:03:
         05:a3:51:e7:28:5c:18:d9:6b:6b:3c:26:56:05:23:39:57:6a:
         d8:35:f2:dc:75:59:94:93:80:34:68:84:52:36:26:3d:76:f1:
         ed:22:9d:21:10:2c:e5:00:fc:45:62:22:00:c6:29:f4:e0:31:
         02:c7:33:5f:4a:ef:1f:ea:2b:3a:68:c0:a5:a2:66:aa:68:f7:
         28:4e:11:15:fe:74:dc:58:eb:c7:6e:4a:5b:ba:a6:ce:50:32:
         fd:5b:50:68:82:6f:50:d0:7a:72:44:87:23:f3:c0:5f:b4:53:
         3a:aa:92:29:ff:72:f8:1e:e9:f4:37:20:52:68:46:6d:94:62:
         7f:ef:1b:6d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ62+8cNdbBG1A7g6cMnMNIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjljZTFmYmRlN2M4YTRjNThjMTZlNTU0NjQzYWVhNzNl
N2QxNTgwHhcNMjYwNjExMTQwMDE0WhcNMjYwNjEyMTQwMDE0WjAzMTEwLwYDVQQD
Eyg4OThlMzViNTVkMjRkNzk4YjUxYTg3YTA1YzZiMTliYWNmYWEzYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt4WQOVKcqlLWgK3SELXyQpcLN6W
WDSYmvGoR5OUSArtoDgKMMlOF7Lo3mGejTnSXYUtpeVCU1rN792VgmMG0UEPG2nD
V843nyy/Xoqkj5ta/YebyG9Av84KzpLQGtVOmD34o/4MskDFwQRadTuJKeGSTmgp
Frp9M+74KJFGjsoahwAVJIElJIg1ehRBoK/S96B9mYG6sX/H6DOHgditUnX8Cs3F
veCbu/iBNtoH6dcc5Yt3C44wD2xxgJuWeVdqAnvIWLpqaX6XOnsKwyspl2NB90PT
61aL47doMmzoy6/6dpDd1zs2t67FNw2vB+1MwmET8k7vb+Doo7X/kHweuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFImONbVdJNeYtRqHoFxrGbrPqjrHMB8GA1UdIwQY
MBaAFPi5zh+958ikxYwW5VRkOupz59FYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Mbk9INzNueUtURmpCYmxWR1E2Nm5QbjBWZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvODJlYzEzLTgyY2YtNGViNy1iMWU0
LTlhNTU4ODVlNWY2Ni8xLzEtTG5PSDczbnlLVEZqQmJsVkdRNjZuUG4wVmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FkLzgyZWMxMy04MmNmLTRlYjctYjFlNC05YTU1ODg1ZTVm
NjYvMS8xLUxuT0g3M255S1RGakJibFZHUTY2blBuMFZnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqp+D
ROlmOLK5oRULMziNbkZsK3cJf/0gl+o9Gu1RDrfO/WOkr31pjVGANZB5H3oSSrf3
oHXzfPXTX9CYmXn5D7gYbaBPhhGDWd8pnaKGlabtvAjhNgcBXNasvvYCur5encSz
dP1p6MxVrs2Hg/QX/LV2T7tRTSSpCzyUxVUDBaNR5yhcGNlrazwmVgUjOVdq2DXy
3HVZlJOANGiEUjYmPXbx7SKdIRAs5QD8RWIiAMYp9OAxAsczX0rvH+orOmjApaJm
qmj3KE4RFf503Fjrx25KW7qmzlAy/VtQaIJvUNB6ckSHI/PAX7RTOqqSKf9y+B7p
9DcgUmhGbZRif+8bbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:32:58 2026 by rpki-client