Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File:                     8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier:          RHzKdpQpegR0660cNs2iUZ25mj77WHtxaAr/Fvn4Pn4=
Subject key identifier:   D5:11:80:6D:79:F8:72:D0:60:D6:15:6A:8D:82:E5:A5:D1:3C:44:38
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer:       /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial:       019F189E9700887299EFC1AEDFD5ACDB38C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 13:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:14 +0000
Files and hashes:         1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: JJhDEN//m9gQGS5Lw7DGp/WictsghNpHIPBrhx8thrQ=)
                          2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:97:00:88:72:99:ef:c1:ae:df:d5:ac:db:38:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
        Validity
            Not Before: Jun 30 13:01:14 2026 GMT
            Not After : Jul  1 13:01:14 2026 GMT
        Subject: CN=d511806d79f872d060d6156a8d82e5a5d13c4438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:5b:fd:d5:e6:94:1a:09:f3:ce:ef:f1:59:
                    4f:63:47:8a:e4:ea:85:b7:54:22:8f:f7:ba:31:9d:
                    ea:d7:68:24:a1:a4:f1:b6:db:2d:80:8a:2d:74:18:
                    c4:70:78:41:b8:e5:f0:a3:a7:c4:e6:b6:33:86:2f:
                    ba:ab:13:d0:ab:d5:5c:99:05:98:51:c7:f8:71:68:
                    36:04:1c:0c:eb:0b:1c:c6:1b:38:47:ac:d4:9c:d3:
                    3b:9f:fe:b7:a8:2d:4b:fe:b7:72:45:ac:86:e9:bf:
                    f4:ed:2e:a5:9c:48:a8:18:56:de:c6:60:e3:a6:35:
                    82:cb:34:3b:1b:3f:43:6c:42:2d:f4:fc:4f:e9:6b:
                    15:b9:d5:4e:bd:fd:2d:17:c2:d0:75:81:28:80:9a:
                    fb:d1:74:7d:66:0c:2d:d4:27:de:d4:22:01:9b:07:
                    3b:54:b3:c9:ca:a9:01:0d:ef:76:b0:8b:fc:33:79:
                    d4:d8:69:4e:d1:a5:1f:6a:58:71:89:94:16:56:a6:
                    23:3a:a6:bf:55:4c:bb:54:ba:aa:42:ea:aa:87:bb:
                    94:bd:c9:49:59:80:10:cb:4d:c9:ee:82:73:c1:cd:
                    48:96:27:21:ea:a5:ca:b9:db:02:b8:b0:74:fb:1a:
                    0c:2b:12:1c:a2:2d:46:ee:2d:2b:e7:f2:56:98:f0:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:80:6D:79:F8:72:D0:60:D6:15:6A:8D:82:E5:A5:D1:3C:44:38
            X509v3 Authority Key Identifier:
                keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:e6:04:e5:aa:0f:63:47:6c:2c:de:32:88:c6:69:b8:06:
         c4:3a:7f:7d:71:8b:33:65:c8:2f:37:6e:a8:ce:ad:76:1a:b3:
         b9:c0:2f:84:22:99:99:1a:c3:b8:c8:f9:60:0f:e7:58:4e:b8:
         11:02:90:db:a7:c6:3c:b3:df:49:2e:12:50:90:3d:e8:63:45:
         df:fd:0a:6d:e8:2e:b1:50:dd:7f:eb:cf:17:c9:ec:d8:55:24:
         6d:37:9e:2c:55:5d:38:31:eb:58:23:b9:08:bf:9d:60:de:74:
         9d:5d:ba:2c:90:88:85:7c:b0:99:2c:b8:08:86:2e:05:bd:11:
         94:db:13:ce:76:b9:11:db:8c:2c:53:fc:ce:bd:98:f3:66:eb:
         01:cd:72:b9:e9:4f:ac:6d:53:03:59:f2:62:be:d9:3e:a5:8b:
         13:43:a5:97:4d:bc:1b:09:a3:37:0c:f1:2f:10:86:9b:01:06:
         72:b5:3d:92:22:ff:89:ab:34:03:72:51:55:b4:8a:5c:7f:56:
         df:cf:84:6d:41:45:e9:e4:30:70:1d:75:a8:07:b5:66:75:63:
         c0:6f:cc:20:58:bd:70:6a:53:97:01:8e:39:33:c5:a8:e5:89:
         0e:d9:d0:94:63:3c:a4:88:9f:d8:cf:c2:31:38:92:87:46:69:
         e2:b3:fb:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnpcAiHKZ78Gu39Ws2zjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTBhMjBlMzBlYzkxNWRlZDFkZjIwMDU1YWY2YjVmMjY2
NzJlYTkwHhcNMjYwNjMwMTMwMTE0WhcNMjYwNzAxMTMwMTE0WjAzMTEwLwYDVQQD
EyhkNTExODA2ZDc5Zjg3MmQwNjBkNjE1NmE4ZDgyZTVhNWQxM2M0NDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Nb/dXmlBoJ887v8VlPY0eK5OqF
t1Qij/e6MZ3q12gkoaTxttstgIotdBjEcHhBuOXwo6fE5rYzhi+6qxPQq9VcmQWY
Ucf4cWg2BBwM6wscxhs4R6zUnNM7n/63qC1L/rdyRayG6b/07S6lnEioGFbexmDj
pjWCyzQ7Gz9DbEIt9PxP6WsVudVOvf0tF8LQdYEogJr70XR9Zgwt1Cfe1CIBmwc7
VLPJyqkBDe92sIv8M3nU2GlO0aUfalhxiZQWVqYjOqa/VUy7VLqqQuqqh7uUvclJ
WYAQy03J7oJzwc1Ilich6qXKudsCuLB0+xoMKxIcoi1G7i0r5/JWmPC8rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNURgG15+HLQYNYVao2C5aXRPEQ4MB8GA1UdIwQY
MBaAFPBQog4w7JFd7R3yAFWva18mZy6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQt
OWQzMTY3ODMxOTM0LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQtOWQzMTY3ODMxOTM0
LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0HmBOWq
D2NHbCzeMojGabgGxDp/fXGLM2XILzduqM6tdhqzucAvhCKZmRrDuMj5YA/nWE64
EQKQ26fGPLPfSS4SUJA96GNF3/0KbegusVDdf+vPF8ns2FUkbTeeLFVdODHrWCO5
CL+dYN50nV26LJCIhXywmSy4CIYuBb0RlNsTzna5EduMLFP8zr2Y82brAc1yuelP
rG1TA1nyYr7ZPqWLE0Oll028GwmjNwzxLxCGmwEGcrU9kiL/ias0A3JRVbSKXH9W
38+EbUFF6eQwcB11qAe1ZnVjwG/MIFi9cGpTlwGOOTPFqOWJDtnQlGM8pIif2M/C
MTiSh0Zp4rP75Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:46 2026 by rpki-client