Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File:                     Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier:          oq/2cAXBPk38mUUvz05kl5bBC+sLMrBYe39EvrhxSic=
Subject key identifier:   74:82:B4:4D:BC:AB:5B:52:F8:30:99:5C:B9:76:D0:17:5A:98:00:07
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer:       /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial:       019EB8EAAE1E44B4FB69251B48723D247E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number:          065D
Signing time:             Thu 11 Jun 2026 23:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:48 +0000
Files and hashes:         1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: oUDvDwP3k5g8yuXfUdK2n5sb5qlWUZZZlXXw/SbTAbU=)
                          2: de6SqIVP8alMMy8fNgVic-QA6hE.roa (hash: CQCnEBgMc/4fN4+tzBcs/X0zDyrAJoufFx6PaORgCqw=)
                          3: ldjE34Y5UHyQm9UPuMRXHapL2tQ.roa (hash: l2HlPn4UDyIXeMSyP3+IwTe3CYld8micBXtqct5ZxHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:ae:1e:44:b4:fb:69:25:1b:48:72:3d:24:7e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
        Validity
            Not Before: Jun 11 23:00:48 2026 GMT
            Not After : Jun 12 23:00:48 2026 GMT
        Subject: CN=7482b44dbcab5b52f830995cb976d0175a980007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:91:c8:c5:ca:39:5f:bf:8d:36:67:92:c6:
                    71:2d:4c:76:0e:4a:44:e4:d3:f8:dc:4a:7a:c1:5f:
                    78:a9:85:fe:ab:f5:08:74:c8:75:07:d9:91:0e:39:
                    66:19:4a:07:df:ff:bc:60:98:58:11:c8:2a:20:3e:
                    4f:be:43:cd:88:e6:ec:2f:53:69:e3:34:94:fe:6f:
                    7a:29:11:8d:dc:83:13:5f:fd:60:f7:b0:8a:89:27:
                    dd:fd:37:47:2d:ad:dc:74:9b:e3:cc:52:f5:8c:29:
                    fb:fe:36:58:71:12:50:32:95:72:44:75:34:6e:ae:
                    63:68:8e:46:53:6e:22:89:44:54:5d:30:71:53:b4:
                    75:75:fb:ac:56:5e:56:6c:94:81:fe:ee:be:66:22:
                    09:73:35:9b:36:3e:ec:d4:63:8d:97:00:b2:83:50:
                    f4:4c:7a:dc:66:9f:de:da:f3:5e:08:27:17:61:35:
                    a3:4c:fb:58:f0:40:03:2e:92:75:51:a0:0f:64:77:
                    4d:d6:e6:a4:c6:c6:52:ee:06:9e:21:33:fd:7c:47:
                    1e:a3:7b:ae:e1:0d:f8:2e:6f:fd:a7:3e:5e:56:8d:
                    a7:99:b5:15:59:ae:9d:7e:7c:74:77:b6:87:16:8a:
                    af:40:28:51:46:5b:bc:45:6e:4d:b8:d8:c9:01:5c:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:82:B4:4D:BC:AB:5B:52:F8:30:99:5C:B9:76:D0:17:5A:98:00:07
            X509v3 Authority Key Identifier:
                keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:8e:43:2e:56:fa:69:0a:ef:31:ee:ec:51:0b:15:cb:9e:
         0e:c4:75:bc:17:49:a9:1e:11:09:64:70:b6:c8:64:d8:67:10:
         7f:ac:ee:81:bd:2a:96:13:ac:ed:92:d5:e1:4b:83:38:98:13:
         47:ee:1a:07:e2:ac:10:69:8c:1f:7a:98:ef:88:3c:94:4a:ed:
         d4:34:89:72:a6:67:6e:5c:28:bb:15:61:f2:9d:d1:74:51:bf:
         3f:c3:3c:1d:28:3f:9c:de:b2:c4:cc:29:46:ca:d7:4c:bc:b2:
         a2:d8:6f:06:75:75:88:d6:72:42:86:6e:23:f2:58:51:01:37:
         61:63:cb:52:95:05:55:33:90:b6:b4:5c:de:cb:82:36:2f:6e:
         49:7f:48:7a:1d:bd:01:3c:c7:ff:e0:02:65:09:83:00:53:40:
         23:d7:45:d4:34:b6:4e:18:83:92:5d:a9:4a:84:68:63:74:0e:
         e5:c6:19:a0:07:b2:af:e9:2c:3d:4c:15:26:8d:02:44:40:34:
         20:a9:1e:d3:6d:98:f6:8f:e7:0f:71:d9:65:69:5c:b2:6a:2a:
         cc:92:49:34:5b:08:0f:05:1d:0b:48:a8:ef:be:d7:bf:4f:d9:
         e3:c9:2d:f6:71:69:2b:f1:23:88:0f:75:f1:ce:d4:88:ec:1b:
         8d:03:45:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646q4eRLT7aSUbSHI9JH6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2YyYTcxYjJjN2JmNTQxYzZjYzA0MTUxY2QwMjA3OGQz
Njk5MjYwHhcNMjYwNjExMjMwMDQ4WhcNMjYwNjEyMjMwMDQ4WjAzMTEwLwYDVQQD
Eyg3NDgyYjQ0ZGJjYWI1YjUyZjgzMDk5NWNiOTc2ZDAxNzVhOTgwMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4SRyMXKOV+/jTZnksZxLUx2DkpE
5NP43Ep6wV94qYX+q/UIdMh1B9mRDjlmGUoH3/+8YJhYEcgqID5PvkPNiObsL1Np
4zSU/m96KRGN3IMTX/1g97CKiSfd/TdHLa3cdJvjzFL1jCn7/jZYcRJQMpVyRHU0
bq5jaI5GU24iiURUXTBxU7R1dfusVl5WbJSB/u6+ZiIJczWbNj7s1GONlwCyg1D0
THrcZp/e2vNeCCcXYTWjTPtY8EADLpJ1UaAPZHdN1uakxsZS7gaeITP9fEceo3uu
4Q34Lm/9pz5eVo2nmbUVWa6dfnx0d7aHFoqvQChRRlu8RW5NuNjJAVycGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSCtE28q1tS+DCZXLl20BdamAAHMB8GA1UdIwQY
MBaAFAHPKnGyx79UHGzAQVHNAgeNNpkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgt
YjBmNGZiZTI2YjYxLzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgtYjBmNGZiZTI2YjYx
LzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeWOQy5W
+mkK7zHu7FELFcueDsR1vBdJqR4RCWRwtshk2GcQf6zugb0qlhOs7ZLV4UuDOJgT
R+4aB+KsEGmMH3qY74g8lErt1DSJcqZnblwouxVh8p3RdFG/P8M8HSg/nN6yxMwp
RsrXTLyyothvBnV1iNZyQoZuI/JYUQE3YWPLUpUFVTOQtrRc3suCNi9uSX9Ieh29
ATzH/+ACZQmDAFNAI9dF1DS2ThiDkl2pSoRoY3QO5cYZoAeyr+ksPUwVJo0CREA0
IKke022Y9o/nD3HZZWlcsmoqzJJJNFsIDwUdC0io777Xv0/Z48kt9nFpK/EjiA91
8c7UiOwbjQNFbg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:03:06 2026 by rpki-client