Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File:                     q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier:          smKiMoUVSEiU+d+IeB5H543DSzGs+RVuQnZkVZal7mI=
Subject key identifier:   06:8C:A1:AC:4D:6D:1E:E0:43:98:1C:9D:DE:37:3D:68:2E:90:62:03
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer:       /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial:       019EA90A20894C9F9C20EA4FE5F32F7E7835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number:          0EB8
Signing time:             Mon 08 Jun 2026 21:01:13 +0000
Manifest this update:     Mon 08 Jun 2026 21:01:13 +0000
Manifest next update:     Tue 09 Jun 2026 21:01:13 +0000
Files and hashes:         1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
                          2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
                          3: Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa (hash: PhCalGp+MfsuVT1o+EaqpG+ubg4eyRCw+3C+dRQltm0=)
                          4: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
                          5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
                          6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: EpMD7ekorGkcPk+QkmVNQV/e+9jk7Tg3N8qj4xnZQwc=)
                          7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 19:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a9:0a:20:89:4c:9f:9c:20:ea:4f:e5:f3:2f:7e:78:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
        Validity
            Not Before: Jun  8 21:01:13 2026 GMT
            Not After : Jun  9 21:01:13 2026 GMT
        Subject: CN=068ca1ac4d6d1ee043981c9dde373d682e906203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:c0:9f:0f:c1:be:07:d1:d4:68:08:3f:85:
                    2a:31:86:33:49:72:31:af:98:b9:b7:30:a0:3d:63:
                    6e:88:f3:9f:1a:3f:b7:85:ff:37:1e:ce:00:2a:e1:
                    a4:93:c7:19:2b:65:86:e0:92:9a:56:3a:28:97:02:
                    32:b5:37:7c:83:71:88:0b:ca:c9:09:71:c8:8d:c6:
                    b6:f9:25:c4:4b:09:82:43:b8:95:1f:ac:fe:4a:f2:
                    74:b5:1a:0a:4e:23:5d:12:1b:b0:61:b5:06:62:d2:
                    e1:cb:ff:7b:6c:32:2e:39:22:2b:3d:b4:30:2e:51:
                    d7:12:cb:1c:4c:fd:9e:ac:8d:24:a7:c3:81:4a:e7:
                    b5:cf:7a:d9:c1:cc:bb:a3:2e:40:50:f5:95:c2:fa:
                    8c:0d:c8:2e:17:dc:07:e2:32:dd:4e:b6:5f:92:36:
                    f5:50:a4:2b:39:8c:19:08:5b:c9:9c:89:91:54:0a:
                    64:0a:2f:85:30:98:58:33:e4:c4:2a:42:49:33:ae:
                    aa:b1:6b:dd:dc:c6:05:9c:33:e2:1b:14:42:2e:3c:
                    02:20:dc:cf:5f:92:62:84:6b:2c:2e:a5:ce:1b:35:
                    76:a1:83:71:45:a2:fd:2c:a1:f1:c2:fc:74:9d:f5:
                    3e:4e:c4:6d:f2:68:cc:69:b4:c7:6b:fe:55:87:67:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8C:A1:AC:4D:6D:1E:E0:43:98:1C:9D:DE:37:3D:68:2E:90:62:03
            X509v3 Authority Key Identifier:
                keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c2:b8:bb:e7:e6:98:b5:84:cb:35:49:1e:3c:4d:26:28:61:
         6e:f6:e7:98:50:9d:b9:c2:b1:7f:aa:af:4a:68:e9:c8:a4:ec:
         c6:c0:54:a1:1d:fa:0b:96:b2:1e:9c:51:89:b8:65:8c:90:41:
         74:83:98:86:1b:0e:e3:94:cc:40:03:7a:7e:0e:74:e4:72:a0:
         c9:19:dc:a8:e6:74:df:cb:4a:f4:b4:ac:cb:3e:51:ef:72:46:
         19:71:0e:e7:bc:c9:e7:f0:a7:4d:9a:4f:13:80:5a:e8:de:c0:
         95:4e:3c:5f:ff:38:b3:71:12:2a:ca:50:6a:43:bd:72:ae:8a:
         ea:07:b3:9a:da:05:b2:17:f6:14:c2:74:11:90:6a:2a:c8:03:
         da:c4:3a:35:10:87:45:fc:65:81:6c:b1:ee:aa:0d:3e:62:f1:
         63:9a:40:65:e8:3a:3c:97:af:62:72:b7:cf:34:68:b4:69:29:
         32:a2:96:cd:0e:5c:2a:8e:0d:ab:3d:3d:53:72:d7:3c:19:ba:
         a5:c1:8c:e4:9a:69:bd:f7:94:c8:a9:db:af:5d:b5:4c:8e:6f:
         20:17:85:4e:78:fa:71:d4:56:17:8d:2a:c5:a5:ca:94:f1:a3:
         4a:b3:be:cd:f2:2e:4f:e7:37:c1:da:a4:3d:1d:2c:34:f1:a4:
         21:38:5d:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6pCiCJTJ+cIOpP5fMvfng1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz
ZDUxZDcwHhcNMjYwNjA4MjEwMTEzWhcNMjYwNjA5MjEwMTEzWjAzMTEwLwYDVQQD
EygwNjhjYTFhYzRkNmQxZWUwNDM5ODFjOWRkZTM3M2Q2ODJlOTA2MjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx67Anw/BvgfR1GgIP4UqMYYzSXIx
r5i5tzCgPWNuiPOfGj+3hf83Hs4AKuGkk8cZK2WG4JKaVjoolwIytTd8g3GIC8rJ
CXHIjca2+SXESwmCQ7iVH6z+SvJ0tRoKTiNdEhuwYbUGYtLhy/97bDIuOSIrPbQw
LlHXEsscTP2erI0kp8OBSue1z3rZwcy7oy5AUPWVwvqMDcguF9wH4jLdTrZfkjb1
UKQrOYwZCFvJnImRVApkCi+FMJhYM+TEKkJJM66qsWvd3MYFnDPiGxRCLjwCINzP
X5JihGssLqXOGzV2oYNxRaL9LKHxwvx0nfU+TsRt8mjMabTHa/5Vh2dmJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaMoaxNbR7gQ5gcnd43PWgukGIDMB8GA1UdIwQY
MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt
MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx
LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcK4u+fm
mLWEyzVJHjxNJihhbvbnmFCducKxf6qvSmjpyKTsxsBUoR36C5ayHpxRibhljJBB
dIOYhhsO45TMQAN6fg505HKgyRncqOZ038tK9LSsyz5R73JGGXEO57zJ5/CnTZpP
E4Ba6N7AlU48X/84s3ESKspQakO9cq6K6gezmtoFshf2FMJ0EZBqKsgD2sQ6NRCH
RfxlgWyx7qoNPmLxY5pAZeg6PJevYnK3zzRotGkpMqKWzQ5cKo4Nqz09U3LXPBm6
pcGM5JppvfeUyKnbr121TI5vIBeFTnj6cdRWF40qxaXKlPGjSrO+zfIuT+c3wdqk
PR0sNPGkIThdxQ==
-----END CERTIFICATE-----
Generated at Tue Jun 9 04:51:00 2026 by rpki-client