Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File:                     rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier:          Hgo4VgRJ+VNzFWUR5TpLpzGXwcXbwh5Q6ayzuS4xGZs=
Subject key identifier:   28:FB:97:62:88:E8:95:F5:B5:ED:B2:73:FA:92:33:E4:68:08:89:59
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer:       /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial:       019EDCC09B1B75CC252D0CC5183ECF4F4FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number:          104F
Signing time:             Thu 18 Jun 2026 22:01:10 +0000
Manifest this update:     Thu 18 Jun 2026 22:01:10 +0000
Manifest next update:     Fri 19 Jun 2026 22:01:10 +0000
Files and hashes:         1: 4FbUQPbInKsJV6tUxAOCJ09zMtA.roa (hash: XDmbXmDYXHXEEVlnrPjHgOg48u89KTGeW87AL4CNgDM=)
                          2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: lfvIe5w2Fj3m+hArFCVn6bMTUplsgrkklH0gz9ssOWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:c0:9b:1b:75:cc:25:2d:0c:c5:18:3e:cf:4f:4f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
        Validity
            Not Before: Jun 18 22:01:10 2026 GMT
            Not After : Jun 19 22:01:10 2026 GMT
        Subject: CN=28fb976288e895f5b5edb273fa9233e468088959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:05:e8:db:66:8c:13:ee:45:ea:32:ef:50:
                    66:d6:88:17:5b:78:fd:8e:2a:4f:09:37:e5:8b:84:
                    e4:92:37:6b:5b:9c:85:33:0e:7e:2b:d9:34:69:00:
                    a2:92:1c:0b:1b:ed:14:a8:b3:f3:5d:c7:df:53:f3:
                    a3:c1:2b:9a:d5:64:35:94:1c:23:42:92:1c:88:47:
                    47:11:a1:f0:17:ad:fa:89:91:f3:41:24:bf:f1:68:
                    47:b7:e3:5b:e6:20:32:47:08:a7:5c:71:6d:58:c1:
                    dd:24:90:58:e1:df:06:fc:e6:dd:a3:29:08:d0:cf:
                    c0:54:ef:1e:11:f5:fa:47:d0:f6:19:aa:77:0c:21:
                    69:ab:0e:4e:cd:e6:8b:3e:ef:5c:3c:dc:e5:ec:5a:
                    98:84:61:59:34:0b:b5:b4:08:55:e9:ca:87:7a:a9:
                    eb:c1:6a:c0:aa:83:3e:16:87:61:9d:b1:0d:a6:bb:
                    06:62:6b:7d:68:36:f3:81:18:9e:0d:4f:96:24:c4:
                    04:42:26:12:ce:95:0c:bc:fb:ff:eb:41:38:a1:de:
                    84:f8:86:c3:c1:b5:d3:0d:e4:85:be:38:7a:2e:d6:
                    7a:90:bb:2d:33:3f:52:de:68:0f:05:fe:53:a1:25:
                    23:49:2f:a5:03:f4:f2:2f:ec:9b:84:55:31:91:d4:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FB:97:62:88:E8:95:F5:B5:ED:B2:73:FA:92:33:E4:68:08:89:59
            X509v3 Authority Key Identifier:
                keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:97:e5:20:71:2d:66:43:00:07:ac:7d:21:22:10:19:5c:74:
         05:40:e9:8e:27:a3:5b:e4:c6:62:8f:b8:29:dd:c1:6e:e9:3b:
         c2:e0:91:77:dd:e4:38:b2:fd:cf:9d:af:33:99:db:30:50:42:
         73:dd:a7:b2:b6:9b:d5:aa:a8:9a:68:2a:9e:90:a3:06:96:25:
         30:f1:8a:85:01:97:3b:3f:18:00:01:0a:0c:fb:6e:6e:b5:9c:
         46:d2:2d:5d:c8:f9:13:ec:e3:15:f3:11:6b:d3:65:40:7d:fd:
         95:f7:2a:ce:60:7f:76:ca:ba:60:00:c0:99:ab:8b:a5:96:aa:
         e3:36:1d:a0:c3:a5:0a:4e:fc:35:7a:ae:aa:81:e5:39:62:e7:
         ec:fa:77:af:fe:aa:ac:be:14:73:f4:cc:3b:1b:1d:13:bb:2d:
         8f:28:ab:21:15:8f:8a:71:5c:a4:ce:a4:50:29:29:1a:c8:6c:
         ce:b8:ad:17:ba:af:2a:47:8a:5a:07:61:03:56:62:bd:90:6a:
         7a:65:48:ed:42:c5:05:88:85:ec:13:99:59:40:f7:ef:9c:91:
         c9:c7:2b:e8:84:6b:1b:b7:29:50:14:8a:bd:5f:88:ed:e1:eb:
         44:04:72:97:3d:da:ce:22:15:f5:cd:c3:35:09:64:96:61:63:
         db:bc:7a:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7cwJsbdcwlLQzFGD7PT0+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNmYxODQxNmQ3ZDQ3MGFhMDRhZDAwYmNhNTc2ODNjNzg5
ZDg1NGQwHhcNMjYwNjE4MjIwMTEwWhcNMjYwNjE5MjIwMTEwWjAzMTEwLwYDVQQD
EygyOGZiOTc2Mjg4ZTg5NWY1YjVlZGIyNzNmYTkyMzNlNDY4MDg4OTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXYF6NtmjBPuReoy71Bm1ogXW3j9
jipPCTfli4TkkjdrW5yFMw5+K9k0aQCikhwLG+0UqLPzXcffU/OjwSua1WQ1lBwj
QpIciEdHEaHwF636iZHzQSS/8WhHt+Nb5iAyRwinXHFtWMHdJJBY4d8G/ObdoykI
0M/AVO8eEfX6R9D2Gap3DCFpqw5OzeaLPu9cPNzl7FqYhGFZNAu1tAhV6cqHeqnr
wWrAqoM+FodhnbENprsGYmt9aDbzgRieDU+WJMQEQiYSzpUMvPv/60E4od6E+IbD
wbXTDeSFvjh6LtZ6kLstMz9S3mgPBf5ToSUjSS+lA/TyL+ybhFUxkdRXNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj7l2KI6JX1te2yc/qSM+RoCIlZMB8GA1UdIwQY
MBaAFK5vGEFtfUcKoErQC8pXaDx4nYVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm04WVFXMTlSd3FnU3RBTHlsZG9QSGlkaFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2Q5N2UtNmRlOS00MzMyLWI0ZGYt
MDZlNTRkZDkyMTcxLzEvcm04WVFXMTlSd3FnU3RBTHlsZG9QSGlkaFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2Q5N2UtNmRlOS00MzMyLWI0ZGYtMDZlNTRkZDkyMTcx
LzEvcm04WVFXMTlSd3FnU3RBTHlsZG9QSGlkaFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZflIHEt
ZkMAB6x9ISIQGVx0BUDpjiejW+TGYo+4Kd3Bbuk7wuCRd93kOLL9z52vM5nbMFBC
c92nsrab1aqommgqnpCjBpYlMPGKhQGXOz8YAAEKDPtubrWcRtItXcj5E+zjFfMR
a9NlQH39lfcqzmB/dsq6YADAmauLpZaq4zYdoMOlCk78NXquqoHlOWLn7Pp3r/6q
rL4Uc/TMOxsdE7stjyirIRWPinFcpM6kUCkpGshszritF7qvKkeKWgdhA1ZivZBq
emVI7ULFBYiF7BOZWUD375yRyccr6IRrG7cpUBSKvV+I7eHrRARylz3aziIV9c3D
NQlklmFj27x6iQ==
-----END CERTIFICATE-----
Generated at Fri Jun 19 08:29:30 2026 by rpki-client