Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File:                     9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier:          Tuc14Tx8f1AV8qVL4Ai4x5mYPgbDv1Vhgu4TZSQJS34=
Subject key identifier:   F8:B1:3C:A2:BD:D6:06:A9:1A:18:20:8B:AA:C5:6C:32:D6:8E:D5:48
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer:       /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial:       019E303B6413509610C43E478A8014250E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number:          061B
Signing time:             Sat 16 May 2026 10:00:59 +0000
Manifest this update:     Sat 16 May 2026 10:00:59 +0000
Manifest next update:     Sun 17 May 2026 10:00:59 +0000
Files and hashes:         1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: jGlvUXwb+cMOq+4YqrbhyzAb7CrBV9TNH92BB38Lrx8=)
                          2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:64:13:50:96:10:c4:3e:47:8a:80:14:25:0e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
        Validity
            Not Before: May 16 10:00:59 2026 GMT
            Not After : May 17 10:00:59 2026 GMT
        Subject: CN=f8b13ca2bdd606a91a18208baac56c32d68ed548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:2d:ec:12:50:09:b2:d8:22:96:2a:38:d2:
                    33:d6:9c:5f:d8:24:ea:5a:44:9c:19:40:e3:af:cc:
                    0a:19:53:ba:b8:1f:ce:93:c1:e1:e9:0a:eb:3e:6a:
                    5d:b8:bc:41:5a:e4:ca:ea:e8:51:9f:51:17:85:6f:
                    02:1f:11:ed:b4:43:53:82:bf:a1:cc:3c:8f:72:70:
                    7e:cc:4e:d4:a4:04:1f:5a:71:22:6c:a9:ab:de:58:
                    51:ba:47:11:80:49:05:cb:a3:33:6b:5c:2a:d7:10:
                    c5:6b:0b:5f:1f:2e:a2:16:3c:02:6b:c8:da:11:e0:
                    8d:18:9e:56:df:4a:9a:08:70:ea:d4:80:cd:da:09:
                    f2:8d:9e:9b:42:27:91:e2:bd:df:89:e5:23:a7:3a:
                    c3:ed:98:58:64:fe:05:32:bd:80:eb:cb:ba:d2:25:
                    05:6c:bc:ea:ac:4d:ec:b5:f7:3b:68:a9:38:31:b2:
                    29:fb:0a:8c:80:52:da:de:de:8e:46:34:b1:4f:e2:
                    e6:fb:bc:e3:43:17:a4:66:63:66:d9:24:8e:a3:c8:
                    8a:cc:37:d9:ea:bd:2d:80:ad:54:cf:e9:af:70:f9:
                    b3:3a:5b:b6:31:a9:07:16:43:ee:02:05:d5:c7:14:
                    f1:d9:e6:c7:05:ef:6b:bc:53:3d:f8:b5:47:59:69:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B1:3C:A2:BD:D6:06:A9:1A:18:20:8B:AA:C5:6C:32:D6:8E:D5:48
            X509v3 Authority Key Identifier:
                keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:1c:e6:76:a7:ed:fe:5e:cd:f1:5d:24:a0:56:e0:a3:ca:a8:
         c7:96:88:48:a3:ad:5b:fa:78:c3:67:66:5c:53:fe:ef:ca:e4:
         58:6c:28:bb:ef:50:b6:13:e4:97:14:85:b9:94:bc:50:90:a7:
         21:36:68:28:2f:22:0d:ad:c9:a8:70:3d:69:32:79:14:dc:8e:
         77:09:7f:b7:35:09:67:8b:f1:a1:96:ec:67:50:ae:90:fd:33:
         da:2f:b2:94:8f:01:a2:59:a8:cb:f3:ab:90:19:dd:de:7c:8f:
         d0:f3:4f:b8:38:dc:50:c3:c1:a9:75:b9:ba:5d:c2:9d:eb:70:
         0d:4d:a8:ed:dd:99:c5:a9:87:c9:f2:1d:c0:55:df:7c:87:89:
         db:8d:15:01:4f:94:ae:ed:6a:3c:40:83:2a:9f:ba:67:81:76:
         4d:99:39:5c:b1:bd:a5:7d:8f:52:3a:e5:42:65:0a:df:96:9c:
         45:7b:32:3c:1b:29:39:8a:97:be:d5:8a:3c:15:1c:90:f4:fb:
         c4:43:88:66:7e:be:0b:84:98:93:18:94:ab:6f:14:25:71:95:
         69:ef:cc:47:de:78:09:02:66:fa:aa:c5:02:d3:79:5c:84:d7:
         b0:a7:5e:38:df:6c:1b:ab:94:9e:c8:e4:7f:1d:0d:1c:25:a7:
         94:6d:cb:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO2QTUJYQxD5HioAUJQ6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWYwNzIxMGIyODg0YjRmZWE1MDdiZGUyMjc3OTViMjY0
MDYyZWQwHhcNMjYwNTE2MTAwMDU5WhcNMjYwNTE3MTAwMDU5WjAzMTEwLwYDVQQD
EyhmOGIxM2NhMmJkZDYwNmE5MWExODIwOGJhYWM1NmMzMmQ2OGVkNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw18t7BJQCbLYIpYqONIz1pxf2CTq
WkScGUDjr8wKGVO6uB/Ok8Hh6QrrPmpduLxBWuTK6uhRn1EXhW8CHxHttENTgr+h
zDyPcnB+zE7UpAQfWnEibKmr3lhRukcRgEkFy6Mza1wq1xDFawtfHy6iFjwCa8ja
EeCNGJ5W30qaCHDq1IDN2gnyjZ6bQieR4r3fieUjpzrD7ZhYZP4FMr2A68u60iUF
bLzqrE3stfc7aKk4MbIp+wqMgFLa3t6ORjSxT+Lm+7zjQxekZmNm2SSOo8iKzDfZ
6r0tgK1Uz+mvcPmzOlu2MakHFkPuAgXVxxTx2ebHBe9rvFM9+LVHWWmX6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPixPKK91gapGhggi6rFbDLWjtVIMB8GA1UdIwQY
MBaAFPafByELKIS0/qUHveIneVsmQGLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMt
NDVmNjBmNDE0ZmY3LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMtNDVmNjBmNDE0ZmY3
LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxBzmdqft
/l7N8V0koFbgo8qox5aISKOtW/p4w2dmXFP+78rkWGwou+9QthPklxSFuZS8UJCn
ITZoKC8iDa3JqHA9aTJ5FNyOdwl/tzUJZ4vxoZbsZ1CukP0z2i+ylI8Bolmoy/Or
kBnd3nyP0PNPuDjcUMPBqXW5ul3CnetwDU2o7d2ZxamHyfIdwFXffIeJ240VAU+U
ru1qPECDKp+6Z4F2TZk5XLG9pX2PUjrlQmUK35acRXsyPBspOYqXvtWKPBUckPT7
xEOIZn6+C4SYkxiUq28UJXGVae/MR954CQJm+qrFAtN5XITXsKdeON9sG6uUnsjk
fx0NHCWnlG3LyA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:46 2026 by rpki-client