Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File:                     8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier:          r3EZSWyELtXe6bIRH4moNr/O85reK2PYPukgiM+O+pY=
Subject key identifier:   A6:79:FE:5B:B9:42:62:30:C7:0F:54:08:05:30:07:C2:F3:3E:FC:AA
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer:       /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial:       019F11F7BAC48DED64B26A9872C0C9472A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number:          1982
Signing time:             Mon 29 Jun 2026 06:01:15 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:15 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:15 +0000
Files and hashes:         1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
                          2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: BiIkhLERx0/jfIdSyMGkiDLLKbv4ix4Zst95eX3chkA=)
                          3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f7:ba:c4:8d:ed:64:b2:6a:98:72:c0:c9:47:2a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
        Validity
            Not Before: Jun 29 06:01:15 2026 GMT
            Not After : Jun 30 06:01:15 2026 GMT
        Subject: CN=a679fe5bb9426230c70f5408053007c2f33efcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:aa:0f:3a:33:9d:f8:f2:1c:9d:fb:4f:55:
                    37:f7:59:ed:4e:fa:f4:72:d7:f7:f5:67:67:2a:bf:
                    8b:66:98:a1:d1:73:67:d7:ce:9d:3f:bc:49:f4:71:
                    c8:99:8c:c0:88:ed:61:f3:d5:8c:fa:e0:7f:02:63:
                    ed:f5:f4:19:04:33:de:a5:85:14:81:66:5a:6e:b5:
                    e3:74:81:62:11:79:b1:3f:c2:c3:40:88:06:d5:25:
                    d0:7f:a9:c0:f1:a6:ac:72:ec:87:25:30:b8:57:5e:
                    23:b3:e9:d9:ab:ae:17:af:17:8f:38:19:81:25:8c:
                    8d:6b:c5:f3:e8:c1:4c:a3:7f:6d:24:ba:08:c9:9d:
                    63:eb:6c:16:b6:ca:2d:93:53:d9:9f:cf:8d:ea:72:
                    55:f7:ca:ab:27:07:a9:0a:ba:d4:e3:39:c2:d4:16:
                    40:58:4a:9c:98:d2:2e:97:24:ff:49:69:c0:d2:62:
                    73:91:20:4e:78:c3:2a:13:50:54:e5:7e:7d:b0:70:
                    b9:8c:4b:43:df:38:52:7c:ee:7f:64:65:8a:41:b8:
                    30:e5:01:bb:64:e0:13:51:f0:7c:3b:06:92:c6:e5:
                    8c:02:8e:1a:07:bf:31:07:fb:3c:51:dc:33:e2:0b:
                    96:a7:64:e8:bc:d5:73:e3:24:ae:53:bf:15:ae:58:
                    a8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:79:FE:5B:B9:42:62:30:C7:0F:54:08:05:30:07:C2:F3:3E:FC:AA
            X509v3 Authority Key Identifier:
                keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:29:7d:9b:2d:c0:98:cf:8e:90:d6:9e:3c:c2:0a:9b:cf:
         0f:89:43:12:c5:94:ce:92:f1:eb:0d:71:cf:ce:a1:77:ec:28:
         f8:70:73:73:97:fd:eb:d9:54:19:c9:b6:ae:6b:ab:73:89:d0:
         e0:f1:74:76:10:61:4f:90:6d:cb:0a:23:f2:ae:78:63:e2:f6:
         08:be:f9:8f:08:48:65:84:a7:be:f5:8d:b3:c6:29:39:4f:35:
         74:d6:9e:2f:16:29:73:96:83:e2:85:28:62:96:e1:02:f4:2e:
         1a:6e:e3:df:69:33:1f:0f:b7:7e:70:89:22:a6:40:c0:84:fa:
         16:4d:10:01:e0:29:ad:50:9c:31:c7:8f:5c:aa:c6:e0:3f:75:
         81:4d:d1:ce:e6:43:1b:43:5b:4e:fe:49:3e:d2:6f:6f:fc:76:
         8b:6b:bd:99:f0:40:9a:61:5a:05:95:47:63:b7:aa:71:7a:fc:
         4f:aa:ae:cd:28:08:4c:a2:88:59:77:fa:e4:ca:47:9c:d1:ab:
         1e:04:e4:a2:d0:32:22:28:09:e1:a8:73:e9:17:4f:15:75:5f:
         d5:c6:11:e8:58:0f:b6:f6:d3:e0:ce:81:3a:20:20:be:d3:a5:
         06:b5:1f:c8:c3:be:b9:67:22:56:7d:1c:58:1d:cf:1a:5f:1e:
         cb:87:46:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R97rEje1ksmqYcsDJRypDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjYwNjI5MDYwMTE1WhcNMjYwNjMwMDYwMTE1WjAzMTEwLwYDVQQD
EyhhNjc5ZmU1YmI5NDI2MjMwYzcwZjU0MDgwNTMwMDdjMmYzM2VmY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0OqDzoznfjyHJ37T1U391ntTvr0
ctf39WdnKr+LZpih0XNn186dP7xJ9HHImYzAiO1h89WM+uB/AmPt9fQZBDPepYUU
gWZabrXjdIFiEXmxP8LDQIgG1SXQf6nA8aascuyHJTC4V14js+nZq64XrxePOBmB
JYyNa8Xz6MFMo39tJLoIyZ1j62wWtsotk1PZn8+N6nJV98qrJwepCrrU4znC1BZA
WEqcmNIulyT/SWnA0mJzkSBOeMMqE1BU5X59sHC5jEtD3zhSfO5/ZGWKQbgw5QG7
ZOATUfB8OwaSxuWMAo4aB78xB/s8Udwz4guWp2TovNVz4ySuU78VrliobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ5/lu5QmIwxw9UCAUwB8LzPvyqMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouIpfZst
wJjPjpDWnjzCCpvPD4lDEsWUzpLx6w1xz86hd+wo+HBzc5f969lUGcm2rmurc4nQ
4PF0dhBhT5Btywoj8q54Y+L2CL75jwhIZYSnvvWNs8YpOU81dNaeLxYpc5aD4oUo
YpbhAvQuGm7j32kzHw+3fnCJIqZAwIT6Fk0QAeAprVCcMcePXKrG4D91gU3RzuZD
G0NbTv5JPtJvb/x2i2u9mfBAmmFaBZVHY7eqcXr8T6quzSgITKKIWXf65MpHnNGr
HgTkotAyIigJ4ahz6RdPFXVf1cYR6FgPtvbT4M6BOiAgvtOlBrUfyMO+uWciVn0c
WB3PGl8ey4dGsg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:01 2026 by rpki-client