Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File:                     jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier:          keRP62xV5f78Vq8jtPMKhWVDHhrRCgDiMGE893XfudA=
Subject key identifier:   85:DC:A4:C8:4E:AF:1F:E8:70:DA:0E:81:3C:77:40:1D:7F:93:FC:F6
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer:       /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial:       019E307277C20C871C95A757E6A7ADAE59D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number:          09FA
Signing time:             Sat 16 May 2026 11:01:08 +0000
Manifest this update:     Sat 16 May 2026 11:01:08 +0000
Manifest next update:     Sun 17 May 2026 11:01:08 +0000
Files and hashes:         1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
                          2: LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa (hash: sCGRtI2KCA+jQQtUTNpqZX8j5KBH3bE/D1f4nUTBd00=)
                          3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: b1F8LnF026eo3vaxjLJ2Uv9gHaigbcIYoQeA2g+pCDo=)
                          4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:77:c2:0c:87:1c:95:a7:57:e6:a7:ad:ae:59:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
        Validity
            Not Before: May 16 11:01:08 2026 GMT
            Not After : May 17 11:01:08 2026 GMT
        Subject: CN=85dca4c84eaf1fe870da0e813c77401d7f93fcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:17:16:4c:c7:40:3b:52:26:d6:54:29:3b:
                    0a:03:3a:6d:67:5a:21:fa:02:2a:ec:1e:dc:01:61:
                    6a:5d:e0:10:b7:29:1b:56:d8:77:95:91:23:ef:a6:
                    d2:44:f9:91:54:f4:a0:ff:03:04:e4:06:af:93:f4:
                    ea:19:03:ab:ca:f4:5f:14:b1:cd:d7:6a:a7:cd:6b:
                    d6:cc:5a:54:7e:b6:54:4b:fe:df:c5:95:42:23:3a:
                    79:1d:cc:27:7c:44:cf:4e:cd:60:c8:8a:6e:b9:98:
                    15:c0:d4:c0:90:05:fa:94:f4:e3:5f:88:76:88:33:
                    b5:f0:6e:bb:a6:07:ef:b0:95:94:d5:1e:35:6a:fb:
                    e1:f3:46:0a:f6:b4:c3:28:de:78:2f:bc:cb:39:95:
                    38:18:9c:29:8e:dd:82:3c:10:f2:90:3c:1d:ce:d5:
                    be:70:1c:ce:1b:b1:fe:15:c3:df:6c:13:62:bf:b1:
                    0e:a0:cc:f3:9c:73:91:95:a3:b7:3f:4f:c3:90:96:
                    2f:6f:e8:ac:1a:45:28:de:ef:8f:a1:2d:eb:8e:3b:
                    71:36:41:ad:36:1b:05:c2:a0:58:a7:04:bd:f8:8a:
                    4e:6c:d1:a7:82:a6:1d:72:81:92:79:3d:c2:90:02:
                    8c:6d:59:85:54:08:29:b5:7a:b0:54:ee:09:5c:d2:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DC:A4:C8:4E:AF:1F:E8:70:DA:0E:81:3C:77:40:1D:7F:93:FC:F6
            X509v3 Authority Key Identifier:
                keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c3:8c:f7:32:6d:40:64:dd:d1:30:0c:fd:90:e5:3f:7f:76:
         23:4f:06:81:1b:4e:09:aa:c2:a5:89:8d:fb:09:a6:eb:cc:68:
         22:01:b7:a1:35:f9:56:e3:33:6e:74:3d:38:f4:86:cc:ca:fc:
         79:bd:03:41:34:af:8c:5d:df:bb:2f:43:f5:46:ec:f9:66:d5:
         aa:55:0f:c8:5f:52:b5:e7:5b:1f:ef:3f:d2:81:c5:74:b4:52:
         7f:a6:a9:6b:37:8c:2c:fd:f0:14:06:ce:e1:84:0e:63:1f:ff:
         e5:72:23:2a:8f:b0:65:53:b0:f5:17:5a:73:58:b5:29:b8:92:
         d9:99:54:cc:cb:c6:e8:e0:f7:a8:bf:5f:69:46:1a:96:23:37:
         97:1d:b3:09:83:c5:cc:a3:31:96:aa:14:dd:d3:61:a9:cd:50:
         30:f4:fe:03:d9:72:29:7e:95:dc:f0:7b:8b:a7:ef:41:5a:61:
         8c:50:27:8e:57:53:74:98:cb:6f:0b:ec:53:98:77:ba:a3:71:
         6e:82:3d:5a:ba:11:58:cb:76:41:4a:74:27:18:6f:4e:b2:d1:
         5f:ad:29:ae:81:12:90:95:63:a2:1b:f6:fc:a8:75:6b:e9:7d:
         1f:1b:e1:cd:d2:64:99:9b:0b:a6:78:91:26:34:c3:ad:3e:fa:
         d0:7a:da:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcnfCDIccladX5qetrlnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi
Y2VkNWUwHhcNMjYwNTE2MTEwMTA4WhcNMjYwNTE3MTEwMTA4WjAzMTEwLwYDVQQD
Eyg4NWRjYTRjODRlYWYxZmU4NzBkYTBlODEzYzc3NDAxZDdmOTNmY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1wXFkzHQDtSJtZUKTsKAzptZ1oh
+gIq7B7cAWFqXeAQtykbVth3lZEj76bSRPmRVPSg/wME5Aavk/TqGQOryvRfFLHN
12qnzWvWzFpUfrZUS/7fxZVCIzp5HcwnfETPTs1gyIpuuZgVwNTAkAX6lPTjX4h2
iDO18G67pgfvsJWU1R41avvh80YK9rTDKN54L7zLOZU4GJwpjt2CPBDykDwdztW+
cBzOG7H+FcPfbBNiv7EOoMzznHORlaO3P0/DkJYvb+isGkUo3u+PoS3rjjtxNkGt
NhsFwqBYpwS9+IpObNGngqYdcoGSeT3CkAKMbVmFVAgptXqwVO4JXNItyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXcpMhOrx/ocNoOgTx3QB1/k/z2MB8GA1UdIwQY
MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt
ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3
LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMOM9zJt
QGTd0TAM/ZDlP392I08GgRtOCarCpYmN+wmm68xoIgG3oTX5VuMzbnQ9OPSGzMr8
eb0DQTSvjF3fuy9D9Ubs+WbVqlUPyF9StedbH+8/0oHFdLRSf6apazeMLP3wFAbO
4YQOYx//5XIjKo+wZVOw9Rdac1i1KbiS2ZlUzMvG6OD3qL9faUYaliM3lx2zCYPF
zKMxlqoU3dNhqc1QMPT+A9lyKX6V3PB7i6fvQVphjFAnjldTdJjLbwvsU5h3uqNx
boI9WroRWMt2QUp0JxhvTrLRX60proESkJVjohv2/Kh1a+l9HxvhzdJkmZsLpniR
JjTDrT760Hravw==
-----END CERTIFICATE-----
Generated at Sat May 16 21:14:32 2026 by rpki-client