Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File:                     0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier:          2IySLhvH9yd6Suu0uOXLM1Bqz+wFCSW63FabRy3Zz0w=
Subject key identifier:   8C:44:DB:A0:BB:DB:F7:0D:2C:6D:2E:09:E5:84:21:CA:61:11:70:F8
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer:       /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial:       019F1830B3C05717747D77D3519BD9867068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 11:01:12 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:12 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:12 +0000
Files and hashes:         1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: ZsRViKyY/S+BQSQxOSZJgLSgx5lFxa7Wb15/HkwAWLo=)
                          2: oHmE_s2IgxzPCRH2-ThzQIvXCO0.roa (hash: sNd3D2Nl25u7Dz2DARN3+vH2eQ72TG1JHi7rWfuknfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:b3:c0:57:17:74:7d:77:d3:51:9b:d9:86:70:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
        Validity
            Not Before: Jun 30 11:01:12 2026 GMT
            Not After : Jul  1 11:01:12 2026 GMT
        Subject: CN=8c44dba0bbdbf70d2c6d2e09e58421ca611170f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:22:d2:7d:30:19:68:ac:0b:04:70:99:db:
                    9f:90:06:bc:78:72:19:b5:c4:67:56:43:0f:72:da:
                    f5:49:8e:dc:aa:cd:ce:cd:d1:80:69:b1:92:c2:75:
                    a1:92:d1:36:4c:2a:f7:2d:83:8e:7e:eb:57:64:d5:
                    d5:2e:17:26:65:54:07:83:bf:6f:52:e2:72:1b:34:
                    00:53:ba:25:dc:78:e6:07:f2:45:5d:2a:a2:65:1e:
                    5b:7e:14:4c:3b:be:2a:66:6d:12:87:b8:37:bb:f7:
                    af:5c:c2:6c:f1:99:05:a9:bb:2a:88:24:83:2e:78:
                    12:93:87:16:23:29:b9:be:3a:69:3d:65:17:83:5e:
                    9e:cb:c1:22:ca:5d:f1:c2:99:6e:aa:76:92:25:29:
                    6e:b1:49:1a:55:1d:eb:3d:c5:44:4c:a7:08:a7:99:
                    14:35:7d:b5:d4:d3:2c:0a:5d:c7:48:e7:3c:d2:76:
                    a2:f9:ad:8f:bd:91:29:b0:7f:63:42:e6:4d:92:97:
                    c8:22:9c:8b:7d:c5:a2:99:06:6b:23:a4:24:90:f5:
                    cf:b6:b5:bc:4e:58:8d:ab:16:a5:19:14:c4:67:76:
                    f2:06:f3:ce:fa:3e:cd:f9:ad:73:51:a7:8c:1a:7e:
                    16:76:22:15:3f:05:22:68:70:c1:bb:96:97:7e:d0:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:DB:A0:BB:DB:F7:0D:2C:6D:2E:09:E5:84:21:CA:61:11:70:F8
            X509v3 Authority Key Identifier:
                keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:37:3c:fe:6a:42:08:da:60:3e:ad:3b:c2:bc:27:19:a0:ef:
         b9:86:c5:89:e6:a7:aa:6a:24:58:a9:d1:87:eb:2d:67:c9:b2:
         18:56:56:6d:86:f7:40:2c:52:8c:73:43:45:07:f0:2a:36:8a:
         90:f7:38:71:9f:fd:d1:88:7e:07:1f:4e:89:a3:58:a7:df:d2:
         e0:d5:de:da:be:7d:28:ff:9e:16:20:0d:29:a6:12:28:52:78:
         72:b5:6c:30:ad:ef:af:57:03:65:af:34:f6:3b:d4:a4:49:26:
         e3:a2:0d:2a:0f:f8:28:49:f4:d8:56:26:12:d4:02:22:26:55:
         cb:9a:8e:a9:d3:e6:ab:7b:a5:e5:cb:aa:62:64:06:f8:6b:07:
         07:a9:8f:bd:a9:ab:51:7d:0c:f2:5b:94:f6:a9:1d:04:dd:a1:
         87:40:0d:33:42:bf:ec:c2:39:b4:91:eb:f5:91:21:89:ed:af:
         9a:ef:79:69:1c:36:3d:67:c5:8c:59:29:8c:69:8c:78:37:19:
         1e:f3:69:9f:4f:65:ec:47:a0:aa:3d:07:09:37:a1:60:8a:1f:
         f1:00:f3:6e:ab:3f:2b:58:4c:1c:a3:24:b1:53:a5:ca:c0:d1:
         e5:79:7f:38:83:75:a7:66:a2:13:5f:4b:b9:cd:e1:13:63:5d:
         0f:1f:88:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMLPAVxd0fXfTUZvZhnBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZThkNGNiOGU0NDJlYzM4YTZiYzNmYTQwMGEyYTUxN2Nl
ZTBkMWUwHhcNMjYwNjMwMTEwMTEyWhcNMjYwNzAxMTEwMTEyWjAzMTEwLwYDVQQD
Eyg4YzQ0ZGJhMGJiZGJmNzBkMmM2ZDJlMDllNTg0MjFjYTYxMTE3MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotki0n0wGWisCwRwmdufkAa8eHIZ
tcRnVkMPctr1SY7cqs3OzdGAabGSwnWhktE2TCr3LYOOfutXZNXVLhcmZVQHg79v
UuJyGzQAU7ol3HjmB/JFXSqiZR5bfhRMO74qZm0Sh7g3u/evXMJs8ZkFqbsqiCSD
LngSk4cWIym5vjppPWUXg16ey8Eiyl3xwpluqnaSJSlusUkaVR3rPcVETKcIp5kU
NX211NMsCl3HSOc80nai+a2PvZEpsH9jQuZNkpfIIpyLfcWimQZrI6QkkPXPtrW8
TliNqxalGRTEZ3byBvPO+j7N+a1zUaeMGn4WdiIVPwUiaHDBu5aXftAEQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxE26C72/cNLG0uCeWEIcphEXD4MB8GA1UdIwQY
MBaAFNPo1MuORC7DimvD+kAKKlF87g0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYt
NWQ1ODcxMWYzNjYyLzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYtNWQ1ODcxMWYzNjYy
LzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzjc8/mpC
CNpgPq07wrwnGaDvuYbFieanqmokWKnRh+stZ8myGFZWbYb3QCxSjHNDRQfwKjaK
kPc4cZ/90Yh+Bx9OiaNYp9/S4NXe2r59KP+eFiANKaYSKFJ4crVsMK3vr1cDZa80
9jvUpEkm46INKg/4KEn02FYmEtQCIiZVy5qOqdPmq3ul5cuqYmQG+GsHB6mPvamr
UX0M8luU9qkdBN2hh0ANM0K/7MI5tJHr9ZEhie2vmu95aRw2PWfFjFkpjGmMeDcZ
HvNpn09l7Eegqj0HCTehYIof8QDzbqs/K1hMHKMksVOlysDR5Xl/OIN1p2aiE19L
uc3hE2NdDx+I1Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:05 2026 by rpki-client