Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File:                     8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier:          +Q63e5eTK2iokOg3+W1fmYR8ta2B+CE3+BbZer8pMB8=
Subject key identifier:   8D:5E:B0:62:34:DE:FE:85:51:77:DD:D9:A1:65:F5:AD:DB:8D:F5:F4
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer:       /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial:       019EBEED5406A773AC3DA2C4F442BB8AA290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number:          08F1
Signing time:             Sat 13 Jun 2026 03:01:24 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:24 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:24 +0000
Files and hashes:         1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: cyqhgxTzZddMjoNIYGVjkhS8CKI5pyIswnUcjeP3UcM=)
                          2: y_SCanDgj_MM1S_IDo64t6KWr_s.roa (hash: c0z1Y3wg26X0Siv87LHdyGq71I3TjKiIOT/D8Eaa0Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:54:06:a7:73:ac:3d:a2:c4:f4:42:bb:8a:a2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
        Validity
            Not Before: Jun 13 03:01:24 2026 GMT
            Not After : Jun 14 03:01:24 2026 GMT
        Subject: CN=8d5eb06234defe855177ddd9a165f5addb8df5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:d7:d9:c0:80:e4:c4:a7:c9:8c:7c:4d:14:
                    d1:b3:8e:73:7e:38:27:fd:d8:90:99:47:7c:6d:9d:
                    ad:cc:b8:fd:45:75:a5:09:0c:10:a8:9e:23:3c:5a:
                    36:9b:01:d7:63:f4:f3:cc:85:21:9e:48:be:7f:52:
                    03:d8:a6:63:35:1f:9d:03:85:3e:1d:67:80:cc:6e:
                    05:48:a0:8e:04:87:5e:db:5a:c5:ee:c4:9c:97:1c:
                    e9:eb:24:a5:77:c9:ae:db:a1:13:a1:6b:fc:52:96:
                    f5:7d:e5:0b:0d:ff:fe:69:8f:79:05:f3:2a:b8:ff:
                    3b:31:7c:d0:ce:86:5c:cc:94:0c:5a:5b:a5:e9:d5:
                    53:ae:46:63:f6:ae:e6:43:2d:50:63:e4:02:a1:38:
                    8d:67:9d:af:8a:de:cb:cf:13:75:06:d0:4f:17:e2:
                    6e:4c:d2:16:65:e5:19:95:84:c3:9a:a3:f7:24:1d:
                    8a:e3:c8:4b:eb:0d:bd:fc:e1:a7:48:1a:0b:c1:ca:
                    78:bf:88:e5:e4:dd:60:09:bc:6e:3f:e5:8d:79:c8:
                    fd:eb:13:f4:1a:d7:24:0b:59:5f:9e:33:ab:43:c5:
                    93:d2:97:4c:3a:aa:19:c3:5a:4c:23:2e:2c:58:ef:
                    c9:6c:0e:25:7b:b3:b7:91:14:6a:06:6d:c5:46:76:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5E:B0:62:34:DE:FE:85:51:77:DD:D9:A1:65:F5:AD:DB:8D:F5:F4
            X509v3 Authority Key Identifier:
                keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:e5:b9:48:21:f1:c1:d0:0a:a5:63:aa:1a:0d:f3:93:70:
         e2:95:08:54:6b:3f:29:29:2a:13:fe:1a:0e:9d:59:c7:a4:90:
         fc:e6:c0:a5:3f:98:be:ec:b1:46:fc:dc:8a:7a:f7:2e:24:3e:
         19:e3:80:a6:98:ac:b8:df:15:e8:b3:44:d1:60:9a:1f:fa:9f:
         4a:0c:1f:66:bb:3f:0e:14:1a:6d:59:e0:81:ef:be:03:e1:e2:
         bf:b5:42:d4:16:17:5a:41:1e:d0:99:04:e6:54:67:da:b4:d8:
         4d:15:72:9d:dd:f3:b8:6f:4d:c7:6b:a6:4c:19:13:92:b7:65:
         16:af:d6:c9:97:52:0b:6d:fb:87:0c:d7:9d:e1:2a:4e:2f:5f:
         98:d3:05:eb:e0:96:3b:d9:d4:0f:e3:7a:01:c0:d7:6a:92:f2:
         37:20:57:49:6c:3e:00:0c:83:df:a5:e1:5f:72:aa:3b:2e:e1:
         eb:3b:29:88:38:c5:e7:cf:0a:68:69:c2:03:73:fd:43:a2:2b:
         f2:39:d0:68:a1:a9:a5:ba:e4:16:1e:5c:38:59:69:09:32:6d:
         86:8c:f6:07:bd:97:eb:8f:6a:71:9a:5d:de:df:52:1c:95:00:
         8e:a3:35:c8:e0:94:a1:16:b1:a4:e2:9e:c9:14:a3:e0:9c:84:
         d4:93:3d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:28 2026 by rpki-client