Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File:                     iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier:          tLDKP6OGQjqGyug44IWxs9aOCjTkkkJcwNwGCv4tR48=
Subject key identifier:   DA:19:27:74:D3:CC:0B:D1:7A:79:E4:30:31:9C:B0:48:0F:E1:8B:7B
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer:       /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial:       019EC2C9E4B395231840A0A89A9C7F7AD65E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number:          03C8
Signing time:             Sat 13 Jun 2026 21:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:11 +0000
Files and hashes:         1: 6r3WitD5t2IivvY6IDcPBOiQM5A.roa (hash: CFw3h/ZlDOXkd/OBoKFI2OoDPkqdMMoJSEOGE9GM7e4=)
                          2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: SuZ3XGI3XavG8wcEVvgUsWR03PCIViAKVLN+JKF/eQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:e4:b3:95:23:18:40:a0:a8:9a:9c:7f:7a:d6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
        Validity
            Not Before: Jun 13 21:01:11 2026 GMT
            Not After : Jun 14 21:01:11 2026 GMT
        Subject: CN=da192774d3cc0bd17a79e430319cb0480fe18b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:26:40:c2:a1:28:b5:4e:65:f7:f4:66:66:
                    bb:45:8b:11:fe:bb:86:4f:7e:60:a2:9f:1e:13:88:
                    bf:a0:24:f7:a4:7f:87:c2:2d:17:89:78:52:ce:a4:
                    c5:76:c3:17:5d:57:e6:f0:97:58:a7:25:11:01:97:
                    9b:ce:c2:8a:a5:04:a1:89:07:cc:35:0a:0a:8a:76:
                    d9:ef:34:f9:cc:c0:4d:13:2e:d2:2a:3e:33:95:9c:
                    c4:bf:8a:ca:49:b6:c6:2e:6d:ef:ba:2c:8d:5c:58:
                    7a:92:8d:82:79:17:ff:5b:3f:e5:94:a8:24:70:7e:
                    33:b2:16:64:4b:55:87:40:db:d6:ef:95:e2:35:e1:
                    b6:1d:1f:06:d7:33:c3:d1:65:6d:b3:80:92:69:28:
                    ea:4c:2d:73:97:0d:33:f8:c5:7a:ba:b6:36:46:f6:
                    db:3e:70:8c:65:c4:34:4f:c9:97:01:ce:b2:21:62:
                    42:17:fa:51:76:2d:6f:ee:99:72:10:fe:c4:67:44:
                    96:23:36:c0:52:7f:69:22:7e:5c:6a:18:d9:ed:48:
                    cc:05:f2:48:ca:90:53:3e:a6:ce:9d:0f:d0:77:f3:
                    b0:1a:9e:59:39:a4:13:8e:63:3f:a2:b1:99:4e:82:
                    4f:35:35:e9:ed:2f:3e:60:bc:b9:e2:f4:98:18:9b:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:19:27:74:D3:CC:0B:D1:7A:79:E4:30:31:9C:B0:48:0F:E1:8B:7B
            X509v3 Authority Key Identifier:
                keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:04:36:c7:e4:55:6f:02:b2:d8:bd:09:58:35:5c:0b:f9:
         30:d8:f8:ab:a6:df:7f:e1:5c:9e:bb:12:22:a2:9f:34:af:32:
         2f:2c:55:1f:1c:b0:7f:9c:4e:5f:71:04:78:71:c8:13:65:fa:
         5e:a4:14:86:2d:a4:f7:4d:77:7b:86:f4:db:82:9c:90:26:de:
         e5:28:60:6a:b9:ff:10:7e:e0:9c:66:e3:d5:23:fa:3d:6e:d8:
         34:70:9e:0a:7a:65:8d:da:f1:56:e8:29:38:4e:b8:16:b0:9f:
         16:cc:a2:00:50:a6:15:2e:00:10:f2:9d:ea:01:a0:12:af:00:
         65:78:dd:39:6b:12:1c:17:45:64:90:93:e7:f1:1c:84:e1:95:
         d8:70:94:7a:ea:b1:24:38:be:68:72:1b:d7:22:e3:70:c3:46:
         2f:b1:ab:c7:60:14:0a:10:ad:20:63:e1:3e:bb:12:6f:d6:19:
         23:c1:89:15:4a:da:2d:83:af:1b:93:25:5c:5f:6d:d6:78:c5:
         30:04:34:4a:71:8a:80:55:98:4e:63:f5:3e:e2:28:bd:7f:a8:
         c3:13:a0:45:5f:7f:c5:1e:87:7c:33:e2:94:b6:f7:23:da:4f:
         b3:5c:72:b6:c4:3f:e6:f3:78:5e:52:2f:78:92:c1:77:e2:b0:
         80:86:db:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyeSzlSMYQKCompx/etZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MmYzZmYzYzBhMWZmYjNhZjIwZjViOTVlOGNiNjRjODgw
NDNmMzkwHhcNMjYwNjEzMjEwMTExWhcNMjYwNjE0MjEwMTExWjAzMTEwLwYDVQQD
EyhkYTE5Mjc3NGQzY2MwYmQxN2E3OWU0MzAzMTljYjA0ODBmZTE4YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIUmQMKhKLVOZff0Zma7RYsR/ruG
T35gop8eE4i/oCT3pH+Hwi0XiXhSzqTFdsMXXVfm8JdYpyURAZebzsKKpQShiQfM
NQoKinbZ7zT5zMBNEy7SKj4zlZzEv4rKSbbGLm3vuiyNXFh6ko2CeRf/Wz/llKgk
cH4zshZkS1WHQNvW75XiNeG2HR8G1zPD0WVts4CSaSjqTC1zlw0z+MV6urY2Rvbb
PnCMZcQ0T8mXAc6yIWJCF/pRdi1v7plyEP7EZ0SWIzbAUn9pIn5cahjZ7UjMBfJI
ypBTPqbOnQ/Qd/OwGp5ZOaQTjmM/orGZToJPNTXp7S8+YLy54vSYGJvCQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoZJ3TTzAvRennkMDGcsEgP4Yt7MB8GA1UdIwQY
MBaAFIkvP/PAof+zryD1uV6MtkyIBD85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQt
ZjkyMWRiNzViZGY5LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQtZjkyMWRiNzViZGY5
LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjokENsfk
VW8Csti9CVg1XAv5MNj4q6bff+FcnrsSIqKfNK8yLyxVHxywf5xOX3EEeHHIE2X6
XqQUhi2k9013e4b024KckCbe5Shgarn/EH7gnGbj1SP6PW7YNHCeCnpljdrxVugp
OE64FrCfFsyiAFCmFS4AEPKd6gGgEq8AZXjdOWsSHBdFZJCT5/EchOGV2HCUeuqx
JDi+aHIb1yLjcMNGL7Grx2AUChCtIGPhPrsSb9YZI8GJFUraLYOvG5MlXF9t1njF
MAQ0SnGKgFWYTmP1PuIovX+owxOgRV9/xR6HfDPilLb3I9pPs1xytsQ/5vN4XlIv
eJLBd+KwgIbbJw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:05 2026 by rpki-client