Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File:                     Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier:          6HhF9NqlCxnaeRtAyJdgsrnu25BnBocfCMQLAnXO/Fk=
Subject key identifier:   C2:CE:CE:23:09:65:10:50:B4:7B:3C:CD:F5:30:9A:CE:D9:B4:C8:15
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer:       /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial:       019EC0A3B01B476BCC59BFFD0AAAA8C46925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number:          18A2
Signing time:             Sat 13 Jun 2026 11:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:13 +0000
Files and hashes:         1: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: mf8/kLSnji0cgzwKmr06ExhlKlb9ryMgqRS1/27kKlg=)
                          2: HvJoh_J563JWnIBpkcZqWaGiBuw.roa (hash: 5EmXJWWwzgqHx3fgQLLAjtkhJ90g8NJqu27jUl1kKhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:b0:1b:47:6b:cc:59:bf:fd:0a:aa:a8:c4:69:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
        Validity
            Not Before: Jun 13 11:00:13 2026 GMT
            Not After : Jun 14 11:00:13 2026 GMT
        Subject: CN=c2cece2309651050b47b3ccdf5309aced9b4c815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:49:3c:ea:16:9b:cd:2e:27:3e:5f:87:95:
                    1f:72:ca:a7:29:f8:ac:0c:bd:71:89:82:2d:df:96:
                    c4:b6:33:08:0c:3b:c4:70:95:bf:68:ca:61:e0:0d:
                    cd:40:2b:61:df:40:e8:79:61:8e:bb:24:5f:51:5f:
                    26:1d:34:3e:26:45:91:21:c0:fe:d6:4c:c4:62:80:
                    2a:c5:dd:21:14:3f:87:aa:92:18:06:ae:4b:ee:af:
                    ad:f5:60:35:b2:6d:8d:4d:b9:5a:2f:af:46:1f:20:
                    38:a6:ce:8f:5b:94:3f:8b:72:46:bf:b4:d4:f4:ef:
                    e1:6a:ff:90:8b:8f:ed:03:74:f3:50:91:0c:ba:7c:
                    57:a0:65:0a:aa:a3:3c:f3:fd:47:17:b2:77:d2:e3:
                    dc:7b:f4:bd:9d:1d:cd:12:cc:95:91:aa:69:91:da:
                    c9:e1:f5:b4:0c:1b:2a:88:6d:af:a4:0a:b2:63:ab:
                    12:1c:df:5d:6a:63:82:9a:a8:d0:4b:ec:c4:d4:4f:
                    30:72:d3:44:25:c6:bf:54:47:80:0d:d8:67:b6:0e:
                    35:6d:c7:71:fa:cf:99:af:58:0f:65:a6:01:0f:aa:
                    23:c1:86:0d:10:ca:03:96:5b:b6:c3:f1:db:39:dc:
                    37:4f:f0:0a:cd:48:83:4a:58:61:bc:55:41:35:03:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:CE:23:09:65:10:50:B4:7B:3C:CD:F5:30:9A:CE:D9:B4:C8:15
            X509v3 Authority Key Identifier:
                keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:b8:bf:1b:88:2e:ac:00:86:47:6d:a5:b4:2b:17:c7:28:
         14:fe:2c:6c:b0:56:44:9c:02:55:0d:dd:35:28:1d:80:5e:bc:
         58:a2:e6:c1:33:48:55:a3:21:7d:3a:e5:b1:ce:df:18:08:e1:
         e2:83:e8:67:ca:d6:3d:17:9e:83:c8:73:23:a0:e1:0a:a1:f5:
         fe:d1:c6:18:15:46:e6:2e:5c:43:fc:37:6a:17:25:63:88:54:
         b9:1c:07:c3:1d:f5:29:c9:a1:bb:8d:a3:15:5f:4b:bf:72:64:
         bd:bd:c2:a5:39:b9:d0:e0:5b:fe:6e:7c:d6:98:5e:66:1b:32:
         b5:a2:a7:9e:87:72:90:23:e5:ec:c8:80:30:8d:80:86:d0:b8:
         13:b7:95:7a:5f:a0:c2:6b:be:15:84:23:88:97:9f:4a:8c:dd:
         f8:52:d9:f4:58:17:0a:da:30:b6:5a:91:d2:d3:4d:02:0f:d9:
         c6:d5:44:34:54:5b:81:18:36:8c:b3:c5:61:cd:c7:78:81:2d:
         8d:83:92:4c:e4:0f:ec:31:ab:c2:58:e1:46:f2:c0:96:2c:3a:
         d4:21:9b:47:50:61:af:40:c0:ea:88:71:4a:df:98:fb:2d:3d:
         44:44:64:6e:cf:55:14:26:14:00:ca:9f:44:47:ea:7d:b1:a7:
         86:b0:08:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao7AbR2vMWb/9CqqoxGklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3
MzZhZTgwHhcNMjYwNjEzMTEwMDEzWhcNMjYwNjE0MTEwMDEzWjAzMTEwLwYDVQQD
EyhjMmNlY2UyMzA5NjUxMDUwYjQ3YjNjY2RmNTMwOWFjZWQ5YjRjODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutlJPOoWm80uJz5fh5UfcsqnKfis
DL1xiYIt35bEtjMIDDvEcJW/aMph4A3NQCth30DoeWGOuyRfUV8mHTQ+JkWRIcD+
1kzEYoAqxd0hFD+HqpIYBq5L7q+t9WA1sm2NTblaL69GHyA4ps6PW5Q/i3JGv7TU
9O/hav+Qi4/tA3TzUJEMunxXoGUKqqM88/1HF7J30uPce/S9nR3NEsyVkappkdrJ
4fW0DBsqiG2vpAqyY6sSHN9damOCmqjQS+zE1E8wctNEJca/VEeADdhntg41bcdx
+s+Zr1gPZaYBD6ojwYYNEMoDllu2w/HbOdw3T/AKzUiDSlhhvFVBNQMPsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLOziMJZRBQtHs8zfUwms7ZtMgVMB8GA1UdIwQY
MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt
Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0
LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCG4vxuI
LqwAhkdtpbQrF8coFP4sbLBWRJwCVQ3dNSgdgF68WKLmwTNIVaMhfTrlsc7fGAjh
4oPoZ8rWPReeg8hzI6DhCqH1/tHGGBVG5i5cQ/w3ahclY4hUuRwHwx31Kcmhu42j
FV9Lv3Jkvb3CpTm50OBb/m581pheZhsytaKnnodykCPl7MiAMI2AhtC4E7eVel+g
wmu+FYQjiJefSozd+FLZ9FgXCtowtlqR0tNNAg/ZxtVENFRbgRg2jLPFYc3HeIEt
jYOSTOQP7DGrwljhRvLAliw61CGbR1Bhr0DA6ohxSt+Y+y09RERkbs9VFCYUAMqf
REfqfbGnhrAIFA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:41:23 2026 by rpki-client