Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File:                     8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier:          n0w7iUtV6qdHkSADS4zONyB3fqSKtTcu2NB4OOcm9x4=
Subject key identifier:   E5:84:1C:3D:96:5A:8D:0B:77:86:CA:23:6E:EF:E5:14:CF:4E:F6:E2
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer:       /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial:       019EBF2372D77EA204712A31F930CC858577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 04:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:31 +0000
Files and hashes:         1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: PgapA+kArIZ5QScO0NLf2Du9pn+I/L2UkreiBwdB0BI=)
                          2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:72:d7:7e:a2:04:71:2a:31:f9:30:cc:85:85:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
        Validity
            Not Before: Jun 13 04:00:31 2026 GMT
            Not After : Jun 14 04:00:31 2026 GMT
        Subject: CN=e5841c3d965a8d0b7786ca236eefe514cf4ef6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:0c:53:dd:ad:ab:5a:10:f1:3f:a7:03:b4:
                    87:5d:c4:12:4e:ab:28:be:ad:f1:7b:95:d8:8d:d5:
                    ec:92:b9:f8:68:e8:01:3f:c4:96:6e:1c:ab:20:49:
                    3e:e0:bd:f0:b8:41:b2:6e:ff:9f:95:42:af:0b:27:
                    e7:8b:dd:4c:b5:6f:f7:48:94:cd:b2:31:29:32:5f:
                    ca:9f:fc:24:b7:dd:24:62:69:5e:a1:0e:33:d2:f8:
                    5d:a9:d4:5e:5a:cc:2f:3f:60:fc:ff:ac:14:37:0e:
                    74:fe:d2:cf:af:41:00:3b:ec:fd:83:c5:c3:b1:56:
                    82:26:58:ba:40:f8:73:1f:cc:0e:8e:82:0c:4d:85:
                    f0:37:76:f1:79:a1:39:2d:13:24:f7:85:18:cf:34:
                    5e:15:a3:06:b8:b4:dc:fe:11:0f:d8:38:b9:fe:0d:
                    14:81:6f:07:9f:e7:cd:ca:e3:6b:00:7e:94:68:e7:
                    56:7e:a1:b0:64:bd:6d:dd:e3:19:be:53:0f:a0:18:
                    0f:51:fc:87:df:8b:24:65:c4:bd:7a:20:f0:c5:3a:
                    86:f0:60:3c:c3:e4:c7:2a:91:c9:5f:e7:a0:7a:d2:
                    88:15:b0:af:09:e3:11:e6:66:e8:08:e3:ca:82:2c:
                    87:56:fa:b0:8d:c9:16:49:cb:56:5f:39:a9:29:c7:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:84:1C:3D:96:5A:8D:0B:77:86:CA:23:6E:EF:E5:14:CF:4E:F6:E2
            X509v3 Authority Key Identifier:
                keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:af:f0:ec:6e:83:20:91:9c:1e:a2:ea:9a:c4:ed:12:78:f6:
         e5:18:39:d9:cf:ed:65:2f:44:d3:21:f9:c3:64:75:0b:57:f7:
         c3:19:a0:cf:24:eb:14:b3:d6:35:c6:f7:f7:4f:45:75:de:60:
         68:05:b9:d7:49:5f:09:b1:45:a2:22:17:19:cf:53:5d:bf:01:
         53:6f:7c:6c:34:d0:b4:f7:b3:a4:94:98:15:bb:58:70:1f:43:
         82:4d:6d:1f:b8:61:e3:e7:5d:ec:06:cb:8c:05:64:d3:4e:4e:
         9c:0c:8f:6b:89:5f:cc:04:78:55:31:f7:01:b2:2c:19:26:fd:
         73:bc:de:16:b3:ea:a5:db:c9:d0:a7:e6:13:a4:01:a9:19:87:
         a6:1c:62:4b:60:07:92:6e:9d:9a:dd:f5:5e:cf:66:2d:07:f4:
         54:59:b4:55:56:b6:41:ed:6f:67:94:57:e0:c5:9e:08:66:09:
         7c:e4:ef:23:ed:65:18:91:6e:15:ca:b2:43:b6:8d:9b:6d:bb:
         cd:2c:1e:e3:59:35:cf:3f:83:d8:b7:f9:51:f1:ab:33:bc:57:
         bb:97:c8:5f:8c:8a:42:57:a3:b3:f8:7b:ec:a0:db:46:c7:82:
         7f:d5:d3:1e:d3:a3:ec:cd:04:0f:d8:bb:86:ba:2b:92:d0:20:
         6f:b0:5a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I3LXfqIEcSox+TDMhYV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw
OGUyZTIwHhcNMjYwNjEzMDQwMDMxWhcNMjYwNjE0MDQwMDMxWjAzMTEwLwYDVQQD
EyhlNTg0MWMzZDk2NWE4ZDBiNzc4NmNhMjM2ZWVmZTUxNGNmNGVmNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA014MU92tq1oQ8T+nA7SHXcQSTqso
vq3xe5XYjdXskrn4aOgBP8SWbhyrIEk+4L3wuEGybv+flUKvCyfni91MtW/3SJTN
sjEpMl/Kn/wkt90kYmleoQ4z0vhdqdReWswvP2D8/6wUNw50/tLPr0EAO+z9g8XD
sVaCJli6QPhzH8wOjoIMTYXwN3bxeaE5LRMk94UYzzReFaMGuLTc/hEP2Di5/g0U
gW8Hn+fNyuNrAH6UaOdWfqGwZL1t3eMZvlMPoBgPUfyH34skZcS9eiDwxTqG8GA8
w+THKpHJX+egetKIFbCvCeMR5mboCOPKgiyHVvqwjckWSctWXzmpKcdkHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWEHD2WWo0Ld4bKI27v5RTPTvbiMB8GA1UdIwQY
MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt
YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4
LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAga/w7G6D
IJGcHqLqmsTtEnj25Rg52c/tZS9E0yH5w2R1C1f3wxmgzyTrFLPWNcb3909Fdd5g
aAW510lfCbFFoiIXGc9TXb8BU298bDTQtPezpJSYFbtYcB9Dgk1tH7hh4+dd7AbL
jAVk005OnAyPa4lfzAR4VTH3AbIsGSb9c7zeFrPqpdvJ0KfmE6QBqRmHphxiS2AH
km6dmt31Xs9mLQf0VFm0VVa2Qe1vZ5RX4MWeCGYJfOTvI+1lGJFuFcqyQ7aNm227
zSwe41k1zz+D2Lf5UfGrM7xXu5fIX4yKQlejs/h77KDbRseCf9XTHtOj7M0ED9i7
hrorktAgb7BaiA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:14 2026 by rpki-client