Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File:                     jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier:          8t1Tbq70/tTS7R7RjcBZHn0uhzF/ltKW+xVWXC/G8qA=
Subject key identifier:   3F:7C:3A:EE:F4:A5:DB:D4:58:01:10:0C:29:42:74:65:46:35:A0:98
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer:       /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial:       019EBE10A8C372DBBCC9704C241340C859FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number:          0D4D
Signing time:             Fri 12 Jun 2026 23:00:23 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:23 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:23 +0000
Files and hashes:         1: 46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa (hash: cjg8FehaVwYpVxS8eMe+m9njoOgOCXMZ/KMVF3PXYLk=)
                          2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: fapcEgYCd4TYjGeJZ44RpK8YEeAJo+pCvmwXLqmJlvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:a8:c3:72:db:bc:c9:70:4c:24:13:40:c8:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
        Validity
            Not Before: Jun 12 23:00:23 2026 GMT
            Not After : Jun 13 23:00:23 2026 GMT
        Subject: CN=3f7c3aeef4a5dbd45801100c294274654635a098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:aa:92:d8:af:36:73:f7:90:ca:4f:1e:53:70:
                    e9:d2:a2:b6:00:ac:8c:fa:d3:92:9c:1f:06:aa:ac:
                    d2:d4:01:17:68:81:67:76:4a:9c:51:dc:b6:86:d0:
                    c5:ef:4a:ec:e8:5f:aa:3f:e3:c8:81:65:34:ba:89:
                    5d:f5:f8:32:d4:7d:ee:f0:c5:49:33:10:be:36:97:
                    5c:6c:03:b2:34:93:d2:96:79:a1:75:f4:9c:e2:dc:
                    71:4a:51:86:0d:a4:9f:a6:9f:73:92:f7:3d:0d:cb:
                    42:fa:59:86:b7:77:15:17:d7:35:1b:23:08:c5:28:
                    38:6b:b4:24:ab:fb:e9:dd:a7:15:cc:b5:0d:e4:df:
                    8d:80:44:09:df:06:e7:a6:d8:8c:72:2a:34:53:3f:
                    d1:33:94:56:aa:f7:39:68:bf:b7:0a:85:2a:bf:1d:
                    71:e2:41:be:f6:b4:90:9e:27:a6:b4:04:dc:8d:95:
                    a7:15:72:4c:fd:93:44:05:7a:86:1b:ce:fa:36:6d:
                    07:bf:1c:65:3e:47:57:11:13:3f:f6:c4:af:a5:85:
                    c3:5b:e5:35:a0:45:4b:de:9b:bd:78:ea:d5:d3:06:
                    30:a4:dc:3c:51:f5:ea:dc:5a:cc:59:9c:b4:c4:e8:
                    07:0a:14:90:dc:cc:de:2a:4d:90:92:52:6b:1c:42:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7C:3A:EE:F4:A5:DB:D4:58:01:10:0C:29:42:74:65:46:35:A0:98
            X509v3 Authority Key Identifier:
                keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:a2:82:89:75:68:ef:5f:67:00:91:85:86:89:f4:fb:6b:
         b0:03:4c:5c:53:43:80:30:c2:b9:0a:2a:7c:c8:8c:bc:f6:a5:
         b2:ab:a1:00:9c:18:24:f4:b4:a4:f6:0e:14:ac:1a:d9:0c:30:
         5a:cd:7e:0a:96:b9:42:dd:06:e6:47:55:00:b0:15:0d:ee:46:
         ce:49:eb:62:8e:8a:eb:8a:e5:d5:7e:93:89:3b:5c:4c:c1:cf:
         fa:b3:95:c7:58:45:12:a9:66:92:bb:71:d0:aa:46:8d:ad:2a:
         0d:1d:2f:43:31:01:e9:6f:01:1d:8d:25:0d:25:31:18:ed:e3:
         e2:a4:3b:e3:40:ba:0f:e0:5a:4f:23:9c:c6:f1:3c:a6:0f:d3:
         bb:3b:dc:8f:46:01:33:4e:94:1c:f7:9f:17:64:0a:f3:80:86:
         bc:c2:ab:3c:58:c6:a8:4e:10:e3:8e:1c:00:7c:42:0b:4a:b1:
         e2:2c:c6:0f:31:d6:7f:7d:49:03:c6:fc:76:24:07:a4:12:f7:
         9f:15:84:db:93:6b:35:03:ea:28:ee:ee:a2:5c:e6:f6:75:96:
         1d:d0:23:64:ae:6e:8a:82:71:bc:10:53:a1:4c:71:ba:3d:b6:
         15:fb:c2:ea:b7:35:63:6b:47:85:52:5c:fe:e7:1a:45:f6:b8:
         97:e2:58:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EKjDctu8yXBMJBNAyFn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMWU3MjBmZDc1ZGQ2MDEzNDViOTg3NmFlYTdmOTFhYjQ0
NmQ0N2YwHhcNMjYwNjEyMjMwMDIzWhcNMjYwNjEzMjMwMDIzWjAzMTEwLwYDVQQD
EygzZjdjM2FlZWY0YTVkYmQ0NTgwMTEwMGMyOTQyNzQ2NTQ2MzVhMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KqS2K82c/eQyk8eU3Dp0qK2AKyM
+tOSnB8GqqzS1AEXaIFndkqcUdy2htDF70rs6F+qP+PIgWU0uold9fgy1H3u8MVJ
MxC+NpdcbAOyNJPSlnmhdfSc4txxSlGGDaSfpp9zkvc9DctC+lmGt3cVF9c1GyMI
xSg4a7Qkq/vp3acVzLUN5N+NgEQJ3wbnptiMcio0Uz/RM5RWqvc5aL+3CoUqvx1x
4kG+9rSQniemtATcjZWnFXJM/ZNEBXqGG876Nm0HvxxlPkdXERM/9sSvpYXDW+U1
oEVL3pu9eOrV0wYwpNw8UfXq3FrMWZy0xOgHChSQ3MzeKk2QklJrHEI/6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD98Ou70pdvUWAEQDClCdGVGNaCYMB8GA1UdIwQY
MBaAFIwecg/XXdYBNFuYdq6n+Rq0RtR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYt
NDkxZmU3YWNjMWE5LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYtNDkxZmU3YWNjMWE5
LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPg6igol1
aO9fZwCRhYaJ9PtrsANMXFNDgDDCuQoqfMiMvPalsquhAJwYJPS0pPYOFKwa2Qww
Ws1+Cpa5Qt0G5kdVALAVDe5GzknrYo6K64rl1X6TiTtcTMHP+rOVx1hFEqlmkrtx
0KpGja0qDR0vQzEB6W8BHY0lDSUxGO3j4qQ740C6D+BaTyOcxvE8pg/Tuzvcj0YB
M06UHPefF2QK84CGvMKrPFjGqE4Q444cAHxCC0qx4izGDzHWf31JA8b8diQHpBL3
nxWE25NrNQPqKO7uolzm9nWWHdAjZK5uioJxvBBToUxxuj22FfvC6rc1Y2tHhVJc
/ucaRfa4l+JY6w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:13 2026 by rpki-client