Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File:                     8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier:          s5xQWGSHYVDKFn5kJ+w7iBjDLm+KCS6LF2a/1nYCwIg=
Subject key identifier:   0F:D0:AD:3A:EB:7A:31:A7:4B:1F:C7:38:24:48:E9:A6:BA:0B:2C:0D
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer:       /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial:       019EBF9115CC59837C63989B38A65114DB2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 06:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:17 +0000
Files and hashes:         1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: vHrQQ+tY8qWmlZDjFG8ATt1vbnBsmuIkD2gi7U9PwmM=)
                          2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:15:cc:59:83:7c:63:98:9b:38:a6:51:14:db:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
        Validity
            Not Before: Jun 13 06:00:17 2026 GMT
            Not After : Jun 14 06:00:17 2026 GMT
        Subject: CN=0fd0ad3aeb7a31a74b1fc7382448e9a6ba0b2c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:ad:fe:4e:8b:c0:32:43:63:e3:3c:17:93:
                    bc:08:8b:6a:25:7d:84:b9:3e:a3:11:1b:5a:a9:9c:
                    43:31:08:2f:5a:86:90:81:78:7d:85:69:2e:02:6b:
                    7a:a5:31:18:ba:92:ca:54:2b:bd:a0:27:f5:8d:62:
                    87:2e:35:e8:1a:22:97:9d:2c:b9:b3:62:2b:d2:75:
                    f8:8f:4f:6f:0c:db:8f:3c:81:84:17:c8:af:0c:86:
                    00:6d:18:66:68:8a:3a:7f:88:a9:4a:06:85:28:8d:
                    0d:f1:83:3d:ec:74:e5:e9:e9:1a:9c:66:a1:ae:31:
                    34:a9:b3:bd:3d:26:b7:79:0e:0b:01:01:f8:87:b1:
                    5e:16:a3:7a:47:99:36:9d:33:bc:8e:31:e1:e7:01:
                    b7:62:fd:6d:e4:9e:e6:e9:52:10:35:69:f0:6e:4d:
                    64:98:d6:05:56:f2:8b:3b:28:7b:40:84:e5:bf:ac:
                    b7:27:16:25:ea:a0:ca:7f:7c:94:b0:8b:31:a0:0c:
                    d3:70:1d:46:6a:d6:74:3f:9f:7b:fa:fa:e5:f3:c8:
                    ea:8a:fa:f3:c7:9c:dd:8f:08:89:ab:75:38:cb:39:
                    83:c8:72:89:52:92:66:94:3a:f4:c9:24:6a:51:3f:
                    9b:66:e1:4f:ff:95:b1:38:5e:ab:b1:a1:32:61:db:
                    4e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:AD:3A:EB:7A:31:A7:4B:1F:C7:38:24:48:E9:A6:BA:0B:2C:0D
            X509v3 Authority Key Identifier:
                keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6f:50:54:2f:ae:38:44:c1:ea:1b:f4:49:0b:96:7d:85:4a:
         83:e5:28:b2:44:78:40:15:68:f2:7b:e4:61:6c:a4:5e:c6:5c:
         d5:64:44:d1:f7:e1:54:06:fa:79:80:d6:23:e0:2a:00:0f:5f:
         79:74:95:e0:b4:8e:b6:97:fa:dd:53:5d:63:18:90:a8:36:23:
         3d:07:cf:a0:b6:bb:79:23:e7:96:e8:93:f0:00:76:37:89:44:
         3b:43:d8:87:38:16:8d:01:66:ff:03:ab:23:c6:a0:2a:34:ce:
         68:b1:2b:79:1b:de:4a:d4:1e:f1:a3:a3:c7:40:ed:80:3a:48:
         2e:4a:7e:a8:59:00:64:6c:90:fd:34:46:da:1f:6d:43:27:1b:
         99:b7:05:9f:7f:bb:94:b7:1c:6a:0b:75:d0:5a:62:cf:cd:3a:
         d7:5e:d7:7f:a7:46:18:3a:aa:c9:b4:e4:02:d6:5a:0d:c9:d5:
         07:90:82:6f:46:f9:df:55:4b:e1:16:af:9f:c5:41:d4:57:0a:
         89:ae:bd:d7:34:85:59:f6:db:cf:33:89:4b:a6:64:ae:8a:b6:
         68:d7:c4:56:c8:17:97:26:96:d6:41:c1:92:dc:70:c9:44:17:
         49:40:b2:45:ee:12:b4:43:04:ed:19:02:70:c2:97:52:34:c2:
         3f:63:7c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kRXMWYN8Y5ibOKZRFNsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi
ZDZmNzYwHhcNMjYwNjEzMDYwMDE3WhcNMjYwNjE0MDYwMDE3WjAzMTEwLwYDVQQD
EygwZmQwYWQzYWViN2EzMWE3NGIxZmM3MzgyNDQ4ZTlhNmJhMGIyYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN+t/k6LwDJDY+M8F5O8CItqJX2E
uT6jERtaqZxDMQgvWoaQgXh9hWkuAmt6pTEYupLKVCu9oCf1jWKHLjXoGiKXnSy5
s2Ir0nX4j09vDNuPPIGEF8ivDIYAbRhmaIo6f4ipSgaFKI0N8YM97HTl6ekanGah
rjE0qbO9PSa3eQ4LAQH4h7FeFqN6R5k2nTO8jjHh5wG3Yv1t5J7m6VIQNWnwbk1k
mNYFVvKLOyh7QITlv6y3JxYl6qDKf3yUsIsxoAzTcB1GatZ0P597+vrl88jqivrz
x5zdjwiJq3U4yzmDyHKJUpJmlDr0ySRqUT+bZuFP/5WxOF6rsaEyYdtOvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/QrTrrejGnSx/HOCRI6aa6CywNMB8GA1UdIwQY
MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt
YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli
LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAem9QVC+u
OETB6hv0SQuWfYVKg+UoskR4QBVo8nvkYWykXsZc1WRE0ffhVAb6eYDWI+AqAA9f
eXSV4LSOtpf63VNdYxiQqDYjPQfPoLa7eSPnluiT8AB2N4lEO0PYhzgWjQFm/wOr
I8agKjTOaLEreRveStQe8aOjx0DtgDpILkp+qFkAZGyQ/TRG2h9tQycbmbcFn3+7
lLccagt10Fpiz806117Xf6dGGDqqybTkAtZaDcnVB5CCb0b531VL4Ravn8VB1FcK
ia691zSFWfbbzzOJS6Zkroq2aNfEVsgXlyaW1kHBktxwyUQXSUCyRe4StEME7RkC
cMKXUjTCP2N8Tg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:03 2026 by rpki-client