Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File:                     8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier:          UyKBAwjf6iOm+37s+5UXdAhAOWmeJnoRazU5ShEZ3iI=
Subject key identifier:   18:AB:76:0E:CE:C9:30:F1:7B:6E:68:72:6D:C4:DB:9E:8B:69:10:42
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer:       /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial:       019ED3BD5B3CC2ABA25251EE9DE767594D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number:          1969
Signing time:             Wed 17 Jun 2026 04:01:02 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:02 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:02 +0000
Files and hashes:         1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: 1uBfdDbYAdn1w57KZEalejxv/Bqk338fvQnnMwa1bZE=)
                          2: L7z1z3kD8b7F1K7aacc1gzUm6kI.roa (hash: D3CWLsb8k5BIPwmtHzd5EPsN02bvpYKIOpfirvWVx3E=)
                          3: UefnhI4rD4WdnFSP87tCcgYjugY.roa (hash: wX49sflwTEuHFD6MRKkajE1pPkRG+Oqz51HRQlhSsxs=)
                          4: lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa (hash: weF1SPmq8vuRk/u5oRHyuZvuVh74XYHXLM966wmgglw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:5b:3c:c2:ab:a2:52:51:ee:9d:e7:67:59:4d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
        Validity
            Not Before: Jun 17 04:01:02 2026 GMT
            Not After : Jun 18 04:01:02 2026 GMT
        Subject: CN=18ab760ecec930f17b6e68726dc4db9e8b691042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2a:86:cd:a6:ce:68:60:ab:cc:40:87:4f:ac:
                    4f:25:21:d4:f2:cd:e0:77:b7:bf:23:dd:4d:b0:96:
                    23:14:78:97:57:19:6d:21:37:de:12:f6:26:b8:e2:
                    9e:50:4c:6f:41:64:73:62:7b:0a:ea:10:48:04:a1:
                    b3:2b:dd:66:53:33:37:ea:15:c1:3e:5d:82:84:df:
                    0f:b7:89:a3:f5:99:31:0d:a9:fc:0f:c1:3f:ca:4b:
                    70:a1:2e:11:22:de:92:0d:c0:f9:99:c8:59:ca:ef:
                    e0:01:00:e1:2b:33:77:9b:56:b4:f2:b0:3f:8f:09:
                    ee:58:cc:e3:71:fe:f7:0b:d0:69:96:28:a6:81:a0:
                    4e:06:0d:d1:16:2b:e1:33:37:b5:04:19:40:a5:0f:
                    bb:cd:50:e4:de:d3:fb:34:f6:d9:15:44:41:92:c4:
                    33:5e:0b:ce:d4:32:1f:6e:61:aa:4f:18:f6:5c:7b:
                    6a:54:74:97:ec:c2:4b:51:78:8b:f5:a6:81:76:2e:
                    15:02:85:86:26:0e:47:94:7d:02:63:bd:cd:6c:ad:
                    59:09:59:85:5e:ec:df:e9:b1:e6:bc:4f:bb:6c:17:
                    32:c0:4a:ea:24:06:b3:05:f2:d3:7a:2d:53:cc:d8:
                    2d:39:95:a9:08:21:8b:af:cc:05:a5:1f:fd:fb:af:
                    b0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AB:76:0E:CE:C9:30:F1:7B:6E:68:72:6D:C4:DB:9E:8B:69:10:42
            X509v3 Authority Key Identifier:
                keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:0f:80:9b:86:c1:fe:57:86:f3:c0:9c:d3:76:bd:b4:6f:
         ab:d9:14:9c:40:07:14:e5:ce:5a:bf:86:ad:9c:52:20:08:3f:
         82:6e:7e:b3:93:86:ec:8c:01:45:8a:a3:00:6a:b2:fd:ac:db:
         84:df:3f:24:c4:75:e7:9c:2e:56:86:69:fc:43:7a:ae:e7:bd:
         04:64:d0:05:99:d1:4d:db:6d:da:7c:07:f0:81:8c:bd:d4:c1:
         0b:bc:c0:3c:89:82:8d:5e:4f:ac:b8:c5:b1:2e:f3:ff:79:33:
         29:c9:b1:44:10:c0:15:43:92:cf:fe:c3:7b:a5:03:30:bf:48:
         7f:c3:d0:94:c6:34:8d:f1:32:73:bd:fa:c9:35:36:ec:09:53:
         14:85:77:ae:2f:9c:b8:10:ce:64:24:c0:49:08:f5:14:66:66:
         3d:b7:8e:2b:4c:b9:cb:82:d6:86:1b:97:24:8f:d7:fb:1f:ba:
         fe:03:37:68:3d:1e:db:d8:09:6b:90:67:53:89:2d:60:48:d3:
         96:62:80:76:8c:5c:aa:fa:c1:24:64:7e:70:d6:81:ea:c3:3d:
         d8:b1:94:71:9d:47:35:1d:11:f8:bf:fd:c0:86:90:9b:5c:14:
         14:19:6a:84:f2:72:22:30:82:da:54:e7:ce:92:c0:1a:b3:9f:
         2e:a8:15:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TvVs8wquiUlHunednWU0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjYzNmZlYzdiNWIyZDE4ZGUzNzk3ZTY5ODRjMDY5NTVl
NzE2ZDcwHhcNMjYwNjE3MDQwMTAyWhcNMjYwNjE4MDQwMTAyWjAzMTEwLwYDVQQD
EygxOGFiNzYwZWNlYzkzMGYxN2I2ZTY4NzI2ZGM0ZGI5ZThiNjkxMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iqGzabOaGCrzECHT6xPJSHU8s3g
d7e/I91NsJYjFHiXVxltITfeEvYmuOKeUExvQWRzYnsK6hBIBKGzK91mUzM36hXB
Pl2ChN8Pt4mj9ZkxDan8D8E/yktwoS4RIt6SDcD5mchZyu/gAQDhKzN3m1a08rA/
jwnuWMzjcf73C9BpliimgaBOBg3RFivhMze1BBlApQ+7zVDk3tP7NPbZFURBksQz
XgvO1DIfbmGqTxj2XHtqVHSX7MJLUXiL9aaBdi4VAoWGJg5HlH0CY73NbK1ZCVmF
Xuzf6bHmvE+7bBcywErqJAazBfLTei1TzNgtOZWpCCGLr8wFpR/9+6+wYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBirdg7OyTDxe25ocm3E256LaRBCMB8GA1UdIwQY
MBaAFPD2Nv7HtbLRjeN5fmmEwGlV5xbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDIt
NjQzYzFmZTM4Mzg1LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDItNjQzYzFmZTM4Mzg1
LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrsPgJuG
wf5XhvPAnNN2vbRvq9kUnEAHFOXOWr+GrZxSIAg/gm5+s5OG7IwBRYqjAGqy/azb
hN8/JMR155wuVoZp/EN6rue9BGTQBZnRTdtt2nwH8IGMvdTBC7zAPImCjV5PrLjF
sS7z/3kzKcmxRBDAFUOSz/7De6UDML9If8PQlMY0jfEyc736yTU27AlTFIV3ri+c
uBDOZCTASQj1FGZmPbeOK0y5y4LWhhuXJI/X+x+6/gM3aD0e29gJa5BnU4ktYEjT
lmKAdoxcqvrBJGR+cNaB6sM92LGUcZ1HNR0R+L/9wIaQm1wUFBlqhPJyIjCC2lTn
zpLAGrOfLqgVdg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:13:53 2026 by rpki-client