Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File:                     Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier:          +iisdYFXRoco7VzotmRZsI9+4la5nKNbcbTYOwUjPcU=
Subject key identifier:   0E:8F:D5:0A:C0:9B:0E:C8:E5:DF:AD:CE:8E:66:79:EB:07:25:31:AD
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       019EBE7ECEA28544584E74887B225AD332A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number:          08C2
Signing time:             Sat 13 Jun 2026 01:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:41 +0000
Files and hashes:         1: HmNbu7fvLqkuNCvwTP-eXZTgjiM.roa (hash: m/atD1lD6rUs54W8etAvVpgoMLgOWanL44spO3D1HdE=)
                          2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: iGYZwOgnQ4AC4QHpKEPHUJIKsJkNLlXdMBuMff0Pr1E=)
                          3: eASxXKRxIs_kj-l1Ner7toyYCdA.roa (hash: ezV7+yb4XB2ubnd0AqkzgtqKTjmFbndpmZgG2VbnSno=)
                          4: pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa (hash: aJhD1VyN6OGe5iE4OPjL2lO60V5k352+7aiUBwTHoKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:ce:a2:85:44:58:4e:74:88:7b:22:5a:d3:32:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: Jun 13 01:00:41 2026 GMT
            Not After : Jun 14 01:00:41 2026 GMT
        Subject: CN=0e8fd50ac09b0ec8e5dfadce8e6679eb072531ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:9b:c4:d7:fc:40:50:ae:7f:04:41:5e:e1:
                    db:67:3f:05:05:c4:82:ea:29:be:e3:2f:a5:d0:09:
                    a3:f1:c8:db:de:c9:b7:c2:83:3e:5a:e3:ac:77:48:
                    f5:5d:44:ef:f4:4b:be:ef:2c:59:87:c3:3b:09:fa:
                    e0:cb:45:e0:44:84:c5:25:02:2c:b0:66:a8:15:e0:
                    2b:c7:17:f2:dc:8b:cb:d1:0e:ae:e1:af:9e:4c:95:
                    cb:6e:11:43:3d:1d:9b:cd:0d:c5:87:27:9b:9d:c0:
                    40:2a:84:42:be:9a:c7:99:e2:28:dc:fe:55:c2:25:
                    a5:32:84:43:4b:3f:0b:d0:8f:ee:50:f3:10:1d:da:
                    b5:5b:d6:4f:ed:87:3d:00:c4:90:9e:9d:b3:d7:44:
                    e2:23:f4:e3:b7:53:60:af:a3:e8:03:b9:25:b7:7f:
                    a6:0c:3c:e7:56:80:8b:f7:da:53:1d:44:c2:85:24:
                    a4:65:58:42:b2:b3:f7:92:49:f7:f7:48:f1:0e:06:
                    ba:29:81:c3:d5:cd:5f:94:e3:63:44:15:48:a2:d8:
                    18:05:44:17:39:cb:14:0a:21:22:d5:5d:32:e2:11:
                    1d:22:f4:14:85:6f:cb:c2:c5:d2:89:01:92:bc:d0:
                    dc:3d:e3:2e:1c:83:76:c5:43:74:8e:11:39:00:f7:
                    8e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:D5:0A:C0:9B:0E:C8:E5:DF:AD:CE:8E:66:79:EB:07:25:31:AD
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:14:bd:a5:79:26:2f:b8:24:a1:1e:b0:da:d8:36:29:66:
         a2:eb:36:6d:ee:74:15:c0:25:f4:e0:48:18:1e:85:73:c8:9c:
         c9:6e:54:78:97:82:41:af:37:83:17:bf:87:c3:fb:97:ba:10:
         e7:c3:65:8c:3b:8a:13:ff:81:71:e9:d0:ec:4b:eb:c2:28:86:
         96:5a:a5:f8:14:49:4c:01:a3:b6:bc:95:cd:f4:ab:75:b3:04:
         6f:b4:c9:c3:c5:21:ac:4a:90:59:ca:00:1f:4b:b5:6d:67:61:
         d7:ec:c1:08:3c:76:1c:d1:34:bb:e7:b5:57:be:d4:1e:46:6e:
         44:43:1e:9f:cc:02:32:28:df:91:86:6e:f8:24:99:9f:6f:1b:
         ab:7b:2c:4e:ac:50:fa:b5:f7:2c:68:b9:9f:60:18:0d:8b:45:
         14:54:e3:0a:b6:80:38:a8:50:b7:b4:20:36:00:2d:66:46:7f:
         df:58:bd:60:a1:05:de:0a:43:fc:4d:e5:c8:4c:5d:94:be:a8:
         ef:bc:3b:3b:2a:a3:19:cd:ae:0a:4f:da:83:6e:d2:af:d2:84:
         86:84:75:dc:3d:b3:68:73:74:63:62:5a:cb:aa:e5:2a:b7:e7:
         b7:41:89:0c:05:87:5e:a9:d5:54:8c:e7:c0:7a:7a:02:ae:bb:
         43:dd:89:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+fs6ihURYTnSIeyJa0zKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2M2Y5MTcwNzdmOGYzZDBlMzM4Yzc0MmVhMjFkNjQzNThk
MTlkNTIwHhcNMjYwNjEzMDEwMDQxWhcNMjYwNjE0MDEwMDQxWjAzMTEwLwYDVQQD
EygwZThmZDUwYWMwOWIwZWM4ZTVkZmFkY2U4ZTY2NzllYjA3MjUzMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GebxNf8QFCufwRBXuHbZz8FBcSC
6im+4y+l0Amj8cjb3sm3woM+WuOsd0j1XUTv9Eu+7yxZh8M7Cfrgy0XgRITFJQIs
sGaoFeArxxfy3IvL0Q6u4a+eTJXLbhFDPR2bzQ3FhyebncBAKoRCvprHmeIo3P5V
wiWlMoRDSz8L0I/uUPMQHdq1W9ZP7Yc9AMSQnp2z10TiI/Tjt1Ngr6PoA7klt3+m
DDznVoCL99pTHUTChSSkZVhCsrP3kkn390jxDga6KYHD1c1flONjRBVIotgYBUQX
OcsUCiEi1V0y4hEdIvQUhW/LwsXSiQGSvNDcPeMuHIN2xUN0jhE5APeONQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6P1QrAmw7I5d+tzo5meesHJTGtMB8GA1UdIwQY
MBaAFEY/kXB3+PPQ4zjHQuoh1kNY0Z1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmIt
MjVhNDBjMDc1ZjEyLzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmItMjVhNDBjMDc1ZjEy
LzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5UUvaV5
Ji+4JKEesNrYNilmous2be50FcAl9OBIGB6Fc8icyW5UeJeCQa83gxe/h8P7l7oQ
58NljDuKE/+BcenQ7EvrwiiGllql+BRJTAGjtryVzfSrdbMEb7TJw8UhrEqQWcoA
H0u1bWdh1+zBCDx2HNE0u+e1V77UHkZuREMen8wCMijfkYZu+CSZn28bq3ssTqxQ
+rX3LGi5n2AYDYtFFFTjCraAOKhQt7QgNgAtZkZ/31i9YKEF3gpD/E3lyExdlL6o
77w7OyqjGc2uCk/ag27Sr9KEhoR13D2zaHN0Y2Jay6rlKrfnt0GJDAWHXqnVVIzn
wHp6Aq67Q92JOg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:06 2026 by rpki-client