Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          bjVYINQEg4qWLZn1l2zq3Rzs9itYjAVloxnoc/kWg9U=
Subject key identifier:   C8:51:57:CD:4A:EA:82:2C:67:71:EC:6B:49:AB:C5:78:F4:3D:0D:91
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       019EC0A40B0EA93E5F9AA715B7E69E846EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          08D2
Signing time:             Sat 13 Jun 2026 11:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:36 +0000
Files and hashes:         1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: 8lxYXoB4FqCPDRq7y849xHDejbtyp4dBx+uAXwLfWeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:0b:0e:a9:3e:5f:9a:a7:15:b7:e6:9e:84:6e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Jun 13 11:00:36 2026 GMT
            Not After : Jun 14 11:00:36 2026 GMT
        Subject: CN=c85157cd4aea822c6771ec6b49abc578f43d0d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:6c:bb:d6:d4:aa:5e:e9:5b:23:e2:0d:af:
                    15:23:55:f4:ea:40:57:8d:9c:d3:c8:34:a7:01:ca:
                    36:39:c6:61:12:fa:06:fe:97:37:c0:c9:06:eb:c1:
                    d6:ca:0a:98:66:df:4e:d5:7b:ff:77:09:74:7e:1c:
                    04:0f:c9:6d:40:30:5f:bf:87:df:8b:8d:76:4e:e3:
                    ca:e2:dd:f7:9b:f8:7f:35:3b:cd:fd:87:e2:8c:1a:
                    bb:4e:2d:dd:35:36:75:a1:e8:fe:d8:65:2f:29:d9:
                    5f:09:c1:a6:a0:6c:ba:5a:09:8e:be:b3:4a:d0:5f:
                    ed:ce:3c:7e:16:9b:2e:3f:91:2b:45:cc:5d:8f:9e:
                    2c:31:06:38:0a:47:50:10:c1:99:bb:26:5a:7c:ee:
                    f8:55:6a:af:6e:7b:5c:00:0e:2a:0e:9c:51:2b:fe:
                    5d:82:34:c4:ae:78:b3:40:3c:d1:ca:65:a2:ba:0e:
                    94:32:d4:85:24:41:6f:d0:74:b8:a4:c6:c0:0f:79:
                    8f:d9:2e:45:bc:1a:0c:df:3b:c0:cc:37:f9:7c:27:
                    20:26:07:a3:28:3e:5b:46:c9:2a:35:8e:bf:af:a0:
                    68:20:ce:96:f4:75:e0:e9:47:5b:a9:26:c6:ad:70:
                    96:82:29:88:fb:81:42:bd:53:dc:84:00:8b:c5:94:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:51:57:CD:4A:EA:82:2C:67:71:EC:6B:49:AB:C5:78:F4:3D:0D:91
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:27:72:d1:09:80:b4:f6:18:d9:5b:84:15:5a:e2:6c:8a:e1:
         57:ac:e7:12:c1:c1:ea:fc:db:52:a9:13:2d:99:91:91:a0:7d:
         62:e8:5b:46:28:f6:9c:05:79:a2:c8:28:17:37:4e:70:e3:71:
         25:54:61:e2:ab:8f:aa:b1:48:25:a3:43:e3:6c:4c:d4:07:47:
         bd:6d:67:5c:be:61:60:67:e8:4d:12:20:8b:80:d7:c1:0c:8c:
         14:42:9c:65:f9:95:66:ea:b5:78:b9:09:a1:30:15:3b:dd:ce:
         44:2a:4d:f3:3a:40:63:8b:77:e6:d3:32:87:93:07:b4:4c:e8:
         24:fa:fb:25:cf:0d:41:67:53:1e:28:1b:2f:bc:b4:0e:4d:fc:
         fa:58:7e:4c:9b:fb:f7:cb:3a:09:45:95:5c:75:53:04:25:43:
         7a:21:a2:26:b6:53:56:aa:45:28:74:55:d8:21:c3:e6:37:ef:
         85:a6:51:ce:b4:65:b9:91:83:f4:a0:7d:50:be:e4:47:ea:06:
         da:aa:15:b9:59:a6:b0:8d:4c:c8:ab:54:bb:71:30:12:65:4a:
         97:41:14:a4:2a:8b:2a:50:91:d7:2b:8d:7c:22:9d:d8:d5:e7:
         3f:49:a8:76:51:50:ba:9c:16:8c:a0:fe:4c:d8:3d:df:4f:b2:
         18:00:42:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApAsOqT5fmqcVt+aehG70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmI1NjkzYjgyNjFmYjUzOWZlYTNiMTNjODE3MTE1ZjAw
YzE4ZGYwHhcNMjYwNjEzMTEwMDM2WhcNMjYwNjE0MTEwMDM2WjAzMTEwLwYDVQQD
EyhjODUxNTdjZDRhZWE4MjJjNjc3MWVjNmI0OWFiYzU3OGY0M2QwZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyFsu9bUql7pWyPiDa8VI1X06kBX
jZzTyDSnAco2OcZhEvoG/pc3wMkG68HWygqYZt9O1Xv/dwl0fhwED8ltQDBfv4ff
i412TuPK4t33m/h/NTvN/YfijBq7Ti3dNTZ1oej+2GUvKdlfCcGmoGy6WgmOvrNK
0F/tzjx+FpsuP5ErRcxdj54sMQY4CkdQEMGZuyZafO74VWqvbntcAA4qDpxRK/5d
gjTErnizQDzRymWiug6UMtSFJEFv0HS4pMbAD3mP2S5FvBoM3zvAzDf5fCcgJgej
KD5bRskqNY6/r6BoIM6W9HXg6UdbqSbGrXCWgimI+4FCvVPchACLxZSgswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhRV81K6oIsZ3Hsa0mrxXj0PQ2RMB8GA1UdIwQY
MBaAFJgrVpO4Jh+1Of6jsTyBcRXwDBjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYt
MWRhNGI5Mjc5OWY2LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYtMWRhNGI5Mjc5OWY2
LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSdy0QmA
tPYY2VuEFVribIrhV6znEsHB6vzbUqkTLZmRkaB9YuhbRij2nAV5osgoFzdOcONx
JVRh4quPqrFIJaND42xM1AdHvW1nXL5hYGfoTRIgi4DXwQyMFEKcZfmVZuq1eLkJ
oTAVO93ORCpN8zpAY4t35tMyh5MHtEzoJPr7Jc8NQWdTHigbL7y0Dk38+lh+TJv7
98s6CUWVXHVTBCVDeiGiJrZTVqpFKHRV2CHD5jfvhaZRzrRluZGD9KB9UL7kR+oG
2qoVuVmmsI1MyKtUu3EwEmVKl0EUpCqLKlCR1yuNfCKd2NXnP0modlFQupwWjKD+
TNg930+yGABCog==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:25:24 2026 by rpki-client