Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
File:                     A8gBV7VkJs46X0PIn-sdQ3x3y84.mft (raw, json)
Hash identifier:          ZkqxM0GL5jcwzvWlkyeJEqxV3HUVvcGkxhgv1tppZaI=
Subject key identifier:   F8:1A:52:4D:AE:74:C8:CA:29:AD:1F:00:90:DA:27:C2:07:B5:91:A9
Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
Certificate issuer:       /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Certificate serial:       019EBEED44A777AA5F9E452DA85D7623C4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
Manifest number:          0200
Signing time:             Sat 13 Jun 2026 03:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:20 +0000
Files and hashes:         1: 9hmyc7CHoVirMOZNEd9K7tYFYLM.roa (hash: W9t2ncBE5dKOSwgrchzHeuwxwCQgEv7UeDz8B25sDI0=)
                          2: A8gBV7VkJs46X0PIn-sdQ3x3y84.crl (hash: CiSesN20RtQ5ZFsBfJyMd3ZeanUP8yBf/OuLEAt6qr0=)
                          3: LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa (hash: +N5sGX/uOLbypJ4AbC7ZYsPhCOcK9Y9mwfmo1tGT698=)
                          4: cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa (hash: BD5O1CMhrpoa4q2pzqFcNgYXgKPADPP3AYbxu2KOUsc=)
                          5: e9xI9xxAFennKLtQShHvt8Vdf3U.roa (hash: nJ6Dkjs+4T2Bh6E1zT3mOI9063o+MgviDZiRTob06t8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:44:a7:77:aa:5f:9e:45:2d:a8:5d:76:23:c4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
        Validity
            Not Before: Jun 13 03:01:20 2026 GMT
            Not After : Jun 14 03:01:20 2026 GMT
        Subject: CN=f81a524dae74c8ca29ad1f0090da27c207b591a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:05:75:df:87:54:1f:c9:cf:bd:7c:c7:2d:
                    48:b3:c7:2b:2c:72:29:68:a5:af:69:f1:5c:5f:eb:
                    30:3f:0d:ec:31:53:d0:17:32:53:6d:07:74:68:c7:
                    ec:ce:3b:a4:60:b9:69:1c:8a:13:10:00:33:2d:5f:
                    9c:d7:4d:0c:c5:00:46:bc:a2:a9:34:64:cf:6d:b9:
                    4c:16:ee:81:48:d0:db:df:c7:a9:94:4d:d8:8d:f6:
                    ad:02:7e:57:62:c5:53:e5:b6:f5:4b:98:0c:24:7b:
                    93:74:cd:50:e6:a9:ad:ae:8b:3b:07:e1:14:fc:18:
                    84:f6:25:47:d3:fc:0c:e1:d6:27:ab:9f:9e:51:85:
                    66:40:b1:92:62:9e:da:e7:65:f7:82:a7:11:fd:82:
                    86:d3:9b:12:64:14:6e:21:36:2a:8c:1c:5b:a1:84:
                    8b:7f:d7:78:43:59:69:53:65:c3:f7:cf:61:4e:d1:
                    e2:57:ca:7c:2b:cb:0f:e6:2c:78:16:47:42:a2:82:
                    c9:f1:49:2b:ff:6c:1c:e5:23:1c:be:c2:66:f7:7c:
                    68:98:fc:87:bf:e7:2b:ee:7c:49:72:8d:68:9b:f4:
                    49:ab:9b:a0:ff:bf:a5:df:1f:07:16:35:83:49:c7:
                    c7:66:93:87:6b:44:b6:f2:3a:43:4c:4c:40:cf:43:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1A:52:4D:AE:74:C8:CA:29:AD:1F:00:90:DA:27:C2:07:B5:91:A9
            X509v3 Authority Key Identifier:
                keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:38:fe:80:a7:50:b7:8b:a6:0e:9a:79:5b:5f:64:ec:6a:47:
         4c:c3:a3:57:4d:9b:40:9d:67:d8:54:fc:22:41:75:de:9d:79:
         c4:47:27:b7:52:6f:b3:d8:04:97:85:77:1d:8b:37:9f:18:3e:
         fe:5f:3a:0d:d4:27:1a:37:05:0a:df:6a:9c:1e:96:96:23:5f:
         20:a5:a5:d3:ae:15:3f:2e:72:35:4f:d1:65:de:33:21:71:44:
         65:6d:c4:83:ad:b1:42:74:3d:61:57:61:f7:e4:a0:cb:3c:14:
         43:72:0d:8a:7e:28:fb:70:6c:5c:32:05:eb:e0:77:db:06:43:
         fc:f1:f3:ac:1b:f0:05:2a:49:f4:b2:2b:9b:ea:bd:01:c3:38:
         15:67:30:74:85:84:24:d1:4b:9f:a6:9c:dd:a1:48:7c:31:2b:
         fd:e9:a2:14:ad:d4:c6:8f:1a:b9:f5:9a:47:fd:13:78:02:ec:
         c9:10:c4:21:56:3f:65:31:4d:8c:ea:d5:cd:97:c1:b5:33:e5:
         7e:f8:45:ee:ce:5d:08:79:ca:f0:50:35:2a:bf:76:a8:c9:1e:
         8d:f2:c0:ca:df:1e:57:02:dd:db:9d:89:f1:95:fe:e4:0a:81:
         fe:94:bb:19:7d:b1:45:44:f4:eb:cb:93:e4:02:6f:9c:77:05:
         7c:70:be:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7USnd6pfnkUtqF12I8TlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzgwMTU3YjU2NDI2Y2UzYTVmNDNjODlmZWIxZDQzN2M3
N2NiY2UwHhcNMjYwNjEzMDMwMTIwWhcNMjYwNjE0MDMwMTIwWjAzMTEwLwYDVQQD
EyhmODFhNTI0ZGFlNzRjOGNhMjlhZDFmMDA5MGRhMjdjMjA3YjU5MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGwFdd+HVB/Jz718xy1Is8crLHIp
aKWvafFcX+swPw3sMVPQFzJTbQd0aMfszjukYLlpHIoTEAAzLV+c100MxQBGvKKp
NGTPbblMFu6BSNDb38eplE3YjfatAn5XYsVT5bb1S5gMJHuTdM1Q5qmtros7B+EU
/BiE9iVH0/wM4dYnq5+eUYVmQLGSYp7a52X3gqcR/YKG05sSZBRuITYqjBxboYSL
f9d4Q1lpU2XD989hTtHiV8p8K8sP5ix4FkdCooLJ8Ukr/2wc5SMcvsJm93xomPyH
v+cr7nxJco1om/RJq5ug/7+l3x8HFjWDScfHZpOHa0S28jpDTExAz0O4qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgaUk2udMjKKa0fAJDaJ8IHtZGpMB8GA1UdIwQY
MBaAFAPIAVe1ZCbOOl9DyJ/rHUN8d8vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEt
ZjAxNGY4MTc3OTZhLzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEtZjAxNGY4MTc3OTZh
LzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTj+gKdQ
t4umDpp5W19k7GpHTMOjV02bQJ1n2FT8IkF13p15xEcnt1Jvs9gEl4V3HYs3nxg+
/l86DdQnGjcFCt9qnB6WliNfIKWl064VPy5yNU/RZd4zIXFEZW3Eg62xQnQ9YVdh
9+SgyzwUQ3INin4o+3BsXDIF6+B32wZD/PHzrBvwBSpJ9LIrm+q9AcM4FWcwdIWE
JNFLn6ac3aFIfDEr/emiFK3Uxo8aufWaR/0TeALsyRDEIVY/ZTFNjOrVzZfBtTPl
fvhF7s5dCHnK8FA1Kr92qMkejfLAyt8eVwLd252J8ZX+5AqB/pS7GX2xRUT068uT
5AJvnHcFfHC+7A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:49:33 2026 by rpki-client