Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File:                     8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier:          M+S0kFTDSUZ8xTVLzBG24D548SxU4GAUJZSdgHbwhLg=
Subject key identifier:   23:93:30:6C:C0:58:C4:12:01:91:33:CB:0D:F1:63:E0:84:75:B8:3A
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer:       /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial:       019EBEEC8FA49783886B9FC91F15419DAB8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number:          0C12
Signing time:             Sat 13 Jun 2026 03:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:34 +0000
Files and hashes:         1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
                          2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: 4vSMoe86jI8QlFvHrshJaUoc1tOA2uhlBEzopsVmUMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:8f:a4:97:83:88:6b:9f:c9:1f:15:41:9d:ab:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
        Validity
            Not Before: Jun 13 03:00:34 2026 GMT
            Not After : Jun 14 03:00:34 2026 GMT
        Subject: CN=2393306cc058c412019133cb0df163e08475b83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:f5:17:62:8e:cf:a7:1c:18:04:48:27:b8:
                    a5:b3:38:72:1f:f6:7f:f7:94:a1:69:4e:4a:1f:4d:
                    18:57:18:36:de:c1:e8:5e:d8:60:da:06:aa:e3:69:
                    75:f1:ee:f9:c2:68:a2:90:3b:89:27:2c:8e:25:f8:
                    8a:80:bb:03:e5:84:87:bf:91:82:23:af:d9:b1:cb:
                    80:03:7c:0c:1e:80:d0:b9:9f:3f:bf:fb:8e:a5:2b:
                    20:aa:91:6d:a3:4c:75:79:d9:3b:38:f7:b5:a8:50:
                    f3:02:c6:39:fa:68:f6:aa:da:53:ce:ef:92:6c:ea:
                    63:61:a0:c4:a4:e7:a1:cb:c5:d1:c1:62:63:24:75:
                    c5:02:cb:6c:f2:95:86:a8:f7:90:56:7d:9c:8a:7f:
                    1e:94:c9:53:de:9e:78:4e:96:4f:99:53:d8:5b:d6:
                    7f:43:8b:64:7e:2a:1b:0e:32:c3:3a:ce:4f:74:fb:
                    68:d4:95:99:fd:11:99:de:c8:b4:3d:14:32:8c:33:
                    9f:13:db:57:7d:86:4d:37:7b:03:cf:08:eb:05:c4:
                    d7:8a:83:69:16:a1:ff:50:24:71:38:74:d2:1c:5e:
                    c9:15:0d:1f:66:00:f2:8c:91:ad:a1:a8:f4:9f:3c:
                    63:55:89:45:be:d0:94:9e:70:8e:67:2e:d4:ea:50:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:93:30:6C:C0:58:C4:12:01:91:33:CB:0D:F1:63:E0:84:75:B8:3A
            X509v3 Authority Key Identifier:
                keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7a:72:90:dd:50:e6:20:d8:e1:9d:19:0b:6c:d7:fd:19:1c:
         4c:39:b8:ce:58:1b:6f:88:7b:d9:10:2f:05:98:c1:40:32:db:
         03:b0:74:c9:f5:1c:44:86:ea:a2:35:62:05:00:3b:5d:3f:dc:
         91:3e:15:ec:3e:e8:13:17:ce:ab:01:0a:6e:71:e5:6b:7a:cc:
         80:bf:7c:e8:3e:fe:fc:48:5f:a5:dc:26:c3:59:a7:e5:f1:99:
         4f:c0:d3:da:ca:33:c5:53:e2:a8:cd:07:d9:ad:44:cb:d8:f7:
         16:f3:b7:f0:78:fb:db:cc:b4:6b:45:7f:de:ce:5b:56:e5:90:
         e7:0b:e5:f9:77:5c:c5:d5:ba:4d:93:e7:b5:37:db:2d:3f:eb:
         d4:8b:f7:02:70:f9:75:c5:05:69:d1:1d:d0:ba:8c:9a:d5:9e:
         19:77:04:80:04:2e:04:cf:37:90:62:bc:d0:04:10:c1:da:44:
         3d:91:4a:e1:69:f7:b3:20:d5:05:5a:b4:03:53:4e:79:97:a3:
         54:74:dd:48:fe:36:02:91:a2:11:49:52:ad:49:81:f1:0c:bc:
         a9:ff:60:61:a2:a7:22:00:8a:35:ca:99:bb:bc:c1:50:0f:51:
         28:85:f8:58:cd:4e:91:ac:db:21:11:4c:37:5b:6b:c0:fa:1a:
         68:2a:44:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7I+kl4OIa5/JHxVBnauOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy
MmUyNzgwHhcNMjYwNjEzMDMwMDM0WhcNMjYwNjE0MDMwMDM0WjAzMTEwLwYDVQQD
EygyMzkzMzA2Y2MwNThjNDEyMDE5MTMzY2IwZGYxNjNlMDg0NzViODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AH1F2KOz6ccGARIJ7ilszhyH/Z/
95ShaU5KH00YVxg23sHoXthg2gaq42l18e75wmiikDuJJyyOJfiKgLsD5YSHv5GC
I6/ZscuAA3wMHoDQuZ8/v/uOpSsgqpFto0x1edk7OPe1qFDzAsY5+mj2qtpTzu+S
bOpjYaDEpOehy8XRwWJjJHXFAsts8pWGqPeQVn2cin8elMlT3p54TpZPmVPYW9Z/
Q4tkfiobDjLDOs5PdPto1JWZ/RGZ3si0PRQyjDOfE9tXfYZNN3sDzwjrBcTXioNp
FqH/UCRxOHTSHF7JFQ0fZgDyjJGtoaj0nzxjVYlFvtCUnnCOZy7U6lA/8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOTMGzAWMQSAZEzyw3xY+CEdbg6MB8GA1UdIwQY
MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt
OWJlYmY3ZGNjMWE2LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2
LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinpykN1Q
5iDY4Z0ZC2zX/RkcTDm4zlgbb4h72RAvBZjBQDLbA7B0yfUcRIbqojViBQA7XT/c
kT4V7D7oExfOqwEKbnHla3rMgL986D7+/Ehfpdwmw1mn5fGZT8DT2sozxVPiqM0H
2a1Ey9j3FvO38Hj728y0a0V/3s5bVuWQ5wvl+XdcxdW6TZPntTfbLT/r1Iv3AnD5
dcUFadEd0LqMmtWeGXcEgAQuBM83kGK80AQQwdpEPZFK4Wn3syDVBVq0A1NOeZej
VHTdSP42ApGiEUlSrUmB8Qy8qf9gYaKnIgCKNcqZu7zBUA9RKIX4WM1OkazbIRFM
N1trwPoaaCpEeg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:49 2026 by rpki-client