Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File:                     8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier:          KCAkjrpI1HDXgJxe7rGp57x0T7d+GazcXam+4ZPMoGw=
Subject key identifier:   EA:A0:CF:CC:11:80:5B:63:68:A4:73:5A:10:28:09:33:92:19:32:A1
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer:       /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial:       019EC148FB4ED41904DA50C3B9DB10EBB9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number:          1052
Signing time:             Sat 13 Jun 2026 14:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:45 +0000
Files and hashes:         1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: L+AfleMy7gaDQSAmPidhEBBEEO7WqXAYaPGUg4gpNm0=)
                          2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:fb:4e:d4:19:04:da:50:c3:b9:db:10:eb:b9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
        Validity
            Not Before: Jun 13 14:00:45 2026 GMT
            Not After : Jun 14 14:00:45 2026 GMT
        Subject: CN=eaa0cfcc11805b6368a4735a10280933921932a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:e2:1e:b6:7e:db:ce:ac:f5:2c:cb:0f:e1:
                    ed:fa:a8:ef:cc:1f:69:c0:98:e8:9c:4f:05:99:7a:
                    5c:1e:ad:6c:f2:e7:b9:cf:d8:d9:9f:56:49:e6:3f:
                    3f:8b:02:9e:33:37:67:d6:c4:82:ec:f0:fc:6b:67:
                    c8:2e:88:b9:aa:59:fe:c0:f2:53:07:de:54:c2:d0:
                    9c:0e:3f:19:70:5a:cc:ba:51:eb:02:be:f3:d3:ae:
                    aa:ff:da:d4:24:8f:79:ce:c5:4c:8f:55:04:c6:23:
                    45:a0:08:2a:f7:6b:a9:75:5d:3e:bb:45:f2:11:4c:
                    10:f6:39:4b:ab:89:98:d1:45:23:5a:2a:82:5d:f6:
                    62:e5:ac:9d:84:84:54:d1:24:f2:bb:f0:8a:bc:3e:
                    c4:ae:09:07:ba:65:21:a9:57:71:cb:ec:bd:de:34:
                    0a:f0:72:08:47:ff:78:c8:d4:6d:71:da:43:a4:ea:
                    35:5e:e8:2a:e3:f0:22:28:18:66:4c:0b:94:5d:db:
                    2f:5d:7a:5b:e2:2e:c8:6b:9d:a6:b3:69:c7:31:c5:
                    4f:8d:84:71:8c:23:14:21:e9:25:a6:50:7d:83:69:
                    8a:9e:d9:9a:fe:07:03:e1:5c:ce:ed:45:7b:8d:b6:
                    88:1f:5e:ff:ed:19:c4:8a:ef:12:38:56:00:32:30:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A0:CF:CC:11:80:5B:63:68:A4:73:5A:10:28:09:33:92:19:32:A1
            X509v3 Authority Key Identifier:
                keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:42:25:7f:c1:d5:01:75:d2:e1:9a:b8:fc:99:46:c1:2f:56:
         35:a9:7e:7c:3d:56:a4:8e:3a:bd:36:bb:89:ff:a2:49:ca:d8:
         9a:81:21:6e:22:f2:10:e9:63:9f:0c:b9:43:4c:f7:29:e2:db:
         92:c7:8c:6b:75:fd:a3:fb:80:51:9a:5a:10:27:f9:e2:b1:c3:
         86:3c:e8:76:b1:f1:ed:93:6b:97:61:99:ab:d2:53:ba:ad:63:
         91:d2:1d:4b:e7:bf:0c:50:1d:a5:d7:3a:21:2d:19:2c:a8:d1:
         c3:dc:26:06:e8:90:e9:a0:46:3d:4a:22:38:49:54:18:8b:57:
         e7:de:b5:e2:21:47:30:54:4e:4c:db:eb:7a:da:2a:be:3a:e6:
         10:e4:81:1d:b6:e5:3f:7a:cd:0f:bf:a2:73:38:94:12:c2:4a:
         4d:e9:3b:34:b0:c4:b2:71:70:03:c2:fd:43:59:f2:f8:c2:84:
         00:cb:77:9a:dc:55:dd:ce:db:9b:7f:09:ea:45:39:e9:f2:eb:
         53:16:f2:1e:82:78:2f:65:7c:10:b1:45:af:74:7d:b9:d0:b0:
         84:be:e5:20:39:68:a6:2c:d6:2b:fd:1f:4d:54:54:2f:29:34:
         f8:b8:1e:2a:f1:db:8b:91:b7:f8:81:57:64:2f:fa:68:ee:c4:
         e8:77:e3:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSPtO1BkE2lDDudsQ67nyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl
ODI2ZDQwHhcNMjYwNjEzMTQwMDQ1WhcNMjYwNjE0MTQwMDQ1WjAzMTEwLwYDVQQD
EyhlYWEwY2ZjYzExODA1YjYzNjhhNDczNWExMDI4MDkzMzkyMTkzMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLniHrZ+286s9SzLD+Ht+qjvzB9p
wJjonE8FmXpcHq1s8ue5z9jZn1ZJ5j8/iwKeMzdn1sSC7PD8a2fILoi5qln+wPJT
B95UwtCcDj8ZcFrMulHrAr7z066q/9rUJI95zsVMj1UExiNFoAgq92updV0+u0Xy
EUwQ9jlLq4mY0UUjWiqCXfZi5aydhIRU0STyu/CKvD7ErgkHumUhqVdxy+y93jQK
8HIIR/94yNRtcdpDpOo1Xugq4/AiKBhmTAuUXdsvXXpb4i7Ia52ms2nHMcVPjYRx
jCMUIeklplB9g2mKntma/gcD4VzO7UV7jbaIH17/7RnEiu8SOFYAMjB1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqgz8wRgFtjaKRzWhAoCTOSGTKhMB8GA1UdIwQY
MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt
M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0
LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEIlf8HV
AXXS4Zq4/JlGwS9WNal+fD1WpI46vTa7if+iScrYmoEhbiLyEOljnwy5Q0z3KeLb
kseMa3X9o/uAUZpaECf54rHDhjzodrHx7ZNrl2GZq9JTuq1jkdIdS+e/DFAdpdc6
IS0ZLKjRw9wmBuiQ6aBGPUoiOElUGItX59614iFHMFROTNvretoqvjrmEOSBHbbl
P3rND7+icziUEsJKTek7NLDEsnFwA8L9Q1ny+MKEAMt3mtxV3c7bm38J6kU56fLr
UxbyHoJ4L2V8ELFFr3R9udCwhL7lIDlopizWK/0fTVRULyk0+LgeKvHbi5G3+IFX
ZC/6aO7E6HfjXA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:20 2026 by rpki-client