Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          2zzF25luWqo5fy1MxGdnSnoU5ZWakkDtX8d8ngp7Oqk=
Subject key identifier:   9F:42:4D:D4:84:31:6C:86:A7:FF:98:C5:A7:03:39:4D:D1:FF:97:0E
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019EBE7EE9582A852A89CF2A59D42B1B6617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          154E
Signing time:             Sat 13 Jun 2026 01:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:48 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: RH5rcoyGkfIHXuJE/36tMY223AvAPO5dXuONBMErhuA=)
                          2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=)
                          3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=)
                          4: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
                          5: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=)
                          6: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
                          7: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=)
                          8: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
                          9: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=)
                          10: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
                          11: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=)
                          12: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
                          13: id-lxRpZAXWjSQIYTHcFpR-BOiA.roa (hash: DJLygWwBzeOc6zwCMgS/e3psiWC9iHIdC8QxaCCmABU=)
                          14: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=)
                          15: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
                          16: vEGsYuYY06TvYutYs-QyPdXXq4Q.roa (hash: UCMk3rT/wVrhtk6MMSMiEAtXXbsHSrVjnWedze014rg=)
                          17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:e9:58:2a:85:2a:89:cf:2a:59:d4:2b:1b:66:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Jun 13 01:00:48 2026 GMT
            Not After : Jun 14 01:00:48 2026 GMT
        Subject: CN=9f424dd484316c86a7ff98c5a703394dd1ff970e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:3a:43:9f:20:a8:60:ac:07:c5:3b:13:97:
                    01:d0:f6:1d:e5:2c:fd:9b:76:43:a8:98:df:58:f5:
                    9e:12:05:7d:1d:a9:03:99:f7:dc:7c:33:ab:80:df:
                    ec:c8:49:43:bd:c4:c1:e4:87:3f:71:df:e0:c8:70:
                    d8:5b:41:50:88:2d:c2:12:86:1d:d9:47:28:fd:1b:
                    f4:d1:8d:50:ab:6c:9e:8f:e2:9b:f7:51:4e:b5:bb:
                    9e:84:e4:e1:e1:de:37:01:3b:3e:b2:1f:b1:32:ed:
                    49:bd:64:76:bc:67:3b:58:6c:1e:77:b1:42:c6:44:
                    42:d7:80:06:64:28:41:5c:3a:7c:1f:38:3e:7a:e2:
                    e2:a1:b6:36:0c:a0:62:2e:52:8a:f5:1c:91:25:a2:
                    71:cf:3f:7e:b0:19:3f:2f:28:53:df:b7:64:c7:26:
                    4f:72:ae:46:ef:00:58:69:0f:8b:d6:46:03:f6:ea:
                    d7:f2:6f:5e:57:b8:27:5c:c6:4a:75:3f:3c:a0:9f:
                    e2:86:06:97:d2:ae:91:19:0a:5a:9a:84:f7:4f:15:
                    de:ac:b5:d9:28:ce:d1:37:be:dd:e3:d8:d6:c8:5c:
                    23:e8:bf:62:d8:2f:0b:e4:38:6d:08:f6:99:25:87:
                    ec:4e:50:e7:f0:e2:21:c4:df:6b:42:8f:2c:75:01:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:42:4D:D4:84:31:6C:86:A7:FF:98:C5:A7:03:39:4D:D1:FF:97:0E
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:ac:9f:be:30:a2:17:a5:b3:c3:b8:4c:c0:f5:d4:c2:96:
         7d:64:91:30:f5:4d:fb:73:81:1c:74:f8:86:57:bf:35:3a:0a:
         8f:98:87:47:bc:67:bf:08:5a:c5:66:7c:a4:5c:6d:c8:f4:70:
         ac:2a:fb:de:12:15:1f:26:2f:92:84:2b:69:6d:c2:b2:68:4b:
         35:52:2d:38:3d:27:78:90:f7:53:64:62:d1:6a:7e:b5:f3:a5:
         f8:2a:6c:65:c7:47:67:ce:f8:a1:04:af:0a:91:9d:5a:72:a7:
         85:0b:13:ec:b2:77:70:a0:f2:0b:d9:97:79:a3:55:17:9e:78:
         10:aa:71:0b:ab:e6:29:dd:b6:cb:31:c7:dd:27:22:88:20:f4:
         03:7b:5d:7e:84:b0:1a:6f:2d:e3:ef:a8:8a:10:8f:e9:ea:a1:
         38:f6:5e:db:4b:15:f9:4a:2c:f2:96:a9:1d:19:d4:d9:73:4b:
         ae:8d:b3:c1:a3:07:7d:44:57:a4:6d:81:97:e5:63:82:c4:2b:
         4a:05:7c:12:7e:57:b4:8d:2d:bc:e7:bf:1a:66:cd:d1:99:6a:
         04:f3:0d:bd:b8:25:05:56:c4:da:81:ec:3f:b7:52:0f:0c:1a:
         f3:1c:40:ee:94:43:f5:9c:91:38:3d:78:48:5f:69:b1:58:1f:
         06:60:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:53 2026 by rpki-client