Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File:                     Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier:          vNWx/QHK3QGcnE0Q4S4ByVEhGGrJ/OgzypQOVALH/ok=
Subject key identifier:   9D:F8:84:18:9F:1D:C2:A8:BA:B2:C8:7C:6A:A3:18:B4:27:20:06:19
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       019EBFFF981E398B193E266B5BEDC9C2DC0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number:          0E9F
Signing time:             Sat 13 Jun 2026 08:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:59 +0000
Files and hashes:         1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: EvP4yaOlTXlOSfP7QqQ5Vks/Xu/tAW/eC121E8yyRcw=)
                          2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:98:1e:39:8b:19:3e:26:6b:5b:ed:c9:c2:dc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Jun 13 08:00:59 2026 GMT
            Not After : Jun 14 08:00:59 2026 GMT
        Subject: CN=9df884189f1dc2a8bab2c87c6aa318b427200619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:b6:bd:80:a4:33:11:7e:56:9a:ab:e3:44:
                    97:4a:d1:c1:eb:cf:73:bd:62:21:77:70:ea:5f:fd:
                    77:5f:b5:00:16:47:bf:47:b6:df:48:70:3e:75:42:
                    ff:5d:93:0b:20:1d:f5:f1:cd:98:db:15:c9:e1:82:
                    6d:ae:32:e5:ac:a7:de:3d:35:54:12:da:f5:e4:31:
                    c1:9e:47:6c:41:60:cc:73:4a:d0:ed:46:10:4f:41:
                    76:15:6b:7a:4b:51:bc:2d:b5:da:df:7a:b1:47:39:
                    27:dc:dc:34:45:ff:56:6f:d6:6e:e4:68:1e:da:c4:
                    c7:f4:e4:43:bb:f1:30:ff:a6:42:50:ff:ec:91:3d:
                    91:b6:11:20:38:42:bf:9a:85:2d:c1:aa:8f:96:2e:
                    fd:41:85:d2:eb:15:20:4c:07:a9:ed:72:dc:ba:31:
                    b6:a8:48:cf:91:cd:20:98:70:2c:ee:f0:15:4c:b6:
                    df:0e:24:0e:3c:5b:c2:1a:a0:10:b8:0d:7c:30:54:
                    bd:38:36:08:ad:9d:a1:74:2e:d8:e6:cb:97:8c:09:
                    ff:15:29:e5:90:34:92:f0:96:75:c3:91:3a:4b:2c:
                    ff:4c:40:bc:ee:ac:92:a0:ef:97:50:68:32:3e:c9:
                    bb:a4:71:a5:5e:79:3a:de:e7:87:85:09:15:b9:1d:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F8:84:18:9F:1D:C2:A8:BA:B2:C8:7C:6A:A3:18:B4:27:20:06:19
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8d:7c:71:15:16:b4:55:6c:8a:c9:16:58:62:d5:e0:be:b6:
         55:f5:32:96:08:2f:7d:71:33:ef:26:03:04:d7:cf:97:92:4a:
         b2:c4:01:9f:da:e5:54:ee:1e:07:5c:a3:b5:c0:c6:dd:fd:25:
         01:60:77:49:1b:3d:a4:01:3d:1f:7a:a9:30:fc:38:96:c6:5f:
         51:b7:b7:b6:aa:b7:66:2c:d0:3a:04:0e:e0:eb:27:34:9f:ef:
         c8:5e:2e:2f:cb:1a:6b:55:c2:b0:62:cf:2e:e9:0a:c6:38:ba:
         91:4c:09:23:4a:a8:a8:37:0a:e5:5b:fb:3f:14:44:f9:ba:bb:
         74:c6:87:0e:26:70:e7:37:3e:9b:c8:ce:ef:07:c8:84:26:65:
         5a:e0:ea:22:9b:41:6a:fe:f7:c6:52:9a:ae:96:94:7d:42:84:
         96:07:bd:62:79:4f:c1:8c:42:4f:5b:24:64:0f:a7:ea:48:61:
         07:4f:9e:56:fc:c2:f3:e1:ca:e4:cf:47:6c:d8:86:4c:db:31:
         17:41:70:e7:ce:35:71:5b:01:14:6f:0c:da:d7:8e:83:0b:bf:
         47:97:48:5e:4d:b0:89:4e:8d:d6:62:77:b1:83:27:00:62:8c:
         cd:79:f8:37:81:53:d8:c4:8c:6a:91:8d:3d:66:ba:fd:f9:c2:
         aa:e7:31:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//5geOYsZPiZrW+3JwtwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk
MzFiMGQwHhcNMjYwNjEzMDgwMDU5WhcNMjYwNjE0MDgwMDU5WjAzMTEwLwYDVQQD
Eyg5ZGY4ODQxODlmMWRjMmE4YmFiMmM4N2M2YWEzMThiNDI3MjAwNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkji2vYCkMxF+Vpqr40SXStHB689z
vWIhd3DqX/13X7UAFke/R7bfSHA+dUL/XZMLIB318c2Y2xXJ4YJtrjLlrKfePTVU
Etr15DHBnkdsQWDMc0rQ7UYQT0F2FWt6S1G8LbXa33qxRzkn3Nw0Rf9Wb9Zu5Gge
2sTH9ORDu/Ew/6ZCUP/skT2RthEgOEK/moUtwaqPli79QYXS6xUgTAep7XLcujG2
qEjPkc0gmHAs7vAVTLbfDiQOPFvCGqAQuA18MFS9ODYIrZ2hdC7Y5suXjAn/FSnl
kDSS8JZ1w5E6Syz/TEC87qySoO+XUGgyPsm7pHGlXnk63ueHhQkVuR1VswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ34hBifHcKourLIfGqjGLQnIAYZMB8GA1UdIwQY
MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt
MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk
LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUY18cRUW
tFVsiskWWGLV4L62VfUylggvfXEz7yYDBNfPl5JKssQBn9rlVO4eB1yjtcDG3f0l
AWB3SRs9pAE9H3qpMPw4lsZfUbe3tqq3ZizQOgQO4OsnNJ/vyF4uL8saa1XCsGLP
LukKxji6kUwJI0qoqDcK5Vv7PxRE+bq7dMaHDiZw5zc+m8jO7wfIhCZlWuDqIptB
av73xlKarpaUfUKElge9YnlPwYxCT1skZA+n6khhB0+eVvzC8+HK5M9HbNiGTNsx
F0Fw5841cVsBFG8M2teOgwu/R5dIXk2wiU6N1mJ3sYMnAGKMzXn4N4FT2MSMapGN
PWa6/fnCqucxDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:31 2026 by rpki-client