Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File:                     _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier:          ZWcvm46srv8rLMA+QEWR9l7CXaTgL4wWD7sdlD3HWwg=
Subject key identifier:   62:50:26:D2:00:93:BD:79:E4:32:42:F1:21:EE:6E:B1:56:68:E7:A2
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer:       /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial:       019EC2C9E1AF69A49719F0CCD8306DEBB62E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number:          1096
Signing time:             Sat 13 Jun 2026 21:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:10 +0000
Files and hashes:         1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
                          2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: Q0hxzkmLTRWoW/Vlmhc4UD58TugEj0/2De6zWmfIi2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:e1:af:69:a4:97:19:f0:cc:d8:30:6d:eb:b6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
        Validity
            Not Before: Jun 13 21:01:10 2026 GMT
            Not After : Jun 14 21:01:10 2026 GMT
        Subject: CN=625026d20093bd79e43242f121ee6eb15668e7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:14:a2:f5:b5:a9:5f:c3:86:4c:f9:29:95:
                    54:5f:b5:d1:02:9d:b7:0f:94:d1:87:74:fa:0c:45:
                    af:b0:80:89:b8:d0:27:5f:8f:e2:c4:55:88:cf:19:
                    b8:60:e3:88:63:16:ce:8c:39:be:9e:33:dd:01:50:
                    96:d9:86:c2:45:61:61:45:18:e2:b3:a5:91:f8:cb:
                    fa:ec:76:1e:e4:62:e2:5b:2e:8d:c9:c5:94:88:74:
                    84:4f:f4:2b:a6:49:cf:f5:9c:f6:32:0e:bb:ea:54:
                    e3:b5:0e:0d:df:6f:ed:33:7c:0b:f3:ee:37:8b:8c:
                    1a:93:5c:08:a2:2b:eb:63:21:52:e4:14:93:63:94:
                    39:90:69:d2:11:b5:7e:51:a7:e0:e3:fd:20:c6:32:
                    8e:4a:42:59:a7:1e:f3:d4:04:8c:a5:f3:d6:a6:b7:
                    11:a6:c1:b1:c4:b6:00:2a:c7:10:33:9f:77:ad:bc:
                    c9:05:49:ae:2b:0c:b2:d0:03:05:c1:7c:e4:6e:3a:
                    f8:05:e0:a9:cb:a9:ff:b3:c8:29:33:38:f4:1e:5c:
                    ea:c8:f4:2d:4c:ba:78:52:7b:b9:16:59:af:8d:f3:
                    a5:85:70:fb:d0:1d:e3:d3:01:3b:ee:36:5c:79:d1:
                    3f:7a:f8:d5:d3:20:5a:f8:51:bc:55:9a:a2:fc:54:
                    ba:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:50:26:D2:00:93:BD:79:E4:32:42:F1:21:EE:6E:B1:56:68:E7:A2
            X509v3 Authority Key Identifier:
                keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:d2:12:85:9d:3a:d7:a5:0c:9e:aa:8a:ce:f1:c7:bc:94:
         97:d5:01:6d:36:83:00:26:64:c2:a9:95:fe:a0:e4:80:50:76:
         4b:97:61:ab:57:c7:d2:9d:45:96:79:63:93:d2:c4:b0:f4:fd:
         7a:67:37:81:83:24:35:f3:38:12:80:08:59:60:2e:2f:c7:35:
         04:b8:e8:75:27:ed:f1:8b:41:69:b6:ff:10:f7:e0:00:af:9d:
         7c:82:a9:1c:42:80:e4:b0:cb:b3:3c:4f:17:32:a4:e9:3a:30:
         f1:48:13:bd:9d:3a:87:e7:f7:1a:b2:9c:af:8d:71:da:80:ab:
         ee:f7:89:f4:7d:d5:b4:a2:d2:09:22:a8:93:b7:1d:4a:b5:04:
         39:57:a8:e6:5b:7e:82:b2:5a:ad:b3:90:bd:ee:3d:b8:8c:b8:
         9f:3b:aa:41:e2:39:f6:64:94:da:10:c8:d4:a6:0d:1d:f3:8f:
         37:38:a9:cb:c7:76:9f:f6:83:a0:f4:17:6a:a5:66:52:1d:77:
         3c:0c:8c:e7:31:da:7e:41:09:79:a5:f7:e7:d8:b5:f9:36:9f:
         68:4f:11:e1:9a:e5:62:18:12:5b:d4:f8:20:89:85:91:43:70:
         fe:b3:2f:4f:45:f5:28:85:9f:e5:78:06:6a:16:55:3c:d0:e7:
         90:97:e7:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyeGvaaSXGfDM2DBt67YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi
NmI3ZjMwHhcNMjYwNjEzMjEwMTEwWhcNMjYwNjE0MjEwMTEwWjAzMTEwLwYDVQQD
Eyg2MjUwMjZkMjAwOTNiZDc5ZTQzMjQyZjEyMWVlNmViMTU2NjhlN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwQUovW1qV/Dhkz5KZVUX7XRAp23
D5TRh3T6DEWvsICJuNAnX4/ixFWIzxm4YOOIYxbOjDm+njPdAVCW2YbCRWFhRRji
s6WR+Mv67HYe5GLiWy6NycWUiHSET/QrpknP9Zz2Mg676lTjtQ4N32/tM3wL8+43
i4wak1wIoivrYyFS5BSTY5Q5kGnSEbV+Uafg4/0gxjKOSkJZpx7z1ASMpfPWprcR
psGxxLYAKscQM593rbzJBUmuKwyy0AMFwXzkbjr4BeCpy6n/s8gpMzj0HlzqyPQt
TLp4Unu5FlmvjfOlhXD70B3j0wE77jZcedE/evjV0yBa+FG8VZqi/FS6WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJQJtIAk7155DJC8SHubrFWaOeiMB8GA1UdIwQY
MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt
OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl
LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUafSEoWd
OtelDJ6qis7xx7yUl9UBbTaDACZkwqmV/qDkgFB2S5dhq1fH0p1Flnljk9LEsPT9
emc3gYMkNfM4EoAIWWAuL8c1BLjodSft8YtBabb/EPfgAK+dfIKpHEKA5LDLszxP
FzKk6Tow8UgTvZ06h+f3GrKcr41x2oCr7veJ9H3VtKLSCSKok7cdSrUEOVeo5lt+
grJarbOQve49uIy4nzuqQeI59mSU2hDI1KYNHfOPNzipy8d2n/aDoPQXaqVmUh13
PAyM5zHafkEJeaX359i1+TafaE8R4ZrlYhgSW9T4IImFkUNw/rMvT0X1KIWf5XgG
ahZVPNDnkJfnuQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:26 2026 by rpki-client