Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File:                     8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier:          7KYyZo01z9aXXRr6Nhikgz0zhhrgiunM7vysdofbNAU=
Subject key identifier:   46:71:BD:21:CF:F1:6E:B7:C1:E6:36:73:A2:4A:F6:A6:C8:09:2E:F7
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer:       /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial:       019EC111CF061773E9224F11AA25151F1E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number:          1069
Signing time:             Sat 13 Jun 2026 13:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:30 +0000
Files and hashes:         1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: P/lfTGc0rHT4pVGK8sfMqRm8z9RdJyk1dXVVLLGWuWI=)
                          2: hnmsrWHh9cW2sc4LB6owd8gyChI.roa (hash: xlbnosIlGk9ZC7A6OHGfdwXPEb8ekb2nSgNGlRxpL4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:cf:06:17:73:e9:22:4f:11:aa:25:15:1f:1e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
        Validity
            Not Before: Jun 13 13:00:30 2026 GMT
            Not After : Jun 14 13:00:30 2026 GMT
        Subject: CN=4671bd21cff16eb7c1e63673a24af6a6c8092ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:35:20:1f:8f:b5:f0:6c:8e:e7:46:d0:cc:
                    e0:5f:08:dc:f4:87:33:56:d1:4a:c9:38:09:bd:d9:
                    28:02:36:fe:03:17:15:de:61:6f:1f:d5:7e:f2:b5:
                    ef:e7:f9:81:36:52:b8:68:e1:ff:41:32:1d:3a:49:
                    73:2f:0c:d4:ae:ff:78:44:5d:35:cb:3c:ba:ea:74:
                    ef:01:a2:a1:4a:34:5e:13:a9:5a:ca:a5:c2:f7:29:
                    72:37:b7:37:d9:86:17:85:03:de:ba:a5:9a:4e:d4:
                    28:90:13:3f:41:83:e6:ac:2e:d0:f3:af:47:35:e4:
                    ea:30:14:a2:94:12:2b:eb:e5:aa:73:d2:11:a7:48:
                    61:56:69:0d:42:9f:de:a3:ee:c7:b6:58:d7:ff:d3:
                    3c:43:28:48:2a:be:7a:8e:8a:95:a7:48:50:1f:90:
                    0d:da:48:3d:24:66:54:e4:c7:33:54:19:e1:db:13:
                    c9:b2:04:d4:c2:dd:b4:21:ed:31:7b:2f:ab:a1:a7:
                    0a:ca:a6:65:3c:15:70:8b:13:0d:c2:2a:62:15:7a:
                    8d:fa:0a:12:0f:06:70:dd:85:84:4f:2e:72:4b:ac:
                    11:7c:65:12:b1:2b:7e:13:77:b1:a6:85:61:77:06:
                    e1:4b:1c:38:78:93:8d:7f:8b:8a:a1:ad:80:3e:16:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:BD:21:CF:F1:6E:B7:C1:E6:36:73:A2:4A:F6:A6:C8:09:2E:F7
            X509v3 Authority Key Identifier:
                keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7e:2c:48:14:53:ec:22:68:55:31:92:e3:b5:a1:73:2d:63:
         64:6d:5e:ba:e1:a2:c7:7e:9b:5f:4f:d0:0d:10:05:3f:82:27:
         06:0d:1d:49:c2:9c:05:76:c5:c8:f9:42:d6:54:4a:54:36:bf:
         57:ba:cc:39:cd:2a:09:d9:2a:26:0a:48:65:0c:bf:2c:3a:a7:
         57:9a:35:f7:c8:55:90:78:a9:38:5c:cf:72:d5:3c:05:ac:f3:
         df:1f:f6:03:b4:66:6e:48:77:66:5d:ab:3f:cd:d5:dd:7a:39:
         32:e9:97:07:c7:a6:72:6e:f8:da:df:3d:4f:30:49:08:56:ea:
         c6:75:60:0e:40:96:23:27:4c:41:40:cb:a1:f8:36:b9:7d:44:
         d6:19:9f:3b:a2:9f:6c:ff:2f:34:8a:7a:88:1a:99:a6:fe:d9:
         ee:20:ad:fa:8c:2f:f3:9b:fc:f2:c2:28:2b:cc:79:e4:c0:5d:
         af:a5:12:5d:61:5e:ff:ae:48:21:a0:83:3f:6f:f5:4f:d9:3f:
         26:1c:87:03:74:e6:fa:96:0f:86:5e:cd:bd:8d:70:6f:32:65:
         a9:6c:1c:27:2c:ae:69:2c:2f:e9:58:0d:2d:45:30:89:5f:ce:
         c3:d4:ce:a2:c5:24:eb:cd:59:29:22:1b:8b:93:7a:29:e3:9b:
         1c:63:4d:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEc8GF3PpIk8RqiUVHx58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMTUwYjNhOTQxOTYyN2ZkYmNkYjY1ODBlODc4YTFjOWZh
MGNjNTgwHhcNMjYwNjEzMTMwMDMwWhcNMjYwNjE0MTMwMDMwWjAzMTEwLwYDVQQD
Eyg0NjcxYmQyMWNmZjE2ZWI3YzFlNjM2NzNhMjRhZjZhNmM4MDkyZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX81IB+PtfBsjudG0MzgXwjc9Icz
VtFKyTgJvdkoAjb+AxcV3mFvH9V+8rXv5/mBNlK4aOH/QTIdOklzLwzUrv94RF01
yzy66nTvAaKhSjReE6layqXC9ylyN7c32YYXhQPeuqWaTtQokBM/QYPmrC7Q869H
NeTqMBSilBIr6+Wqc9IRp0hhVmkNQp/eo+7HtljX/9M8QyhIKr56joqVp0hQH5AN
2kg9JGZU5MczVBnh2xPJsgTUwt20Ie0xey+roacKyqZlPBVwixMNwipiFXqN+goS
DwZw3YWETy5yS6wRfGUSsSt+E3expoVhdwbhSxw4eJONf4uKoa2APhYzMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZxvSHP8W63weY2c6JK9qbICS73MB8GA1UdIwQY
MBaAFPAVCzqUGWJ/2822WA6HihyfoMxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMt
ZWRjNWFiOTk1ZGJmLzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMtZWRjNWFiOTk1ZGJm
LzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAln4sSBRT
7CJoVTGS47Whcy1jZG1euuGix36bX0/QDRAFP4InBg0dScKcBXbFyPlC1lRKVDa/
V7rMOc0qCdkqJgpIZQy/LDqnV5o198hVkHipOFzPctU8Bazz3x/2A7Rmbkh3Zl2r
P83V3Xo5MumXB8emcm742t89TzBJCFbqxnVgDkCWIydMQUDLofg2uX1E1hmfO6Kf
bP8vNIp6iBqZpv7Z7iCt+owv85v88sIoK8x55MBdr6USXWFe/65IIaCDP2/1T9k/
JhyHA3Tm+pYPhl7NvY1wbzJlqWwcJyyuaSwv6VgNLUUwiV/Ow9TOosUk681ZKSIb
i5N6KeObHGNNfA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:35:04 2026 by rpki-client