Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File:                     8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier:          8GxQt5dvCsWtd4vnzY0CfanCOGdtLnGuQpl7+Fc7dbg=
Subject key identifier:   47:D6:75:D9:FC:82:D7:CE:E2:E2:E7:58:5C:F5:99:9E:15:33:CC:EF
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer:       /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial:       019EBF5ACC55D26B2513AC09E3C7F38DDD5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number:          15CE
Signing time:             Sat 13 Jun 2026 05:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:59 +0000
Files and hashes:         1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: EOoYkefGYN9PE2/yk54yInyykN71dLvVqskCqYO/IbA=)
                          2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:cc:55:d2:6b:25:13:ac:09:e3:c7:f3:8d:dd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
        Validity
            Not Before: Jun 13 05:00:59 2026 GMT
            Not After : Jun 14 05:00:59 2026 GMT
        Subject: CN=47d675d9fc82d7cee2e2e7585cf5999e1533ccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:70:45:a6:42:b3:ac:2d:7d:39:b3:37:29:
                    9c:f8:0b:6f:cc:10:9b:3b:c7:3c:ad:b6:1a:ae:3b:
                    b5:38:4b:b4:e3:df:96:fb:c5:76:55:1b:0d:a8:24:
                    21:29:30:0a:88:0d:a5:1a:ee:70:1e:ae:58:7e:af:
                    7a:0e:47:4a:c3:c3:0d:1f:f7:46:a9:13:5f:6a:90:
                    fa:2b:fa:07:ba:c8:95:84:61:15:d8:3b:af:2f:99:
                    c6:d4:a5:e3:f7:7f:e7:29:b2:55:e4:98:46:57:f3:
                    ce:cf:e9:57:9c:e2:48:16:17:80:86:75:33:ae:27:
                    15:af:08:67:ed:8d:2f:c5:1b:92:a8:92:13:63:18:
                    e7:ef:e1:44:0a:a4:9c:ca:18:2a:f3:b3:92:50:f3:
                    f9:bc:fc:66:51:79:e1:2a:d7:22:25:af:0a:fa:5b:
                    fd:b5:91:02:ca:ae:9a:46:fd:ac:03:64:b9:ef:c8:
                    87:e1:fc:d3:37:b8:38:b4:7c:2b:42:20:89:41:a9:
                    81:47:a5:11:2c:bf:91:4e:83:42:d9:8e:71:89:2c:
                    9a:97:36:a2:cf:8c:a5:fe:44:4e:74:8c:15:46:45:
                    d8:5b:14:2b:e8:36:27:2b:ed:7b:78:b3:5a:af:f4:
                    ef:ac:66:23:cf:2c:ee:a3:3f:d8:c7:82:ad:ff:9e:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D6:75:D9:FC:82:D7:CE:E2:E2:E7:58:5C:F5:99:9E:15:33:CC:EF
            X509v3 Authority Key Identifier:
                keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:70:7b:fe:59:83:a6:f0:2a:4f:42:e5:5c:54:5f:19:38:4a:
         68:e2:fe:4c:02:43:90:6f:6c:9b:7c:fb:2e:44:ae:46:bf:3c:
         a2:4b:cd:09:e4:bc:4d:8f:ca:92:28:4e:2d:95:fe:1a:e6:c5:
         ef:37:08:58:20:02:67:5a:c0:87:e9:c5:9c:91:69:46:d3:9a:
         68:b7:c0:11:97:63:8e:6a:ee:33:c3:bc:8e:d8:be:8d:e9:8a:
         a8:4b:5c:ea:6c:aa:8b:a5:9b:96:9f:b4:26:a9:08:22:9c:fa:
         a5:f3:83:96:6e:ae:e3:1c:fe:d9:3a:1f:a0:2c:36:e4:87:55:
         27:06:18:c4:40:8e:2b:89:90:fd:f4:2e:79:c5:de:2c:c9:1d:
         f1:68:22:7f:01:73:27:54:57:af:18:d7:67:ff:86:10:7e:0a:
         63:31:45:7e:22:67:68:90:ef:12:cc:4c:c7:92:25:88:9e:a9:
         37:74:fd:1e:f5:5e:61:09:a7:e1:14:6a:35:4a:dd:4d:51:ab:
         a5:5f:5c:3c:96:24:02:05:4f:34:a0:df:a9:ab:5a:c3:a8:38:
         1a:dc:2c:a8:95:69:d4:ff:f9:a6:c1:e6:ab:b2:c2:09:87:69:
         2f:f2:4a:6c:84:f3:32:ad:a6:b4:b5:04:8e:04:53:1b:0c:03:
         6f:0c:90:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WsxV0mslE6wJ48fzjd1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw
MGJhNjgwHhcNMjYwNjEzMDUwMDU5WhcNMjYwNjE0MDUwMDU5WjAzMTEwLwYDVQQD
Eyg0N2Q2NzVkOWZjODJkN2NlZTJlMmU3NTg1Y2Y1OTk5ZTE1MzNjY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruVwRaZCs6wtfTmzNymc+AtvzBCb
O8c8rbYarju1OEu049+W+8V2VRsNqCQhKTAKiA2lGu5wHq5Yfq96DkdKw8MNH/dG
qRNfapD6K/oHusiVhGEV2DuvL5nG1KXj93/nKbJV5JhGV/POz+lXnOJIFheAhnUz
ricVrwhn7Y0vxRuSqJITYxjn7+FECqScyhgq87OSUPP5vPxmUXnhKtciJa8K+lv9
tZECyq6aRv2sA2S578iH4fzTN7g4tHwrQiCJQamBR6URLL+RToNC2Y5xiSyalzai
z4yl/kROdIwVRkXYWxQr6DYnK+17eLNar/TvrGYjzyzuoz/Yx4Kt/55rHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfWddn8gtfO4uLnWFz1mZ4VM8zvMB8GA1UdIwQY
MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt
MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy
LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxnB7/lmD
pvAqT0LlXFRfGThKaOL+TAJDkG9sm3z7LkSuRr88okvNCeS8TY/KkihOLZX+GubF
7zcIWCACZ1rAh+nFnJFpRtOaaLfAEZdjjmruM8O8jti+jemKqEtc6myqi6Wblp+0
JqkIIpz6pfODlm6u4xz+2TofoCw25IdVJwYYxECOK4mQ/fQuecXeLMkd8WgifwFz
J1RXrxjXZ/+GEH4KYzFFfiJnaJDvEsxMx5IliJ6pN3T9HvVeYQmn4RRqNUrdTVGr
pV9cPJYkAgVPNKDfqataw6g4GtwsqJVp1P/5psHmq7LCCYdpL/JKbITzMq2mtLUE
jgRTGwwDbwyQnA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:56 2026 by rpki-client