Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File:                     S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier:          qtAhfK2zc+LAPxw5cewtnjinAMvdPKT3C5dDd3lYNf0=
Subject key identifier:   61:87:D4:5A:BC:00:1D:89:26:66:31:00:78:15:DD:B9:2F:CB:2B:49
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer:       /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial:       019ED49A3C2CE3F439CC3192175FC053792D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number:          0900
Signing time:             Wed 17 Jun 2026 08:02:17 +0000
Manifest this update:     Wed 17 Jun 2026 08:02:17 +0000
Manifest next update:     Thu 18 Jun 2026 08:02:17 +0000
Files and hashes:         1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
                          2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: HQyK6q+7PRgrdKnOMh/71LRPEY24AWU0iMAZMT6y41Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:9a:3c:2c:e3:f4:39:cc:31:92:17:5f:c0:53:79:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
        Validity
            Not Before: Jun 17 08:02:17 2026 GMT
            Not After : Jun 18 08:02:17 2026 GMT
        Subject: CN=6187d45abc001d89266631007815ddb92fcb2b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:b9:04:f5:8d:d5:a2:03:03:5c:da:aa:19:
                    4f:4a:5c:2e:e0:21:37:1a:ca:bc:84:cd:93:41:28:
                    b7:6f:dc:71:59:e9:c9:cb:2f:ea:3d:10:2e:e4:52:
                    da:d7:17:4e:96:52:e8:6c:1d:7e:2d:51:92:0e:6d:
                    0d:53:73:de:35:87:aa:b3:e5:73:db:18:6e:5f:c1:
                    25:f8:5e:91:82:2e:52:9e:4d:7f:8b:ff:c8:c7:73:
                    e5:40:d5:f6:0e:f3:5d:98:36:ed:e4:78:9a:b2:0e:
                    ca:94:57:a9:55:95:e2:0c:2c:2b:85:2c:4f:56:61:
                    ca:2f:56:ff:61:a2:ba:bb:8e:25:81:79:4b:bc:ca:
                    d5:b1:39:6f:2a:a6:72:dd:f6:eb:4c:c5:2f:f4:e2:
                    61:ca:9f:db:91:f5:25:ac:3b:26:9b:1f:f9:2b:7d:
                    1d:75:1c:c5:bf:a9:e7:23:21:b4:b7:a6:10:61:7a:
                    d2:34:ab:59:b9:0f:fd:2d:72:7a:c0:57:39:b3:90:
                    78:5a:c2:18:30:b5:f1:9e:3c:62:9d:94:8b:8e:32:
                    46:17:26:bf:b6:10:b6:e9:70:36:24:e7:7e:e3:09:
                    6e:c4:fd:e5:a4:81:25:64:6f:c9:19:bb:87:0e:a5:
                    b0:96:43:9b:e8:f6:fd:f9:f1:4f:63:dd:31:26:58:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:87:D4:5A:BC:00:1D:89:26:66:31:00:78:15:DD:B9:2F:CB:2B:49
            X509v3 Authority Key Identifier:
                keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:fc:13:25:43:aa:c8:96:46:e4:b1:00:79:80:d6:9c:b1:f9:
         2e:31:b0:d7:91:0f:e9:32:1f:71:c4:5e:90:ae:d6:29:7b:77:
         8e:53:69:e3:77:06:9e:5f:42:95:ea:00:c9:63:32:a7:26:b7:
         eb:1a:d0:94:d0:82:44:7a:52:c0:15:ce:9d:95:25:de:c9:6a:
         6e:c9:3b:c9:75:cf:8c:85:6b:d7:5a:8c:15:4f:fe:0a:a6:ad:
         0d:8c:37:f6:16:05:99:d7:84:cf:66:6f:56:77:63:8e:ed:11:
         cb:55:76:dc:8d:c5:ca:3c:ce:e5:1c:57:58:b0:d6:85:85:27:
         87:d8:40:cc:f3:0c:78:f1:f1:2a:6b:ad:67:dd:b7:57:0f:29:
         29:73:69:48:c0:92:bc:19:46:92:95:1c:de:2c:51:df:80:42:
         34:76:b9:e4:2d:3b:12:34:e8:2a:3d:16:66:47:ec:91:43:fc:
         fa:30:99:fc:f7:38:0a:86:4c:88:a2:2f:7b:65:68:d9:af:c3:
         b5:bf:62:a5:c2:b6:af:86:72:00:ac:24:2b:f3:4e:6a:2f:d8:
         d2:48:7e:75:ed:a2:fa:7e:f5:2a:64:d0:e0:32:87:db:cd:5d:
         a7:85:c4:ed:cb:47:de:33:78:9c:17:82:c8:a9:1a:79:fb:79:
         26:84:4f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Umjws4/Q5zDGSF1/AU3ktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWYzMDYyNDIxMGMwMGQzYTg2ZGZkNmM4MDEwNjEyYmIx
YjEyYTAwHhcNMjYwNjE3MDgwMjE3WhcNMjYwNjE4MDgwMjE3WjAzMTEwLwYDVQQD
Eyg2MTg3ZDQ1YWJjMDAxZDg5MjY2NjMxMDA3ODE1ZGRiOTJmY2IyYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJS5BPWN1aIDA1zaqhlPSlwu4CE3
Gsq8hM2TQSi3b9xxWenJyy/qPRAu5FLa1xdOllLobB1+LVGSDm0NU3PeNYeqs+Vz
2xhuX8El+F6Rgi5Snk1/i//Ix3PlQNX2DvNdmDbt5Hiasg7KlFepVZXiDCwrhSxP
VmHKL1b/YaK6u44lgXlLvMrVsTlvKqZy3fbrTMUv9OJhyp/bkfUlrDsmmx/5K30d
dRzFv6nnIyG0t6YQYXrSNKtZuQ/9LXJ6wFc5s5B4WsIYMLXxnjxinZSLjjJGFya/
thC26XA2JOd+4wluxP3lpIElZG/JGbuHDqWwlkOb6Pb9+fFPY90xJljnWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGH1Fq8AB2JJmYxAHgV3bkvyytJMB8GA1UdIwQY
MBaAFEvvMGJCEMANOobf1sgBBhK7GxKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2Qt
Nzg5MjdmYzc4ZTdkLzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2QtNzg5MjdmYzc4ZTdk
LzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/wTJUOq
yJZG5LEAeYDWnLH5LjGw15EP6TIfccRekK7WKXt3jlNp43cGnl9CleoAyWMypya3
6xrQlNCCRHpSwBXOnZUl3slqbsk7yXXPjIVr11qMFU/+CqatDYw39hYFmdeEz2Zv
Vndjju0Ry1V23I3FyjzO5RxXWLDWhYUnh9hAzPMMePHxKmutZ923Vw8pKXNpSMCS
vBlGkpUc3ixR34BCNHa55C07EjToKj0WZkfskUP8+jCZ/Pc4CoZMiKIve2Vo2a/D
tb9ipcK2r4ZyAKwkK/NOai/Y0kh+de2i+n71KmTQ4DKH281dp4XE7ctH3jN4nBeC
yKkaeft5JoRPdA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 14:10:11 2026 by rpki-client