Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File:                     8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier:          F8i9B0xxnpU8Ak4Dnf5jTis35wMstBCAoOwZHYpxopQ=
Subject key identifier:   F1:91:C4:6A:74:5F:9C:47:C6:53:0A:AD:CD:19:CC:F4:B6:D8:24:43
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer:       /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial:       019EBE7F2F86E83E3B7348B2585D3C68195E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 01:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:06 +0000
Files and hashes:         1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: 9CxxHQCefcDMlcb5GZF+R1YhfgyKphD547zZYytDJLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:2f:86:e8:3e:3b:73:48:b2:58:5d:3c:68:19:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
        Validity
            Not Before: Jun 13 01:01:06 2026 GMT
            Not After : Jun 14 01:01:06 2026 GMT
        Subject: CN=f191c46a745f9c47c6530aadcd19ccf4b6d82443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:be:be:9b:44:6a:de:31:82:15:ac:40:6a:
                    e6:37:56:6a:2f:cb:3b:78:05:4d:5d:cb:a3:56:77:
                    be:c0:e4:99:1e:b7:ce:61:35:a9:42:97:43:70:c9:
                    db:8a:0e:1b:fe:db:d2:40:0a:03:87:78:fc:5a:2c:
                    57:f9:b8:14:d5:cb:2c:ab:07:70:70:c3:9a:58:04:
                    95:aa:0e:33:29:4f:08:c3:fa:7b:a0:e2:ad:e0:dd:
                    c5:8c:37:8d:37:18:01:b6:ad:51:a4:4f:e3:7f:7d:
                    54:cb:30:c2:f3:fa:02:6c:53:07:81:15:10:44:1e:
                    7d:96:d8:2f:c8:a8:eb:8e:d0:85:ba:95:64:60:21:
                    dd:26:cc:b9:af:b9:d2:44:4d:02:52:df:25:3a:1b:
                    89:ce:6c:85:a1:18:f5:4a:f7:ac:42:2b:03:c7:cd:
                    36:0e:79:f6:19:f0:21:7f:9e:0e:12:41:26:67:f8:
                    ed:fd:1f:fa:07:5a:14:dc:29:1b:03:72:46:d6:f4:
                    91:28:55:c9:ff:2f:01:ff:f6:b8:85:52:a5:6b:35:
                    61:25:ec:58:dc:9e:f5:81:13:a9:20:44:df:6a:a4:
                    9b:bf:f5:4b:d8:30:a8:15:00:93:41:7d:ac:81:f2:
                    c3:38:6d:64:25:1a:b3:70:b1:c1:1e:9a:57:00:c8:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:C4:6A:74:5F:9C:47:C6:53:0A:AD:CD:19:CC:F4:B6:D8:24:43
            X509v3 Authority Key Identifier:
                keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:b6:92:16:11:09:7c:57:30:a6:e6:aa:d2:37:d8:4b:9c:
         b1:1d:e7:6d:df:03:94:cd:15:56:de:73:f4:00:98:f3:c3:7b:
         a3:09:45:07:5a:71:c1:38:c3:66:1f:83:1f:fd:1e:54:f7:a7:
         b1:fa:1d:63:e7:2b:b4:8d:8d:7b:b3:4c:68:c7:1c:d3:0a:b1:
         2e:1f:a2:19:98:2a:ab:2b:69:87:76:28:8b:44:d3:60:c5:2c:
         88:41:32:da:02:fa:c5:d5:b1:f1:9c:cd:83:66:75:7d:79:f5:
         45:d5:e4:67:9d:95:15:3a:8d:9e:4b:95:f7:a7:9c:de:6e:0d:
         09:8c:d2:53:be:3e:e7:e1:b0:5a:37:04:23:96:aa:ae:7f:dd:
         62:5e:19:69:ce:15:ea:e4:82:05:b3:d8:12:9d:f7:8a:14:47:
         70:45:ec:d5:49:a1:fe:08:7f:26:57:b0:24:68:db:4e:eb:47:
         88:e8:6a:51:8e:d3:e6:6c:8f:31:43:f6:a9:56:1f:2f:d1:17:
         d7:7f:01:99:bd:46:2b:49:8e:6f:e9:46:d7:00:f2:de:bc:92:
         74:6c:b7:d9:70:39:cf:13:e6:6a:67:f7:ab:db:fb:45:fa:cc:
         e6:5e:e9:a4:f7:61:cf:0d:73:e8:53:13:8f:be:87:08:e2:7c:
         de:50:5c:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+fy+G6D47c0iyWF08aBleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2Y3YmVmNTQ3ZDAwMjUzMzhhYTZiNmFlZTdhYTFkYmUx
NGFlMmEwHhcNMjYwNjEzMDEwMTA2WhcNMjYwNjE0MDEwMTA2WjAzMTEwLwYDVQQD
EyhmMTkxYzQ2YTc0NWY5YzQ3YzY1MzBhYWRjZDE5Y2NmNGI2ZDgyNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC++vptEat4xghWsQGrmN1ZqL8s7
eAVNXcujVne+wOSZHrfOYTWpQpdDcMnbig4b/tvSQAoDh3j8WixX+bgU1cssqwdw
cMOaWASVqg4zKU8Iw/p7oOKt4N3FjDeNNxgBtq1RpE/jf31UyzDC8/oCbFMHgRUQ
RB59ltgvyKjrjtCFupVkYCHdJsy5r7nSRE0CUt8lOhuJzmyFoRj1SvesQisDx802
Dnn2GfAhf54OEkEmZ/jt/R/6B1oU3CkbA3JG1vSRKFXJ/y8B//a4hVKlazVhJexY
3J71gROpIETfaqSbv/VL2DCoFQCTQX2sgfLDOG1kJRqzcLHBHppXAMjHCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGRxGp0X5xHxlMKrc0ZzPS22CRDMB8GA1UdIwQY
MBaAFPA/e+9UfQAlM4qmtq7nqh2+FK4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgt
ZDVjMjc0ZmVmOTY0LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgtZDVjMjc0ZmVmOTY0
LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARp22khYR
CXxXMKbmqtI32EucsR3nbd8DlM0VVt5z9ACY88N7owlFB1pxwTjDZh+DH/0eVPen
sfodY+crtI2Ne7NMaMcc0wqxLh+iGZgqqytph3Yoi0TTYMUsiEEy2gL6xdWx8ZzN
g2Z1fXn1RdXkZ52VFTqNnkuV96ec3m4NCYzSU74+5+GwWjcEI5aqrn/dYl4Zac4V
6uSCBbPYEp33ihRHcEXs1Umh/gh/JlewJGjbTutHiOhqUY7T5myPMUP2qVYfL9EX
138Bmb1GK0mOb+lG1wDy3rySdGy32XA5zxPmamf3q9v7RfrM5l7ppPdhzw1z6FMT
j76HCOJ83lBcNg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:52 2026 by rpki-client