Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File:                     82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier:          luTl3X81JHKteWT5HjOGELN54Va0Hl4QoR8r4sXnAxo=
Subject key identifier:   C0:11:10:7A:B8:7B:70:0A:82:11:EE:CE:66:6E:F8:E0:DD:BB:08:CD
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer:       /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial:       019EBF5AB6F5103ECCC8243B56A7ADA6602F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number:          08CA
Signing time:             Sat 13 Jun 2026 05:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:53 +0000
Files and hashes:         1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: BmYY3Pi+WfPMoj4TNCKmtYXq2qs0xatZ/3YRzQPL7dw=)
                          2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:b6:f5:10:3e:cc:c8:24:3b:56:a7:ad:a6:60:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
        Validity
            Not Before: Jun 13 05:00:53 2026 GMT
            Not After : Jun 14 05:00:53 2026 GMT
        Subject: CN=c011107ab87b700a8211eece666ef8e0ddbb08cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:d8:b3:29:ac:e8:20:96:51:26:47:88:d0:
                    36:4a:ba:f9:41:5f:3f:8d:0d:72:57:35:44:d1:bb:
                    6a:eb:b0:db:73:c8:20:f9:f8:d2:ce:8f:79:75:98:
                    03:0d:b7:f6:4a:e2:87:bf:68:59:c0:7d:f8:32:74:
                    c7:10:90:44:93:53:53:11:d5:40:ca:19:c4:a8:87:
                    da:e2:8a:e9:84:0f:03:66:6f:c3:c6:96:a9:10:54:
                    f1:12:ea:40:c6:88:81:1a:c5:ef:5e:0f:69:20:f0:
                    7f:79:28:3b:b1:00:d1:ad:71:e9:06:5f:57:60:0c:
                    a4:75:1c:f5:f7:ba:fe:ed:67:13:a9:90:89:4d:a6:
                    2b:17:ff:08:db:18:24:c7:1e:db:86:20:17:73:4a:
                    9b:41:55:db:1a:33:58:20:f1:81:76:e2:e9:3a:32:
                    80:95:c6:ec:0a:38:14:3d:55:6a:3e:07:a7:6c:bc:
                    d2:07:ee:ca:df:80:50:18:29:bc:cf:df:d2:e1:b6:
                    ab:0f:00:43:c3:b6:bf:37:1c:1f:a2:d7:2c:8d:3a:
                    46:a8:56:78:7b:24:dc:89:3c:47:67:a3:0f:e7:5e:
                    de:d9:e1:54:b6:58:ac:1c:4d:a1:36:df:34:d0:43:
                    15:13:94:19:59:1d:8f:6e:b7:ba:56:df:eb:50:7d:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:10:7A:B8:7B:70:0A:82:11:EE:CE:66:6E:F8:E0:DD:BB:08:CD
            X509v3 Authority Key Identifier:
                keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6e:f0:0f:a7:57:66:4f:7d:d7:1c:79:8b:dc:83:b6:5f:42:
         2a:2c:1e:e5:98:7d:b0:10:71:f1:1b:50:3a:5c:62:a3:91:63:
         56:43:7c:23:70:26:6a:7c:8a:72:43:63:f9:79:30:8c:f4:e4:
         93:ad:ea:b4:6a:7d:c1:54:12:79:61:55:4c:42:69:1a:2c:c5:
         0a:4f:84:57:27:d0:80:22:2b:e9:53:bb:33:c4:28:af:ec:e5:
         02:ec:93:9d:e6:8c:21:c1:7d:ee:47:3d:4b:6c:ef:51:8c:45:
         ff:b5:47:63:77:49:2b:15:82:51:46:bc:47:e0:92:55:f1:74:
         c4:1f:fc:58:02:12:74:65:af:20:b9:6d:34:f2:6c:04:55:94:
         a5:f5:42:50:6e:e4:62:81:fc:ea:a8:7c:fd:5a:29:e4:53:6e:
         13:aa:08:19:85:a2:52:7e:e4:0e:43:81:60:6a:12:c6:8d:7f:
         66:0c:7c:e9:f7:9b:20:72:14:82:f2:8a:54:6c:ee:9d:ae:26:
         e9:32:3e:10:01:05:b9:90:0a:96:ff:0b:7e:dc:63:5c:a5:c0:
         f1:fe:c3:c8:f4:64:6e:d5:a1:5b:f6:54:49:25:ef:47:80:0a:
         5d:d5:7f:bc:07:78:89:f3:d9:0b:db:96:f5:53:f0:5b:89:eb:
         5c:a7:59:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wrb1ED7MyCQ7VqetpmAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjBjNzhiMWQ0NjJkNmJhZmRmNzM1OWQzYzIzM2RkYmY5
MjlkMzEwHhcNMjYwNjEzMDUwMDUzWhcNMjYwNjE0MDUwMDUzWjAzMTEwLwYDVQQD
EyhjMDExMTA3YWI4N2I3MDBhODIxMWVlY2U2NjZlZjhlMGRkYmIwOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4zYsyms6CCWUSZHiNA2Srr5QV8/
jQ1yVzVE0btq67Dbc8gg+fjSzo95dZgDDbf2SuKHv2hZwH34MnTHEJBEk1NTEdVA
yhnEqIfa4orphA8DZm/DxpapEFTxEupAxoiBGsXvXg9pIPB/eSg7sQDRrXHpBl9X
YAykdRz197r+7WcTqZCJTaYrF/8I2xgkxx7bhiAXc0qbQVXbGjNYIPGBduLpOjKA
lcbsCjgUPVVqPgenbLzSB+7K34BQGCm8z9/S4barDwBDw7a/NxwfotcsjTpGqFZ4
eyTciTxHZ6MP517e2eFUtlisHE2hNt800EMVE5QZWR2Pbre6Vt/rUH2AqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAREHq4e3AKghHuzmZu+ODduwjNMB8GA1UdIwQY
MBaAFPNgx4sdRi1rr99zWdPCM92/kp0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmIt
OTAwZDFjYTMyZDdlLzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmItOTAwZDFjYTMyZDdl
LzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV27wD6dX
Zk991xx5i9yDtl9CKiwe5Zh9sBBx8RtQOlxio5FjVkN8I3AmanyKckNj+XkwjPTk
k63qtGp9wVQSeWFVTEJpGizFCk+EVyfQgCIr6VO7M8Qor+zlAuyTneaMIcF97kc9
S2zvUYxF/7VHY3dJKxWCUUa8R+CSVfF0xB/8WAISdGWvILltNPJsBFWUpfVCUG7k
YoH86qh8/Vop5FNuE6oIGYWiUn7kDkOBYGoSxo1/Zgx86febIHIUgvKKVGzuna4m
6TI+EAEFuZAKlv8LftxjXKXA8f7DyPRkbtWhW/ZUSSXvR4AKXdV/vAd4ifPZC9uW
9VPwW4nrXKdZBg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:51 2026 by rpki-client