Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File:                     HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier:          MrShCU9Yec2hSGZkyFshM1MilF71WM8Ap9BX4kbZXcg=
Subject key identifier:   D8:1D:BC:8B:8D:28:86:43:D7:02:59:B2:EC:F3:A8:B0:66:D8:9C:4C
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer:       /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial:       019EC14993C11CD915DBBD90CF17316FB663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number:          04A8
Signing time:             Sat 13 Jun 2026 14:01:24 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:24 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:24 +0000
Files and hashes:         1: D1EmtE1k7u4f07ze8ohcNIZrJqY.roa (hash: 58n5LdTsnNqmYJwdVt7TBvDZfGrTorfZcjCIJKhkX18=)
                          2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: P0mrkIQPAzk0Xnxj5aBQiAe1kNfA5Rid1HVWyfpRSuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:93:c1:1c:d9:15:db:bd:90:cf:17:31:6f:b6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
        Validity
            Not Before: Jun 13 14:01:24 2026 GMT
            Not After : Jun 14 14:01:24 2026 GMT
        Subject: CN=d81dbc8b8d288643d70259b2ecf3a8b066d89c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:19:2b:d8:53:29:47:fa:c5:87:4f:4c:70:
                    f2:18:5f:63:f2:9e:23:75:3d:57:4e:e9:a6:79:ba:
                    e2:d4:86:e0:12:ec:d9:ba:f4:a0:66:93:63:32:e2:
                    75:1e:91:ba:85:22:18:0f:ca:f7:bd:d2:45:ec:23:
                    49:d2:b9:e0:db:04:c2:f8:a6:d0:e1:fb:0b:fd:81:
                    6b:92:cb:bc:c0:b7:74:bb:74:dc:15:88:f7:2d:3f:
                    72:8f:ef:15:31:1f:33:21:e9:c5:11:40:33:be:72:
                    a5:1e:94:fc:2b:f1:9e:3b:07:d3:8e:7a:c4:c3:0b:
                    a2:56:04:16:af:5b:1a:3b:57:ca:53:31:73:21:d8:
                    48:2d:cb:8c:07:e1:27:e3:49:3f:c0:bd:bd:31:82:
                    45:fc:77:8d:13:a2:90:1a:db:66:c6:d5:77:54:93:
                    af:cf:59:31:4f:38:1b:1b:85:8c:f5:92:65:54:72:
                    e8:9a:4f:70:48:e3:f3:2a:fd:92:20:c3:81:2d:0a:
                    c0:71:10:f6:9b:0a:f7:36:d7:99:ef:f0:e3:37:dd:
                    30:19:c6:2a:76:58:b0:04:48:30:de:05:14:ca:0f:
                    06:4b:b5:53:a2:01:13:2a:a8:bc:41:c8:22:7c:34:
                    fd:42:e2:fa:e7:82:fd:da:0b:31:18:b9:ee:77:45:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1D:BC:8B:8D:28:86:43:D7:02:59:B2:EC:F3:A8:B0:66:D8:9C:4C
            X509v3 Authority Key Identifier:
                keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1a:9c:63:53:b3:55:05:15:05:f2:43:db:6e:69:e4:a8:cb:
         0c:49:e4:02:7e:7c:24:b2:a9:8f:0f:63:68:6c:b4:34:91:72:
         7b:34:c3:67:33:0e:d3:db:2a:dd:9d:e9:97:e5:e2:78:cb:47:
         14:6e:c9:44:20:63:c0:ab:27:9c:30:da:81:95:23:57:6d:b4:
         eb:e1:b3:58:0b:08:44:e5:5e:9f:80:45:86:7b:3a:22:e6:6f:
         60:8e:14:e5:27:d9:cc:87:57:03:b0:83:ad:b8:5b:28:98:f6:
         d6:49:f1:ee:9d:1a:d2:93:b9:9f:1f:77:4e:67:0b:d8:99:90:
         7f:67:88:cd:18:ea:3b:a5:cf:a8:ba:fa:d8:78:dd:7d:27:30:
         db:20:2c:ed:19:10:9d:1f:ae:5c:4d:72:fa:9c:a4:2c:3c:90:
         f2:84:04:a9:06:67:f2:34:fc:75:31:d9:de:1d:27:75:db:de:
         af:96:b2:cc:8c:13:5b:c6:99:28:6c:97:d4:79:e7:a8:a8:2f:
         9a:8a:08:56:f8:91:8b:08:24:51:8c:58:18:55:68:b6:6f:45:
         d8:27:85:9a:9f:e7:2e:72:48:a9:c6:36:d5:2c:5c:d9:7e:33:
         59:dd:bd:7e:5e:13:a7:01:11:b0:96:54:a2:4d:fa:b4:75:e0:
         27:88:43:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSZPBHNkV272Qzxcxb7ZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5
N2M1YzMwHhcNMjYwNjEzMTQwMTI0WhcNMjYwNjE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhkODFkYmM4YjhkMjg4NjQzZDcwMjU5YjJlY2YzYThiMDY2ZDg5YzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHIZK9hTKUf6xYdPTHDyGF9j8p4j
dT1XTummebri1IbgEuzZuvSgZpNjMuJ1HpG6hSIYD8r3vdJF7CNJ0rng2wTC+KbQ
4fsL/YFrksu8wLd0u3TcFYj3LT9yj+8VMR8zIenFEUAzvnKlHpT8K/GeOwfTjnrE
wwuiVgQWr1saO1fKUzFzIdhILcuMB+En40k/wL29MYJF/HeNE6KQGttmxtV3VJOv
z1kxTzgbG4WM9ZJlVHLomk9wSOPzKv2SIMOBLQrAcRD2mwr3NteZ7/DjN90wGcYq
dliwBEgw3gUUyg8GS7VTogETKqi8QcgifDT9QuL654L92gsxGLnud0W5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgdvIuNKIZD1wJZsuzzqLBm2JxMMB8GA1UdIwQY
MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt
YjZkYzJiN2JmMzBhLzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh
LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRqcY1Oz
VQUVBfJD225p5KjLDEnkAn58JLKpjw9jaGy0NJFyezTDZzMO09sq3Z3pl+XieMtH
FG7JRCBjwKsnnDDagZUjV2206+GzWAsIROVen4BFhns6IuZvYI4U5SfZzIdXA7CD
rbhbKJj21knx7p0a0pO5nx93TmcL2JmQf2eIzRjqO6XPqLr62HjdfScw2yAs7RkQ
nR+uXE1y+pykLDyQ8oQEqQZn8jT8dTHZ3h0nddver5ayzIwTW8aZKGyX1HnnqKgv
mooIVviRiwgkUYxYGFVotm9F2CeFmp/nLnJIqcY21Sxc2X4zWd29fl4TpwERsJZU
ok36tHXgJ4hDoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:14:13 2026 by rpki-client