Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
File:                     rd0Ub21v9nQIRevKnN_kDHFViD0.mft (raw, json)
Hash identifier:          egfnvNQ+NtBNZOQ6uHA8eNis1LdrtAX5Ur0LcGsf9Ls=
Subject key identifier:   07:42:09:2B:C3:7E:2F:94:8A:47:A8:7E:74:7D:E5:C1:66:8A:67:5A
Authority key identifier: AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D
Certificate issuer:       /CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
Certificate serial:       019EBDDA3ECA12CB1CCC240A24E1F92B672E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
Manifest number:          8C
Signing time:             Fri 12 Jun 2026 22:00:57 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:57 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:57 +0000
Files and hashes:         1: d8grn2wXk9vmfr4CPR5GIGOguek.asa (hash: GujxxEhlnqGN/956zXiB0ryPh7UxwhtfLKl2I7TE640=)
                          2: rd0Ub21v9nQIRevKnN_kDHFViD0.crl (hash: 0Y1l5aVqB4GhXiRQPepskiFDEH5vzR/QIDAZqA8B22g=)
                          3: zzfUeVmLO32C_ObHNHjJVH4U69M.roa (hash: ZfmRsyH3zUInl36WXMdR2VHEdQrA8f5h8j3VKz/Y+TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:3e:ca:12:cb:1c:cc:24:0a:24:e1:f9:2b:67:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
        Validity
            Not Before: Jun 12 22:00:57 2026 GMT
            Not After : Jun 13 22:00:57 2026 GMT
        Subject: CN=0742092bc37e2f948a47a87e747de5c1668a675a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:94:ba:b3:1c:a1:d8:19:e0:b8:8c:b4:da:
                    c1:74:bf:3d:1b:b7:fe:fb:41:d0:52:9e:e9:2e:e8:
                    e2:10:83:7c:27:59:52:7a:30:24:29:e4:1a:37:c0:
                    94:60:be:4f:71:4a:2b:b1:bd:44:67:b2:30:fb:c7:
                    e1:41:ab:ab:d8:25:b8:36:07:80:15:cf:59:03:fb:
                    b4:b0:54:e2:a5:4c:af:33:cd:c1:75:a8:cd:eb:8c:
                    92:4f:c9:1f:31:26:63:3c:a6:be:f4:9f:32:e3:57:
                    4d:98:7b:cd:0b:d4:16:bf:01:32:dc:45:9a:4a:d5:
                    41:34:4d:bd:8f:af:11:6d:2d:8f:85:aa:7c:0d:c1:
                    a2:26:48:10:8b:04:8a:7b:29:75:ba:1b:9d:ab:4a:
                    29:84:8c:04:6f:f1:00:bb:eb:07:15:b1:b1:4e:26:
                    86:52:ac:cf:3c:b7:25:87:87:9f:5b:e6:6e:53:25:
                    59:55:52:3d:a7:3a:25:86:64:09:0f:60:fc:04:f2:
                    e1:2a:7c:85:33:03:35:a4:74:01:7e:f3:9a:0b:2b:
                    b2:90:f8:ac:72:d7:bf:a6:d1:75:c0:4f:e9:f8:3d:
                    00:5a:c7:94:dc:1c:f4:2b:31:2a:f4:dc:d2:53:01:
                    81:4c:16:d5:c4:a2:97:66:96:00:a8:47:36:e1:9d:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:42:09:2B:C3:7E:2F:94:8A:47:A8:7E:74:7D:E5:C1:66:8A:67:5A
            X509v3 Authority Key Identifier:
                keyid:AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:cc:63:17:ae:34:91:e5:75:88:58:b7:17:74:3c:3b:ba:
         71:37:e1:2b:90:f1:91:3a:a5:aa:97:7f:88:15:99:3c:12:c3:
         d9:17:36:6a:2d:2f:e2:2f:c7:cb:45:a3:d4:9d:5b:d8:8b:ac:
         de:3c:45:91:05:89:50:25:8f:bb:09:17:2c:1b:af:76:78:c5:
         ae:de:c7:43:d4:a9:09:0f:2f:35:5a:75:9d:f7:73:30:a2:80:
         ba:8d:fb:01:4b:7b:a0:9d:a3:18:5e:0e:31:50:0d:88:2d:16:
         0b:9b:bc:34:fb:21:ac:af:9a:73:59:bc:2e:70:5c:54:20:9f:
         d3:08:e5:95:87:4c:5c:de:ff:72:8d:e1:64:34:ba:cb:8b:23:
         95:64:0e:d8:d3:dd:3b:11:6f:3f:75:4e:c6:95:15:ca:ae:9a:
         55:35:3b:ab:0d:5b:7e:5f:32:b2:7f:a1:09:7b:a0:45:f1:dd:
         f0:b4:bd:e2:cd:ac:0f:97:ff:01:d2:9c:26:3b:6a:26:e9:34:
         ec:76:61:5f:ab:ee:39:74:35:96:c7:c3:af:56:ef:0c:92:72:
         52:7d:44:68:90:aa:97:fd:82:d8:49:7d:0d:f7:d1:8e:b2:fa:
         61:e2:88:29:21:f2:92:a7:aa:9c:9e:ee:85:97:4c:6d:a4:e1:
         7f:65:d4:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692j7KEssczCQKJOH5K2cuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZGQxNDZmNmQ2ZmY2NzQwODQ1ZWJjYTljZGZlNDBjNzE1
NTg4M2QwHhcNMjYwNjEyMjIwMDU3WhcNMjYwNjEzMjIwMDU3WjAzMTEwLwYDVQQD
EygwNzQyMDkyYmMzN2UyZjk0OGE0N2E4N2U3NDdkZTVjMTY2OGE2NzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKWUurMcodgZ4LiMtNrBdL89G7f+
+0HQUp7pLujiEIN8J1lSejAkKeQaN8CUYL5PcUorsb1EZ7Iw+8fhQaur2CW4NgeA
Fc9ZA/u0sFTipUyvM83BdajN64yST8kfMSZjPKa+9J8y41dNmHvNC9QWvwEy3EWa
StVBNE29j68RbS2Phap8DcGiJkgQiwSKeyl1uhudq0ophIwEb/EAu+sHFbGxTiaG
UqzPPLclh4efW+ZuUyVZVVI9pzolhmQJD2D8BPLhKnyFMwM1pHQBfvOaCyuykPis
cte/ptF1wE/p+D0AWseU3Bz0KzEq9NzSUwGBTBbVxKKXZpYAqEc24Z0o9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdCCSvDfi+UikeofnR95cFmimdaMB8GA1UdIwQY
MBaAFK3dFG9tb/Z0CEXrypzf5AxxVYg9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmQwVWIyMXY5blFJUmV2S25OX2tESEZWaUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kZTc2NTUtODY3Zi00MDNlLWI3NWUt
MTNlODYxMTNkNzVkLzEvcmQwVWIyMXY5blFJUmV2S25OX2tESEZWaUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kZTc2NTUtODY3Zi00MDNlLWI3NWUtMTNlODYxMTNkNzVk
LzEvcmQwVWIyMXY5blFJUmV2S25OX2tESEZWaUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgv/MYxeu
NJHldYhYtxd0PDu6cTfhK5DxkTqlqpd/iBWZPBLD2Rc2ai0v4i/Hy0Wj1J1b2Ius
3jxFkQWJUCWPuwkXLBuvdnjFrt7HQ9SpCQ8vNVp1nfdzMKKAuo37AUt7oJ2jGF4O
MVANiC0WC5u8NPshrK+ac1m8LnBcVCCf0wjllYdMXN7/co3hZDS6y4sjlWQO2NPd
OxFvP3VOxpUVyq6aVTU7qw1bfl8ysn+hCXugRfHd8LS94s2sD5f/AdKcJjtqJuk0
7HZhX6vuOXQ1lsfDr1bvDJJyUn1EaJCql/2C2El9DffRjrL6YeKIKSHykqeqnJ7u
hZdMbaThf2XUng==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:14 2026 by rpki-client