Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File:                     8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier:          CPzdwBgDbYGrz5bXOxQTbHguoBwMm6fPvaSNUMdYt1Q=
Subject key identifier:   31:09:EB:F1:8D:76:35:34:CD:2E:05:C0:4F:7C:52:FE:FB:A1:C7:13
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer:       /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial:       019EBFFF345584893A0FB80E28C61D59E55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number:          0ACC
Signing time:             Sat 13 Jun 2026 08:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:33 +0000
Files and hashes:         1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: BOtUOWd5THEnEFNj+5zasYbMQqTzVWftYjbinCog1Bk=)
                          2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
                          3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:34:55:84:89:3a:0f:b8:0e:28:c6:1d:59:e5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
        Validity
            Not Before: Jun 13 08:00:33 2026 GMT
            Not After : Jun 14 08:00:33 2026 GMT
        Subject: CN=3109ebf18d763534cd2e05c04f7c52fefba1c713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:2a:fb:3a:84:1a:f4:71:a1:dc:a3:25:1f:
                    35:fc:5d:df:f8:d9:02:4f:95:a1:8a:95:9f:1d:4c:
                    ac:45:e5:d5:44:87:cc:11:0f:9a:67:3e:e0:50:67:
                    9e:31:8f:a9:bb:ec:7f:f3:84:f2:1f:58:2b:2b:64:
                    ca:6f:52:ae:3a:47:38:9e:00:e4:3f:c9:33:84:35:
                    31:15:64:c4:fa:b3:3e:5e:98:db:68:92:e4:53:d2:
                    13:50:52:6f:7f:d7:a8:21:e4:46:6b:4d:73:b6:fd:
                    ca:06:34:e9:1c:1d:aa:cf:7d:d8:d8:f7:c9:7d:09:
                    cf:9e:bc:cf:17:4b:0e:de:ee:b4:1b:39:f5:9a:52:
                    5b:e2:77:8c:db:ef:d4:55:46:ad:3a:f1:38:89:66:
                    5f:f9:39:15:39:a2:93:35:0d:bd:8b:d7:78:fd:e9:
                    57:f1:9a:b5:89:10:03:5f:9e:6e:f5:e0:8e:c0:59:
                    07:79:05:b6:de:7d:69:f2:c8:c0:7c:09:5c:fa:2d:
                    48:e9:8b:23:87:bd:91:db:2e:b7:b5:e0:8e:f1:d8:
                    13:6e:50:2e:e5:d4:15:5e:e3:d2:d7:2b:b5:45:d3:
                    d3:e6:19:0d:01:c1:06:88:49:e4:c5:e6:3a:01:cc:
                    ca:eb:8a:8c:3b:65:35:ab:d7:0d:20:0b:56:a2:9e:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:EB:F1:8D:76:35:34:CD:2E:05:C0:4F:7C:52:FE:FB:A1:C7:13
            X509v3 Authority Key Identifier:
                keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:d9:d5:4e:0b:aa:2d:76:fc:7f:ec:39:ea:87:13:6a:a7:
         80:04:11:24:88:8c:4e:26:23:c2:26:42:54:18:8f:bc:2d:53:
         16:4f:b1:89:2e:a4:71:10:d1:c3:09:6f:fc:b9:22:60:0c:56:
         44:fc:76:7c:34:a6:35:7c:67:a6:c6:35:c0:6e:bb:5e:28:f7:
         77:1e:e9:a9:8f:6b:9d:90:da:47:68:0a:ec:3f:12:8a:9e:b3:
         28:84:cf:ea:aa:3f:fd:2f:0d:56:e8:0c:b4:57:78:ee:1f:24:
         a2:d8:ae:24:0d:ae:e4:b7:c5:da:6f:2c:8e:c2:48:4a:12:48:
         5b:fd:a2:81:84:c7:1b:dd:bf:f8:58:17:53:5d:cd:2b:cf:e2:
         f0:d5:f3:fd:64:eb:44:48:6e:a6:c1:66:5c:5e:da:f5:be:80:
         7d:d0:1f:30:55:c1:83:fb:49:d2:7f:eb:12:89:3d:73:eb:d8:
         23:a6:bb:b6:54:40:fa:78:fc:7f:04:ab:a8:bb:d8:e2:69:ce:
         6b:a0:8d:a4:d3:36:be:6e:5d:e0:1c:36:41:e9:53:16:80:a0:
         14:4d:ca:c6:eb:5d:20:08:ad:d1:dc:98:90:8c:7e:51:11:c2:
         6a:c2:4c:43:44:48:03:f4:c7:9c:33:a8:ac:fe:e2:09:2b:5a:
         7c:ba:12:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//zRVhIk6D7gOKMYdWeVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGJmNDYzMDNmZjU0YTUwNWY1MzNjNTU0MjUxOTIzZTQx
ZjU5MjYwHhcNMjYwNjEzMDgwMDMzWhcNMjYwNjE0MDgwMDMzWjAzMTEwLwYDVQQD
EygzMTA5ZWJmMThkNzYzNTM0Y2QyZTA1YzA0ZjdjNTJmZWZiYTFjNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq60q+zqEGvRxodyjJR81/F3f+NkC
T5WhipWfHUysReXVRIfMEQ+aZz7gUGeeMY+pu+x/84TyH1grK2TKb1KuOkc4ngDk
P8kzhDUxFWTE+rM+XpjbaJLkU9ITUFJvf9eoIeRGa01ztv3KBjTpHB2qz33Y2PfJ
fQnPnrzPF0sO3u60Gzn1mlJb4neM2+/UVUatOvE4iWZf+TkVOaKTNQ29i9d4/elX
8Zq1iRADX55u9eCOwFkHeQW23n1p8sjAfAlc+i1I6Ysjh72R2y63teCO8dgTblAu
5dQVXuPS1yu1RdPT5hkNAcEGiEnkxeY6AczK64qMO2U1q9cNIAtWop5gjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEJ6/GNdjU0zS4FwE98Uv77occTMB8GA1UdIwQY
MBaAFPIL9GMD/1SlBfUzxVQlGSPkH1kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTct
YzM2OTQwODhmMzRhLzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTctYzM2OTQwODhmMzRh
LzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM53Z1U4L
qi12/H/sOeqHE2qngAQRJIiMTiYjwiZCVBiPvC1TFk+xiS6kcRDRwwlv/LkiYAxW
RPx2fDSmNXxnpsY1wG67Xij3dx7pqY9rnZDaR2gK7D8Sip6zKITP6qo//S8NVugM
tFd47h8kotiuJA2u5LfF2m8sjsJIShJIW/2igYTHG92/+FgXU13NK8/i8NXz/WTr
REhupsFmXF7a9b6AfdAfMFXBg/tJ0n/rEok9c+vYI6a7tlRA+nj8fwSrqLvY4mnO
a6CNpNM2vm5d4Bw2QelTFoCgFE3KxutdIAit0dyYkIx+URHCasJMQ0RIA/THnDOo
rP7iCStafLoStA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:32 2026 by rpki-client