Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File:                     8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier:          Gsyxms6C7+1OBXhB+XzPaQkURTOz+168Ybmhoxpl5IQ=
Subject key identifier:   FB:DC:02:7A:51:A2:6A:B2:43:AF:6A:62:24:5F:27:F0:74:67:11:81
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer:       /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial:       019EBF5A3E0DB56D5586EEC81D71ED724694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number:          1969
Signing time:             Sat 13 Jun 2026 05:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:22 +0000
Files and hashes:         1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: 30F10S0g4HD06IGGJhxXuWs5Uf2OemON0UWWPpWwRoQ=)
                          2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:3e:0d:b5:6d:55:86:ee:c8:1d:71:ed:72:46:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
        Validity
            Not Before: Jun 13 05:00:22 2026 GMT
            Not After : Jun 14 05:00:22 2026 GMT
        Subject: CN=fbdc027a51a26ab243af6a62245f27f074671181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:c8:3a:21:23:e3:54:2a:19:44:2e:87:2c:
                    7d:eb:b1:80:36:a9:ec:7c:d1:04:46:e9:77:15:81:
                    d6:b1:99:67:d6:94:aa:b8:26:83:7d:c7:fc:90:ca:
                    78:ec:b5:05:6d:cf:c8:c0:9b:89:25:f7:3f:fb:be:
                    4a:97:3d:40:b9:c6:e9:70:4e:97:55:de:90:83:7f:
                    90:03:35:30:6c:90:c3:ee:c0:e9:89:6a:1c:de:ab:
                    51:3d:06:39:9c:39:56:d1:c6:ef:ed:7d:98:fa:de:
                    65:ac:f0:3b:f0:78:ed:9f:05:12:47:13:25:03:83:
                    9f:50:9b:ca:59:d0:1b:01:38:40:b0:48:df:f7:3c:
                    03:c9:88:b1:ad:83:53:a2:a4:bd:50:b1:bb:8a:cd:
                    ee:8b:34:41:99:cf:21:28:dc:f0:7a:ca:bd:48:26:
                    b5:24:76:51:a4:c1:64:75:66:44:f3:fb:03:b8:e8:
                    d6:15:37:d7:34:01:c6:3e:c3:fe:b9:e3:d4:b9:51:
                    e6:b8:a3:6f:7b:12:51:0a:dc:4a:30:dc:cd:0a:b1:
                    da:4f:38:36:da:36:37:f9:1f:59:61:dc:f6:89:3a:
                    19:66:12:d2:08:36:65:ce:88:a0:4f:89:7c:93:bd:
                    e7:7f:63:6e:e1:d8:05:6b:17:78:d1:fe:43:cb:12:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DC:02:7A:51:A2:6A:B2:43:AF:6A:62:24:5F:27:F0:74:67:11:81
            X509v3 Authority Key Identifier:
                keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:14:8d:51:c1:4f:ad:2d:1a:d1:87:3f:f0:fc:af:2e:0b:01:
         5c:68:1f:af:5c:3b:6e:68:ea:22:fc:91:64:25:14:2a:1d:de:
         43:8a:d3:96:47:29:6d:a8:ef:dd:84:07:2b:1f:a1:8f:1a:ce:
         0d:8d:b8:a8:42:03:80:9c:a1:28:c4:aa:a0:46:04:28:17:5b:
         f4:24:dd:08:8e:e4:f7:93:34:3f:11:da:45:2a:b5:a3:fe:84:
         ec:64:7e:b0:5b:ab:1b:27:2f:43:5d:22:a0:d5:92:8e:dd:31:
         a7:c3:40:18:91:53:a3:ad:b5:19:c4:90:95:76:60:4d:f1:9d:
         0b:86:4e:6c:db:d0:0e:c6:d8:d8:e4:74:17:35:b8:35:34:71:
         b8:95:a8:64:7f:b5:61:e9:51:a3:1d:42:56:6b:02:8e:fe:05:
         ef:31:64:b7:8c:4e:19:ed:a2:49:82:b9:ee:4f:03:f6:23:94:
         5f:a5:5e:44:c4:d9:fa:5f:13:b9:0d:12:68:d1:4f:66:2f:bf:
         09:de:b9:67:e1:9c:b7:29:76:10:4a:b4:27:6e:ae:8a:be:fd:
         95:b6:17:e8:25:2f:2b:4d:c7:d3:c5:61:0e:87:8a:08:7d:10:
         ea:70:73:bf:d0:fa:8c:9b:8e:2d:dd:25:bd:ff:63:aa:fd:9a:
         3d:13:57:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wj4NtW1Vhu7IHXHtckaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjE0ZWQxMjRmOWEyZjNkZWFiMTAwNmYxODRjZjRmYjgw
YTNhZWMwHhcNMjYwNjEzMDUwMDIyWhcNMjYwNjE0MDUwMDIyWjAzMTEwLwYDVQQD
EyhmYmRjMDI3YTUxYTI2YWIyNDNhZjZhNjIyNDVmMjdmMDc0NjcxMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwbIOiEj41QqGUQuhyx967GANqns
fNEERul3FYHWsZln1pSquCaDfcf8kMp47LUFbc/IwJuJJfc/+75Klz1AucbpcE6X
Vd6Qg3+QAzUwbJDD7sDpiWoc3qtRPQY5nDlW0cbv7X2Y+t5lrPA78HjtnwUSRxMl
A4OfUJvKWdAbAThAsEjf9zwDyYixrYNToqS9ULG7is3uizRBmc8hKNzwesq9SCa1
JHZRpMFkdWZE8/sDuOjWFTfXNAHGPsP+uePUuVHmuKNvexJRCtxKMNzNCrHaTzg2
2jY3+R9ZYdz2iToZZhLSCDZlzoigT4l8k73nf2Nu4dgFaxd40f5DyxJ0VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvcAnpRomqyQ69qYiRfJ/B0ZxGBMB8GA1UdIwQY
MBaAFPDxTtEk+aLz3qsQBvGEz0+4CjrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQt
NDM2MTJlN2Q5Y2MxLzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQtNDM2MTJlN2Q5Y2Mx
LzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRSNUcFP
rS0a0Yc/8PyvLgsBXGgfr1w7bmjqIvyRZCUUKh3eQ4rTlkcpbajv3YQHKx+hjxrO
DY24qEIDgJyhKMSqoEYEKBdb9CTdCI7k95M0PxHaRSq1o/6E7GR+sFurGycvQ10i
oNWSjt0xp8NAGJFTo621GcSQlXZgTfGdC4ZObNvQDsbY2OR0FzW4NTRxuJWoZH+1
YelRox1CVmsCjv4F7zFkt4xOGe2iSYK57k8D9iOUX6VeRMTZ+l8TuQ0SaNFPZi+/
Cd65Z+Gctyl2EEq0J26uir79lbYX6CUvK03H08VhDoeKCH0Q6nBzv9D6jJuOLd0l
vf9jqv2aPRNXiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:34 2026 by rpki-client