Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File:                     8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier:          oQHA/Zsr1b88qE5oqkcJ/vGf05cXQq2Hy1NlIBQ9oKw=
Subject key identifier:   4D:11:02:7E:7B:41:0B:F6:71:5D:FE:39:D9:C1:4C:33:38:A0:94:4C
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer:       /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial:       138405718F8AC9DE888A1165A3EC939EBD6C7D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number:          C9
Signing time:             Fri 12 Jun 2026 18:01:04 +0000
Manifest this update:     Fri 12 Jun 2026 17:56:04 +0000
Manifest next update:     Sat 13 Jun 2026 21:59:04 +0000
Files and hashes:         1: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
                          2: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
                          3: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
                          4: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: shJ2r0jf5elZW/pg8Yqf8bZVkroEbVr7WjUqWTM600g=)
                          5: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
                          6: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
                          7: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:84:05:71:8f:8a:c9:de:88:8a:11:65:a3:ec:93:9e:bd:6c:7d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
        Validity
            Not Before: Jun 12 17:56:04 2026 GMT
            Not After : Jun 13 21:59:04 2026 GMT
        Subject: CN=4D11027E7B410BF6715DFE39D9C14C3338A0944C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:a4:82:98:50:fd:e9:df:5f:67:81:93:65:
                    86:09:de:51:af:97:ee:0d:55:68:cb:ee:56:12:3b:
                    a4:5c:de:a7:4c:14:3c:98:8a:34:74:da:04:49:47:
                    20:94:67:0d:ec:00:04:db:85:7a:cd:cf:36:65:39:
                    de:53:c0:9a:75:2b:fe:17:b3:b3:bd:2e:2f:74:f7:
                    4d:fc:5a:d4:33:41:8e:82:a3:6f:3b:a0:f9:f8:cc:
                    87:2e:8c:2b:11:6f:af:27:14:87:50:a6:05:f6:8e:
                    49:61:5f:8d:54:16:74:ed:b2:48:02:be:30:c6:5f:
                    27:ca:91:24:ef:f9:ce:ef:1b:41:e5:b6:12:ae:91:
                    3d:bd:7b:06:f1:27:1c:bc:01:c4:73:ab:88:b5:a1:
                    f3:83:4c:72:01:67:30:84:f9:90:42:9f:de:8c:a5:
                    2a:42:d4:7a:90:8a:82:9f:55:99:10:b8:b2:94:2e:
                    23:4a:8e:ac:a4:f0:43:51:2b:b2:ac:3f:c4:f4:89:
                    ea:33:41:f3:d7:2b:c3:96:41:be:7e:f8:35:a2:5c:
                    01:db:f1:13:69:f6:5f:49:91:6b:99:92:c2:02:9b:
                    ec:ca:85:cb:b7:a1:70:a0:86:c2:f3:6a:e2:0d:81:
                    e5:36:96:45:5a:33:c4:05:c4:78:f1:d6:a4:1c:69:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:02:7E:7B:41:0B:F6:71:5D:FE:39:D9:C1:4C:33:38:A0:94:4C
            X509v3 Authority Key Identifier:
                keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:03:fc:4e:24:73:20:3b:12:86:1c:cf:60:5a:47:ea:89:23:
         c6:5a:fe:31:7f:8c:d5:be:22:25:ae:42:53:69:b2:ff:d1:d1:
         3c:cd:d9:59:18:d8:45:1e:91:e8:f5:1a:40:92:e1:7c:76:72:
         42:d5:30:c6:75:3c:01:57:3d:00:d3:f2:1d:88:41:59:54:b3:
         47:4d:02:82:33:0a:15:63:1d:37:dd:e2:d4:df:93:60:27:5b:
         1a:f6:7d:dd:aa:25:69:da:2f:67:07:3f:04:a3:1e:00:86:e8:
         d8:51:62:2a:6f:dc:71:c3:8a:b0:9a:9b:d7:7e:e7:be:39:45:
         4a:58:99:02:36:f4:79:ab:6f:62:dd:32:c3:8d:c3:30:e7:6e:
         34:86:bc:0b:56:b1:18:48:55:24:a5:9e:1d:4e:89:d9:80:60:
         30:f4:f3:ed:04:37:fc:6f:2a:6f:36:51:94:d2:4f:dd:be:c8:
         27:ce:70:de:a7:ae:6d:b4:81:ff:49:57:3c:38:cb:07:74:17:
         e6:32:cc:22:87:86:e7:95:de:28:8c:d4:a1:f5:15:d2:ec:54:
         ce:df:0f:ca:6f:ef:74:4c:1d:2e:02:db:5c:dd:06:1f:4a:3d:
         cf:2c:50:fe:e5:79:73:32:5f:df:a2:2a:ef:8b:4f:03:bb:48:
         41:e5:7e:71
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUE4QFcY+Kyd6IihFlo+yTnr1sfWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3
NzQzOTczZDAeFw0yNjA2MTIxNzU2MDRaFw0yNjA2MTMyMTU5MDRaMDMxMTAvBgNV
BAMTKDREMTEwMjdFN0I0MTBCRjY3MTVERkUzOUQ5QzE0QzMzMzhBMDk0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dqSCmFD96d9fZ4GTZYYJ3lGv
l+4NVWjL7lYSO6Rc3qdMFDyYijR02gRJRyCUZw3sAATbhXrNzzZlOd5TwJp1K/4X
s7O9Li909038WtQzQY6Co287oPn4zIcujCsRb68nFIdQpgX2jklhX41UFnTtskgC
vjDGXyfKkSTv+c7vG0HlthKukT29ewbxJxy8AcRzq4i1ofODTHIBZzCE+ZBCn96M
pSpC1HqQioKfVZkQuLKULiNKjqyk8ENRK7KsP8T0ieozQfPXK8OWQb5++DWiXAHb
8RNp9l9JkWuZksICm+zKhcu3oXCghsLzauINgeU2lkVaM8QFxHjx1qQcaVARAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUTRECfntBC/ZxXf452cFMMziglEwwHwYDVR0j
BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh
YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk
RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m
NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB
OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgP8TiRzIDsShhzPYFpH
6okjxlr+MX+M1b4iJa5CU2my/9HRPM3ZWRjYRR6R6PUaQJLhfHZyQtUwxnU8AVc9
ANPyHYhBWVSzR00CgjMKFWMdN93i1N+TYCdbGvZ93aoladovZwc/BKMeAIbo2FFi
Km/cccOKsJqb137nvjlFSliZAjb0eatvYt0yw43DMOduNIa8C1axGEhVJKWeHU6J
2YBgMPTz7QQ3/G8qbzZRlNJP3b7IJ85w3qeubbSB/0lXPDjLB3QX5jLMIoeG55Xe
KIzUofUV0uxUzt8Pym/vdEwdLgLbXN0GH0o9zyxQ/uV5czJf36Iq74tPA7tIQeV+
cQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:04 2026 by rpki-client