Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File:                     08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier:          eK6EjFc1ZCQTFJaKLOOn3xkXkOuRcPnKbMBku92ZYvQ=
Subject key identifier:   D9:96:2D:00:C6:24:45:D7:E5:2C:9F:DD:58:01:02:D0:95:CB:48:B2
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer:       /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial:       019E1DC73EC20F9D62C0AD827CB86A21E9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number:          12C6
Signing time:             Tue 12 May 2026 20:00:57 +0000
Manifest this update:     Tue 12 May 2026 20:00:57 +0000
Manifest next update:     Wed 13 May 2026 20:00:57 +0000
Files and hashes:         1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: 5tjUM1HtlYZJWZv6wbEC4Ru/dsFXQtuTgNSIiY7e1qo=)
                          2: yXhNyXRSfQjfxmo-xnpGQqFi810.roa (hash: SLF2lVj7vn7i6fplRiTtNXFnugUCA5oqM+ECg7CqrFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:3e:c2:0f:9d:62:c0:ad:82:7c:b8:6a:21:e9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
        Validity
            Not Before: May 12 20:00:57 2026 GMT
            Not After : May 13 20:00:57 2026 GMT
        Subject: CN=d9962d00c62445d7e52c9fdd580102d095cb48b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:29:6d:6c:e7:ac:a8:b1:29:65:7d:52:2d:
                    2f:a4:e4:7c:1c:6d:7c:fe:08:6f:e0:9a:c0:23:1e:
                    53:42:58:b8:46:8b:9f:d8:c7:a4:0e:58:c1:61:60:
                    dd:c1:60:78:8d:85:21:dd:9c:a5:f0:c8:9b:27:0a:
                    e0:2c:0e:70:8a:ac:fb:17:cb:8b:c2:bc:68:56:42:
                    28:ef:12:51:61:d9:45:ab:b6:c2:2a:f8:46:24:a8:
                    77:1a:63:42:d3:26:28:a6:0a:58:87:06:f1:1d:39:
                    33:04:07:fd:20:42:4c:30:aa:dd:48:6d:47:97:c0:
                    db:b1:d8:bb:bd:80:0b:3f:23:56:47:b0:e8:69:8b:
                    8f:f5:7b:d3:b5:12:e8:ab:84:fa:af:8b:d8:32:f4:
                    3b:cd:eb:4a:a6:45:99:70:84:6d:0d:39:a6:ce:b4:
                    b8:69:8e:2a:c5:a9:13:cd:6c:94:d6:2f:a8:16:45:
                    50:1f:8b:00:50:33:2a:d9:c0:f0:f0:95:a7:18:4d:
                    08:bb:46:d4:4c:02:12:50:9f:ae:d2:35:42:1b:c4:
                    a2:5a:7d:3c:21:88:50:96:44:4b:d7:f0:26:0a:1b:
                    e7:7d:d3:6d:2c:2c:93:0f:05:87:1c:0c:6e:55:da:
                    ce:fe:15:3e:a9:f4:41:90:90:66:74:80:b2:80:11:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:96:2D:00:C6:24:45:D7:E5:2C:9F:DD:58:01:02:D0:95:CB:48:B2
            X509v3 Authority Key Identifier:
                keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:d9:e0:d5:4f:fe:e0:bd:5c:24:3d:15:2c:48:00:ba:48:
         df:da:c9:70:3f:d1:61:9e:28:15:85:70:cb:cf:14:c6:0e:18:
         cf:1e:d8:95:da:aa:2d:21:aa:e6:a5:8d:fd:4d:49:47:b4:13:
         1d:b5:ff:41:7c:16:9c:6f:fe:65:5f:33:91:f2:20:4f:99:fa:
         dc:c0:31:aa:c5:66:27:71:44:95:52:7c:9b:13:a7:81:58:47:
         c7:ff:a0:42:d4:d5:ec:a4:8a:7f:8d:93:df:19:93:bc:1a:15:
         2c:d5:a5:46:60:69:ca:cb:1f:19:07:7a:be:d3:63:1f:db:25:
         64:7a:eb:a5:ed:78:37:54:dd:88:c8:ba:da:b9:15:b8:f5:79:
         09:02:32:18:65:a9:f3:30:85:8d:f1:f5:6c:14:9f:ee:e5:28:
         a8:03:fe:0d:b9:60:d8:37:3c:fe:b4:14:e1:99:6f:48:4c:f9:
         3e:f2:b7:13:52:e9:70:91:52:30:e6:4f:27:70:81:df:ac:b5:
         67:c0:af:2e:8b:96:34:cb:39:36:60:1b:6f:f3:76:42:62:1e:
         23:b4:1b:a2:76:db:22:29:38:a1:a4:93:22:d2:b6:c4:92:01:
         c7:0f:e3:94:56:47:64:db:59:5a:15:cb:fc:8a:d6:9a:44:86:
         a9:93:b6:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxz7CD51iwK2CfLhqIenbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzhiMTBhMzhmODFjNjRlMjAxMjA3YmZjMzU0NGMyOTcy
YWY1ZjMwHhcNMjYwNTEyMjAwMDU3WhcNMjYwNTEzMjAwMDU3WjAzMTEwLwYDVQQD
EyhkOTk2MmQwMGM2MjQ0NWQ3ZTUyYzlmZGQ1ODAxMDJkMDk1Y2I0OGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgkpbWznrKixKWV9Ui0vpOR8HG18
/ghv4JrAIx5TQli4Rouf2MekDljBYWDdwWB4jYUh3Zyl8MibJwrgLA5wiqz7F8uL
wrxoVkIo7xJRYdlFq7bCKvhGJKh3GmNC0yYopgpYhwbxHTkzBAf9IEJMMKrdSG1H
l8Dbsdi7vYALPyNWR7DoaYuP9XvTtRLoq4T6r4vYMvQ7zetKpkWZcIRtDTmmzrS4
aY4qxakTzWyU1i+oFkVQH4sAUDMq2cDw8JWnGE0Iu0bUTAISUJ+u0jVCG8SiWn08
IYhQlkRL1/AmChvnfdNtLCyTDwWHHAxuVdrO/hU+qfRBkJBmdICygBHg+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmWLQDGJEXX5Syf3VgBAtCVy0iyMB8GA1UdIwQY
MBaAFNPIsQo4+Bxk4gEge/w1RMKXKvXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEt
MzdhYTM1ZTY5ZGMxLzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEtMzdhYTM1ZTY5ZGMx
LzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANarZ4NVP
/uC9XCQ9FSxIALpI39rJcD/RYZ4oFYVwy88Uxg4Yzx7YldqqLSGq5qWN/U1JR7QT
HbX/QXwWnG/+ZV8zkfIgT5n63MAxqsVmJ3FElVJ8mxOngVhHx/+gQtTV7KSKf42T
3xmTvBoVLNWlRmBpyssfGQd6vtNjH9slZHrrpe14N1TdiMi62rkVuPV5CQIyGGWp
8zCFjfH1bBSf7uUoqAP+Dblg2Dc8/rQU4ZlvSEz5PvK3E1LpcJFSMOZPJ3CB36y1
Z8CvLouWNMs5NmAbb/N2QmIeI7QbonbbIik4oaSTItK2xJIBxw/jlFZHZNtZWhXL
/IrWmkSGqZO2ng==
-----END CERTIFICATE-----
Generated at Wed May 13 00:06:48 2026 by rpki-client