Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File:                     8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier:          gW0FmmCroODQ1A96K47LtOwRbTzHdNtvynp9J0ZmaSU=
Subject key identifier:   0A:11:3A:B8:75:F1:C3:18:3B:FC:65:E5:50:8C:63:26:34:0F:5E:7D
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer:       /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial:       019E1F7F902B4B633913E803A6FE97FFC29E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number:          159C
Signing time:             Wed 13 May 2026 04:01:54 +0000
Manifest this update:     Wed 13 May 2026 04:01:54 +0000
Manifest next update:     Thu 14 May 2026 04:01:54 +0000
Files and hashes:         1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: TK1d+3rtU9KXeVuMWOE/GsfHgKppLKSq84LZN27tlmE=)
                          2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:90:2b:4b:63:39:13:e8:03:a6:fe:97:ff:c2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
        Validity
            Not Before: May 13 04:01:54 2026 GMT
            Not After : May 14 04:01:54 2026 GMT
        Subject: CN=0a113ab875f1c3183bfc65e5508c6326340f5e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:73:28:31:c0:ee:f8:0c:a4:14:7b:7e:14:
                    8e:3c:58:95:e9:47:d0:4b:d9:c7:41:d1:40:69:09:
                    87:98:8a:3c:b0:f6:00:1f:b7:ce:6b:86:59:5e:d5:
                    ad:71:15:11:d2:98:90:90:82:df:50:30:13:f1:0e:
                    78:f1:d7:6a:ac:ae:4d:7b:76:80:c7:4b:a4:17:e1:
                    4c:9a:ea:18:73:13:20:eb:64:1a:a3:f1:06:c8:14:
                    48:3a:06:9c:b8:a2:a2:23:a9:ff:6b:13:dc:86:07:
                    ca:c7:e8:87:4b:97:66:db:0c:b5:6f:d2:58:f2:92:
                    0d:26:60:b8:00:d4:40:5d:6d:e9:b8:bb:4a:55:15:
                    2a:aa:2f:01:ca:53:68:64:25:a9:f7:ff:2b:0f:b9:
                    38:29:cf:35:d1:38:a3:73:43:00:e5:91:7f:aa:77:
                    59:f5:b2:b2:58:c1:c6:66:1d:16:58:84:bd:8a:89:
                    b0:0b:61:9c:06:63:e1:21:b6:0f:77:ba:a8:76:2d:
                    f8:e5:5b:cb:0b:42:9e:9b:75:bf:bc:c1:ce:5c:24:
                    d3:6b:1e:35:94:47:1e:85:46:dc:95:c1:48:d1:93:
                    e7:ed:5d:2e:45:23:7d:6f:b3:35:18:6b:fe:60:d6:
                    31:82:25:49:c4:4a:9f:98:87:7a:2c:c1:a1:4b:d7:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:11:3A:B8:75:F1:C3:18:3B:FC:65:E5:50:8C:63:26:34:0F:5E:7D
            X509v3 Authority Key Identifier:
                keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:35:ac:54:6a:e3:23:a3:e2:0b:a0:c3:32:f0:14:68:7d:
         d4:46:89:be:3b:81:98:96:e3:68:1f:ef:7b:17:b2:af:0b:1f:
         81:ec:d8:21:c3:62:c5:ca:32:1b:56:b1:b9:c1:7a:95:21:1e:
         a4:ba:fe:41:b6:7b:a0:4d:b1:80:49:fd:a3:5d:43:e3:07:28:
         6e:7e:9a:73:dc:76:f8:43:98:c4:43:99:33:82:21:8a:66:ac:
         b6:14:18:40:cb:e2:20:e6:2c:c7:2c:cf:91:b2:10:c6:96:24:
         39:7e:63:c9:8d:59:c2:36:5c:21:be:3c:5d:e2:fb:6b:a2:de:
         3f:01:a2:13:ca:24:50:37:92:8b:d0:23:56:95:de:6f:19:ed:
         f5:40:36:02:2b:70:30:75:25:7e:ee:6c:eb:f8:e1:4f:54:a2:
         00:4a:10:ab:68:23:e8:97:b8:9d:1e:48:28:4f:4f:e5:36:d5:
         49:6b:d6:4b:42:54:ef:5a:cb:b0:2a:93:8b:9d:a8:5a:37:0f:
         77:ad:56:00:16:35:76:36:b0:fe:57:cf:8f:94:e1:89:f1:b4:
         6e:ca:21:c0:46:56:d2:22:52:b0:41:4a:8a:ee:58:25:13:53:
         5e:85:ca:28:d2:26:56:6f:a2:bc:55:f2:74:23:11:26:1f:6e:
         b8:b4:67:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ff5ArS2M5E+gDpv6X/8KeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz
YjgyYTcwHhcNMjYwNTEzMDQwMTU0WhcNMjYwNTE0MDQwMTU0WjAzMTEwLwYDVQQD
EygwYTExM2FiODc1ZjFjMzE4M2JmYzY1ZTU1MDhjNjMyNjM0MGY1ZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcxzKDHA7vgMpBR7fhSOPFiV6UfQ
S9nHQdFAaQmHmIo8sPYAH7fOa4ZZXtWtcRUR0piQkILfUDAT8Q548ddqrK5Ne3aA
x0ukF+FMmuoYcxMg62Qao/EGyBRIOgacuKKiI6n/axPchgfKx+iHS5dm2wy1b9JY
8pINJmC4ANRAXW3puLtKVRUqqi8BylNoZCWp9/8rD7k4Kc810Tijc0MA5ZF/qndZ
9bKyWMHGZh0WWIS9iomwC2GcBmPhIbYPd7qodi345VvLC0Kem3W/vMHOXCTTax41
lEcehUbclcFI0ZPn7V0uRSN9b7M1GGv+YNYxgiVJxEqfmId6LMGhS9dtrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoROrh18cMYO/xl5VCMYyY0D159MB8GA1UdIwQY
MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt
YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1
LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6A1rFRq
4yOj4gugwzLwFGh91EaJvjuBmJbjaB/vexeyrwsfgezYIcNixcoyG1axucF6lSEe
pLr+QbZ7oE2xgEn9o11D4wcobn6ac9x2+EOYxEOZM4IhimasthQYQMviIOYsxyzP
kbIQxpYkOX5jyY1ZwjZcIb48XeL7a6LePwGiE8okUDeSi9AjVpXebxnt9UA2Aitw
MHUlfu5s6/jhT1SiAEoQq2gj6Je4nR5IKE9P5TbVSWvWS0JU71rLsCqTi52oWjcP
d61WABY1djaw/lfPj5ThifG0bsohwEZW0iJSsEFKiu5YJRNTXoXKKNImVm+ivFXy
dCMRJh9uuLRnNQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:56:00 2026 by rpki-client