Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File:                     8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier:          PCRKtRDNsJiJ9jNfcuIwQdd8GpbnvINtCVk447V1YRI=
Subject key identifier:   F5:6A:EB:29:CB:AF:29:75:26:20:D8:B9:F5:1C:04:BA:F6:19:23:32
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer:       /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial:       019D2C6106DB21F72CC9B4CCB8C253948FDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number:          065B
Signing time:             Thu 26 Mar 2026 23:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 23:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 23:00:49 +0000
Files and hashes:         1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: bGNcWVa5iMX+zOaB5Zh9nW4o2e2ZNCesAeFY56+hyJo=)
                          2: AbRiyCHHLVlOy73Va3XhnwR_DLo.roa (hash: 6HenLNVbET8UrcTGANmzLr3/H2ChFNxxswPM4qVTvAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:61:06:db:21:f7:2c:c9:b4:cc:b8:c2:53:94:8f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
        Validity
            Not Before: Mar 26 23:00:49 2026 GMT
            Not After : Mar 27 23:00:49 2026 GMT
        Subject: CN=f56aeb29cbaf29752620d8b9f51c04baf6192332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:38:5e:b9:3d:37:6f:e2:bc:09:ea:88:a2:
                    b1:9e:7f:02:84:04:51:ef:b3:96:9e:a2:c7:43:37:
                    95:5e:e4:ba:9b:cc:55:7d:d2:77:cd:cd:88:5b:df:
                    85:3b:f5:ed:ce:20:5e:45:37:91:3f:0b:3c:c0:e2:
                    1e:16:74:46:20:f4:44:4a:1a:1a:ee:07:a9:cf:9a:
                    34:cb:d8:9f:04:d1:ea:c1:a7:ea:68:d2:82:8d:a2:
                    c9:d5:0a:95:81:35:ce:03:de:8a:17:62:52:75:38:
                    d6:dc:38:d7:8a:e5:76:78:9e:9c:fc:fe:a2:b4:aa:
                    0e:c6:84:dd:b1:7f:40:c7:f6:1b:55:1a:7d:8c:4f:
                    a7:e2:67:e4:0a:56:7b:fb:72:45:c5:8b:12:d3:bd:
                    9b:f9:49:1d:a5:d9:2f:ca:22:b8:ef:d7:89:dd:8e:
                    e0:bf:6e:a8:87:00:25:16:54:b0:50:75:2c:70:cc:
                    7d:20:88:27:a4:da:6e:28:cc:ed:82:4e:6e:11:13:
                    b7:99:bb:a4:40:e7:f5:42:8d:db:b6:5c:f9:45:0b:
                    61:6c:bb:ea:0a:93:ca:de:cf:40:9a:b1:0d:1c:75:
                    6e:d1:b6:60:1f:2e:e8:a3:2b:32:40:2b:8b:90:72:
                    87:39:a0:49:c3:18:e0:d2:df:91:94:3d:4e:88:9b:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:EB:29:CB:AF:29:75:26:20:D8:B9:F5:1C:04:BA:F6:19:23:32
            X509v3 Authority Key Identifier:
                keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:f5:3e:41:ed:e1:1b:6f:e5:d6:b4:1c:4a:cb:05:76:53:
         a7:cc:b1:f7:04:90:fb:f3:f7:60:82:a8:a7:d5:c3:58:3d:4d:
         68:01:2f:e6:45:02:3b:27:79:53:e7:9c:ce:ce:1d:cc:a0:7b:
         20:65:94:34:2d:21:f2:b0:3d:f0:e3:2e:61:b4:cd:21:bb:d5:
         8c:02:93:56:6d:e4:1d:3d:40:fd:ca:a9:77:2f:cf:e6:dc:0d:
         d8:77:4d:56:cb:1c:ae:d9:58:bc:17:cb:ab:1e:47:49:54:83:
         8b:bf:2d:9b:3f:f8:c4:b4:b5:e7:27:23:c6:a0:5b:bd:e3:6a:
         18:5b:26:bc:44:ee:0c:39:d1:95:16:95:76:0d:96:e6:5b:cc:
         81:0d:19:c8:e0:3c:3b:fd:71:23:3a:41:26:6f:61:26:b0:29:
         2f:86:42:fd:10:af:24:c1:6c:14:62:37:63:b9:1b:3c:a7:0d:
         e1:62:ad:9d:c7:e4:eb:b3:49:ad:05:a7:2a:3b:6e:23:8b:07:
         7a:f4:45:93:41:3e:64:95:be:ea:68:10:41:03:7b:ee:4a:05:
         3f:92:da:89:a0:28:b7:5b:86:41:e9:97:0b:9e:01:cf:1b:69:
         4f:07:4e:63:5a:8b:54:3d:76:d5:9b:62:26:b4:c0:0c:13:25:
         bb:af:94:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sYQbbIfcsybTMuMJTlI/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjI3YWViZjAyYWJjMzU1MjEyYWZiZjE2MjFlM2UwZDRh
NzYwNTcwHhcNMjYwMzI2MjMwMDQ5WhcNMjYwMzI3MjMwMDQ5WjAzMTEwLwYDVQQD
EyhmNTZhZWIyOWNiYWYyOTc1MjYyMGQ4YjlmNTFjMDRiYWY2MTkyMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSo4Xrk9N2/ivAnqiKKxnn8ChARR
77OWnqLHQzeVXuS6m8xVfdJ3zc2IW9+FO/XtziBeRTeRPws8wOIeFnRGIPREShoa
7gepz5o0y9ifBNHqwafqaNKCjaLJ1QqVgTXOA96KF2JSdTjW3DjXiuV2eJ6c/P6i
tKoOxoTdsX9Ax/YbVRp9jE+n4mfkClZ7+3JFxYsS072b+UkdpdkvyiK479eJ3Y7g
v26ohwAlFlSwUHUscMx9IIgnpNpuKMztgk5uERO3mbukQOf1Qo3btlz5RQthbLvq
CpPK3s9AmrENHHVu0bZgHy7ooysyQCuLkHKHOaBJwxjg0t+RlD1OiJvWuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVq6ynLryl1JiDYufUcBLr2GSMyMB8GA1UdIwQY
MBaAFPDyeuvwKrw1UhKvvxYh4+DUp2BXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgt
YzQ1ZjhlMjUxMjQ4LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgtYzQ1ZjhlMjUxMjQ4
LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiD1PkHt
4Rtv5da0HErLBXZTp8yx9wSQ+/P3YIKop9XDWD1NaAEv5kUCOyd5U+eczs4dzKB7
IGWUNC0h8rA98OMuYbTNIbvVjAKTVm3kHT1A/cqpdy/P5twN2HdNVsscrtlYvBfL
qx5HSVSDi78tmz/4xLS15ycjxqBbveNqGFsmvETuDDnRlRaVdg2W5lvMgQ0ZyOA8
O/1xIzpBJm9hJrApL4ZC/RCvJMFsFGI3Y7kbPKcN4WKtncfk67NJrQWnKjtuI4sH
evRFk0E+ZJW+6mgQQQN77koFP5LaiaAot1uGQemXC54BzxtpTwdOY1qLVD121Zti
JrTADBMlu6+UEg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:15:11 2026 by rpki-client