Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File:                     8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier:          BTVTdj3LiRWRoLJMwLzn2+ELa6Jd1B0pDl2lqzZetQ4=
Subject key identifier:   B4:74:A2:06:85:6E:AC:2C:4F:B7:45:30:8C:87:86:65:EB:99:90:3A
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer:       /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial:       019E2C5EA3478324DC370AC867F51FD7C3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number:          130C
Signing time:             Fri 15 May 2026 16:01:00 +0000
Manifest this update:     Fri 15 May 2026 16:01:00 +0000
Manifest next update:     Sat 16 May 2026 16:01:00 +0000
Files and hashes:         1: 07j9_n6AVXDopfWR8BaInw48NMc.roa (hash: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM=)
                          2: 2agacPd_HSeo5iWC2CnXaC2xZe8.roa (hash: YHI/nftFWmJRoE6pDGv7uv3rVMoTsI26akPX3i6AVgc=)
                          3: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (hash: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc=)
                          4: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: OEbop4ejV4+TQnOlCN8GKfwkTCvhbIkKUzQBADvNS+U=)
                          5: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (hash: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c=)
                          6: eB4uOT6yIJ90-7WQMq3rRaWige0.roa (hash: 0bN90UYrI/jqLeHoVlUJEcwKG5W/ZPrQB/kL7FwjFBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:5e:a3:47:83:24:dc:37:0a:c8:67:f5:1f:d7:c3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
        Validity
            Not Before: May 15 16:01:00 2026 GMT
            Not After : May 16 16:01:00 2026 GMT
        Subject: CN=b474a206856eac2c4fb745308c878665eb99903a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:7b:88:02:88:06:a1:6a:59:44:63:68:4a:
                    ca:5d:57:2a:c6:80:98:9c:01:30:e2:31:e8:e5:04:
                    63:a6:5c:75:08:0f:05:c4:ec:50:73:95:1f:c5:64:
                    ee:f9:b3:38:14:b4:96:28:13:43:1e:bf:55:c0:55:
                    43:12:fa:69:99:d3:aa:34:e4:f1:4a:f3:30:da:42:
                    51:c3:a1:9d:a0:cc:21:a0:1a:5d:c1:f9:ec:71:a3:
                    05:28:19:71:f3:e5:05:60:af:70:db:33:00:a0:e3:
                    26:56:cc:60:7e:2b:b4:e9:a8:6f:cd:02:f3:93:71:
                    c5:fb:ee:6e:e4:d2:2f:db:06:4c:53:23:66:dc:29:
                    1b:2b:59:93:92:b9:e8:93:2e:74:0a:af:68:e4:05:
                    13:a9:ab:4d:aa:2c:29:40:58:be:d4:d4:84:03:ab:
                    aa:bc:44:1b:a9:30:dc:85:3d:3e:31:35:02:d8:91:
                    16:c8:ab:9d:c7:87:81:85:a5:cf:8a:4b:69:87:ef:
                    ab:04:23:94:4a:d0:4e:62:9c:b9:f6:cc:53:92:cb:
                    0e:f1:3a:39:9c:b9:c5:20:0e:3c:0d:ae:b7:77:a9:
                    17:a4:13:27:6d:94:87:40:f7:50:46:8b:d3:a5:ed:
                    be:26:43:17:d6:f1:36:24:2f:d6:fd:28:26:9b:7f:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:74:A2:06:85:6E:AC:2C:4F:B7:45:30:8C:87:86:65:EB:99:90:3A
            X509v3 Authority Key Identifier:
                keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c8:c2:ec:91:00:25:4e:f4:44:84:81:02:94:74:6a:3c:c0:
         d4:01:c9:c8:1a:1a:30:cc:01:91:83:9a:05:c9:a9:47:56:1f:
         a1:13:52:9c:23:34:8e:d9:ac:b0:9f:a0:8f:47:ea:c6:91:2b:
         8b:df:f9:61:c2:f9:0a:c8:1a:49:75:bc:70:81:17:11:95:52:
         0a:ef:cf:85:3d:11:21:c1:80:48:d8:1f:10:e7:57:07:12:68:
         e9:42:29:45:80:a8:d9:20:d7:6e:28:98:a0:14:3f:ef:6d:17:
         75:20:73:1c:bd:51:fd:62:98:46:2e:01:74:80:ce:56:0d:97:
         a9:91:2a:97:98:62:85:ee:02:93:40:05:29:56:88:ad:f6:cc:
         43:41:0f:e3:a6:f0:ee:16:fd:3e:bc:57:6e:b9:5e:57:90:5b:
         fb:0c:e1:1c:fe:2d:b3:47:33:bf:bf:5f:2a:fb:90:73:bc:c7:
         b4:24:d2:c4:c6:93:7a:95:55:f1:21:25:b7:50:4d:ce:6c:9e:
         81:cb:c7:67:44:f6:71:27:43:b5:39:1d:da:ee:ad:37:bc:e1:
         8d:e5:45:82:97:a7:cc:14:e8:61:5f:b5:26:18:31:16:f8:df:
         d2:10:e6:dd:37:a2:b2:4f:72:94:2c:9d:40:28:60:05:ea:da:
         b3:a5:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 02:31:59 2026 by rpki-client