Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File:                     8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier:          fOrU9GBC+dkC5BcJYDj7xPUcW49VckunRCfmPaByucg=
Subject key identifier:   2D:3E:B9:3F:06:1F:E0:27:7D:60:08:11:9F:BE:88:14:A8:52:2E:2B
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer:       /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial:       019E3004B36F914224D14F98151C6A8D2D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 09:01:14 +0000
Manifest this update:     Sat 16 May 2026 09:01:14 +0000
Manifest next update:     Sun 17 May 2026 09:01:14 +0000
Files and hashes:         1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: ngWxcofjUjcDbp7lZhm0yr1l19p2MPP7rzvw+gRYup8=)
                          2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:b3:6f:91:42:24:d1:4f:98:15:1c:6a:8d:2d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
        Validity
            Not Before: May 16 09:01:14 2026 GMT
            Not After : May 17 09:01:14 2026 GMT
        Subject: CN=2d3eb93f061fe0277d6008119fbe8814a8522e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:ff:f5:06:7b:50:1b:54:c2:ab:40:e5:68:
                    cf:ba:07:ce:52:98:a0:bb:40:5f:64:47:90:94:22:
                    34:51:10:19:15:df:19:45:20:39:97:aa:26:92:ea:
                    83:8a:c4:34:7e:1d:c0:a4:2f:0c:23:64:8e:9c:fe:
                    de:ab:f2:fa:4a:d8:67:10:e0:d6:4a:bf:59:f8:e8:
                    36:21:9b:1f:ef:69:70:86:e6:bd:77:ea:bf:33:1d:
                    24:5c:e0:c4:30:31:06:dd:20:8b:5d:e5:cc:85:04:
                    33:f5:87:88:ae:49:02:72:e3:aa:02:fe:7a:88:c5:
                    68:cb:17:47:6c:28:ed:35:b4:be:2b:a4:e7:5c:6c:
                    ed:d9:62:c8:72:3e:52:71:b2:2d:47:c4:0f:4c:a7:
                    56:4e:2b:1f:5b:e3:e1:d7:57:d4:d4:33:9a:5a:fd:
                    21:c6:82:e5:73:ec:89:76:39:14:d2:6e:ac:82:fd:
                    1d:b7:0f:0a:28:14:53:29:e6:83:ed:c8:ec:82:68:
                    07:2c:79:32:cb:2b:42:7f:30:c5:d0:c7:80:a5:74:
                    25:fd:ff:06:e5:de:e8:1a:b2:c3:30:c6:8a:14:db:
                    e6:91:ce:64:09:c3:a0:e4:aa:38:11:f9:72:dd:ef:
                    c1:88:8d:88:60:ac:1c:1f:f7:61:f4:31:2a:fc:a7:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3E:B9:3F:06:1F:E0:27:7D:60:08:11:9F:BE:88:14:A8:52:2E:2B
            X509v3 Authority Key Identifier:
                keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:48:10:d6:f0:3f:28:af:e3:7b:67:1a:44:35:b8:16:68:
         57:ef:fa:ec:b2:a6:f5:98:15:8d:e9:d8:67:a4:20:77:95:59:
         ce:00:62:07:d4:ec:39:e4:e2:df:fa:50:17:0a:16:bd:de:32:
         55:11:5e:f6:dd:4e:3d:76:70:0a:c2:f8:cb:40:b1:4e:7f:74:
         1c:e9:dd:d4:4c:0b:dc:d6:a0:54:00:4b:72:52:a8:70:cb:06:
         3e:a1:4b:8f:4b:61:3c:ca:5e:0e:ab:19:92:4c:b5:6a:1e:01:
         b6:a6:ff:4f:62:57:ef:cd:80:ed:95:ff:f3:8f:15:0d:84:64:
         44:e3:7d:cb:e7:20:f1:0f:ba:d8:b9:c0:38:90:53:5c:e1:7e:
         cf:d4:cd:20:09:3e:a0:11:df:4d:fa:97:60:e1:02:5f:56:ff:
         19:ae:ea:b7:b0:46:5e:f2:b8:bf:b3:35:6e:3c:12:20:a1:4d:
         06:9d:1a:65:06:d1:18:1f:bb:cc:a9:26:bf:a1:dc:e6:54:a9:
         86:19:79:33:2c:99:85:c2:79:a6:07:63:84:1d:ff:96:2a:45:
         c8:95:16:76:c0:33:37:5e:27:f1:13:f8:d6:d6:50:db:99:ac:
         59:b1:a6:e3:50:d4:1c:55:40:61:aa:a8:ef:99:f2:77:31:f9:
         5d:66:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:18 2026 by rpki-client