Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          6GHXywzeWV797vp9hMbb3N2vZz7X+YfwMgSncMKBf8Q=
Subject key identifier:   B7:EA:D3:8D:2E:49:59:7B:5D:1D:89:5E:11:D0:E1:D1:9A:F7:C4:20
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       019E30E0C311F49D56526DFC7BC34DA26268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          0890
Signing time:             Sat 16 May 2026 13:01:36 +0000
Manifest this update:     Sat 16 May 2026 13:01:36 +0000
Manifest next update:     Sun 17 May 2026 13:01:36 +0000
Files and hashes:         1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: hqT6CmFHPev86ac9DCbl4e46agqmAKoAfRhTzVo8jfw=)
                          2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:c3:11:f4:9d:56:52:6d:fc:7b:c3:4d:a2:62:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: May 16 13:01:36 2026 GMT
            Not After : May 17 13:01:36 2026 GMT
        Subject: CN=b7ead38d2e49597b5d1d895e11d0e1d19af7c420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:43:7f:9b:25:64:7b:49:59:ee:84:3d:09:
                    0d:6e:92:f1:7f:45:cf:56:dd:05:75:5b:bc:a3:82:
                    c2:9a:ab:0f:a3:35:8f:84:cb:a3:30:57:4f:1e:9f:
                    21:34:99:e5:fd:fe:34:67:70:28:2d:1c:9a:42:f7:
                    bb:c9:fa:63:8e:86:bc:32:f7:6b:30:7c:ad:b9:47:
                    d0:b9:68:8b:b6:a0:96:54:5d:6e:54:d8:59:fd:b8:
                    21:e0:77:00:81:0b:cd:5d:03:00:3f:45:da:79:a8:
                    97:cf:a1:85:11:d7:7a:68:50:0a:d4:81:e0:ed:26:
                    67:57:f3:d4:f9:5a:66:16:bb:d6:6d:49:c1:97:ba:
                    83:aa:6f:a5:a7:70:2c:d9:fd:bf:1a:fc:51:13:26:
                    fc:1e:29:ff:68:19:bb:ef:01:61:eb:e0:a1:de:c5:
                    57:48:37:4d:e6:7b:30:c9:72:cc:1c:b3:bc:3a:32:
                    72:be:e1:dd:5c:e8:f2:4a:16:b3:11:a4:35:3d:1d:
                    02:11:04:f0:6d:fd:8a:ef:72:7f:c5:cc:42:e0:68:
                    e8:6d:13:a9:e6:cb:64:cd:0b:c5:ff:da:33:fd:34:
                    17:39:29:8d:94:6d:b5:eb:a8:09:b7:90:b6:ca:38:
                    7e:12:3b:15:cb:97:60:ee:b7:96:9f:3c:cd:6d:f5:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EA:D3:8D:2E:49:59:7B:5D:1D:89:5E:11:D0:E1:D1:9A:F7:C4:20
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:25:87:ce:63:4b:3b:da:40:09:1b:21:31:3a:ab:55:43:
         e8:82:0a:a9:5f:a9:07:82:98:c7:27:8b:b9:48:58:04:8d:e1:
         08:38:8f:4f:36:14:d3:ec:e3:d3:24:b6:6e:e3:a8:9b:90:9f:
         75:2e:b1:2c:5e:ef:e5:38:5a:52:a3:a7:6c:79:7b:57:55:fb:
         73:9e:d2:3e:70:a5:32:4f:5c:1b:ea:82:12:f0:23:cf:56:54:
         2d:36:40:42:87:09:22:a0:29:b1:14:cb:f9:5d:3c:51:01:76:
         60:ef:fb:50:03:30:01:66:87:36:f7:3f:af:16:6b:f1:a0:2b:
         16:87:0e:d0:7f:83:06:d5:fe:c9:5d:56:39:3b:b0:90:13:58:
         b4:ac:9a:87:b2:29:5b:0f:fa:8f:5e:3c:9a:ca:bf:e8:ad:0e:
         f0:05:e7:d0:6c:3b:58:a3:be:79:b6:72:35:1b:92:b1:6b:45:
         5c:97:5f:f5:ef:87:88:ce:d4:63:6b:43:75:d3:99:eb:59:d3:
         32:7c:94:2c:08:7d:22:fa:ae:f4:6d:f4:1b:30:16:2d:ca:94:
         d0:5b:d1:f1:e9:7a:4e:cf:18:ad:cd:1b:36:13:65:14:6f:52:
         79:3b:6d:80:b6:52:6a:7f:3c:17:df:77:4f:5c:7d:59:11:45:
         9f:e0:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:46 2026 by rpki-client