Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          rVYaDBYcUyjo/iRN8Z3ZUCooFoNt/tEQ/y9Nl5KFY+4=
Subject key identifier:   22:CD:4C:8C:48:43:B2:C2:BB:B6:52:3D:6C:60:3B:A4:72:EC:EE:CA
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       019F189EDF1BC9D81DE75CBCA5BC76F6F26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          0908
Signing time:             Tue 30 Jun 2026 13:01:32 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:32 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:32 +0000
Files and hashes:         1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: P8TmJum/0BG196ynPR7k4QblWbMkB/cRjsS6Vs+mr+8=)
                          2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:df:1b:c9:d8:1d:e7:5c:bc:a5:bc:76:f6:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: Jun 30 13:01:32 2026 GMT
            Not After : Jul  1 13:01:32 2026 GMT
        Subject: CN=22cd4c8c4843b2c2bbb6523d6c603ba472eceeca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d5:19:c3:d4:b9:81:4f:bb:56:bf:14:7e:60:
                    ee:d3:e6:15:aa:7c:0f:8a:c1:aa:d7:3f:84:88:1d:
                    49:37:51:76:ca:d5:74:c7:f9:e0:75:8f:8f:10:96:
                    3c:99:ab:f1:10:d9:e0:b1:ad:b7:de:20:62:4d:32:
                    c0:46:ef:97:e1:7b:a1:62:26:0f:00:94:32:66:8c:
                    d9:1e:57:3a:e0:3e:49:a0:98:d3:21:2a:9f:53:66:
                    00:9e:1b:b0:0e:8a:49:11:34:3e:35:22:63:e7:37:
                    dc:a7:76:56:2a:81:85:95:f9:db:86:87:7a:0e:b4:
                    f7:d9:30:59:75:b6:09:5a:33:c3:b6:29:86:3b:34:
                    a7:cd:9f:1f:b9:b2:02:e9:21:ed:35:79:08:c2:80:
                    46:da:31:47:44:74:7b:4d:39:cd:b6:4e:75:88:7c:
                    a0:97:2f:1d:6a:3d:a5:8c:8c:ca:a5:4e:72:e9:cb:
                    e5:e0:07:a7:f1:58:0f:f1:8f:a5:5b:da:8a:a5:1b:
                    65:c4:c8:88:3c:30:4b:9a:54:dc:83:8a:43:bb:a2:
                    37:0c:74:cc:5d:76:1d:a5:3d:e2:39:8d:34:71:9f:
                    3c:1f:9f:49:3f:60:3b:1b:f8:b8:8d:bb:ba:70:ce:
                    6e:3f:b1:ea:78:da:77:a4:61:67:cd:91:70:af:31:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CD:4C:8C:48:43:B2:C2:BB:B6:52:3D:6C:60:3B:A4:72:EC:EE:CA
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2c:8e:78:5e:aa:3e:c8:c2:c8:57:e6:4d:a4:ac:18:80:09:
         d6:b2:a1:4a:af:69:50:2d:2a:ef:e0:c6:3a:17:57:78:21:b6:
         40:b4:00:5a:5f:61:60:9b:63:70:f5:78:b0:71:63:b8:59:1d:
         2b:d3:6f:75:f6:48:fe:3f:48:86:49:b0:eb:78:fc:dc:b2:b7:
         0a:f2:c1:a3:db:1c:80:17:ee:fb:26:16:85:1a:a3:a8:7f:40:
         7b:94:6d:7d:61:20:38:3e:b0:b0:f8:63:67:c2:97:6e:d3:bb:
         26:fa:93:ea:33:9f:ce:8a:1c:4d:6e:1b:ac:74:e1:c3:ad:65:
         13:39:4f:84:00:6f:ee:85:4e:39:ad:99:f4:75:63:e1:f7:be:
         b2:6c:30:c7:5f:28:a1:36:3b:5b:44:fe:95:01:dd:94:b8:6c:
         19:38:10:8b:be:ad:ce:44:e2:57:74:df:dc:ad:86:fb:7c:45:
         5e:f3:c9:9b:64:f1:f9:8b:14:d8:bf:b8:2f:7a:2a:06:e9:c4:
         9c:09:15:a0:2b:6b:48:70:88:79:bf:c0:79:b4:2d:12:8a:62:
         35:66:d5:3f:4c:34:d3:bc:d1:2e:37:94:73:a8:fe:08:a3:e1:
         c9:e0:0d:6f:61:0b:4c:6a:88:0e:e9:1c:fd:4a:79:62:e8:77:
         e7:a0:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:19 2026 by rpki-client