Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File:                     8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier:          JDovQmBxEssx47D+dy4UjaGmOWML+FDaDi2WpTr7xR8=
Subject key identifier:   ED:A5:D4:FB:FA:E8:75:6B:AC:F0:56:25:CB:74:DF:CF:2B:BE:A6:B8
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer:       /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial:       019E28B894F6431F31230C21A29FAFD66B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number:          1004
Signing time:             Thu 14 May 2026 23:00:45 +0000
Manifest this update:     Thu 14 May 2026 23:00:45 +0000
Manifest next update:     Fri 15 May 2026 23:00:45 +0000
Files and hashes:         1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=)
                          2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: xphTHSA1qgmtPEzNFphFpBykcR7oJfaaRXwBE0Q0BJQ=)
                          3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b8:94:f6:43:1f:31:23:0c:21:a2:9f:af:d6:6b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
        Validity
            Not Before: May 14 23:00:45 2026 GMT
            Not After : May 15 23:00:45 2026 GMT
        Subject: CN=eda5d4fbfae8756bacf05625cb74dfcf2bbea6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:89:f1:59:1d:c9:51:bd:b1:43:2a:16:1f:
                    e5:26:99:c4:d4:d7:be:a1:d5:ee:13:98:93:72:89:
                    36:99:ab:82:f4:81:df:60:db:cc:e7:cd:e4:d7:c5:
                    8f:70:9f:43:9a:20:26:ea:3e:a3:70:44:3e:87:bf:
                    65:27:23:08:8a:8f:f3:ca:a9:c9:d9:d5:ff:3b:6e:
                    79:dc:e3:6b:68:f0:c8:40:6e:ce:13:0e:0d:92:4e:
                    15:88:c4:5a:ce:09:eb:1b:de:58:e7:30:11:a1:84:
                    9d:e4:e7:52:a5:d5:86:05:7c:e6:8b:c5:e4:ab:89:
                    10:a5:9e:e5:1d:8c:8f:8b:01:7e:c2:b7:7e:77:0e:
                    89:42:d9:6e:1b:6f:0c:01:a8:c2:18:a0:9b:26:53:
                    da:54:5e:75:a9:e7:2d:94:b9:b4:02:25:24:90:9e:
                    7e:78:37:19:03:48:e5:57:4d:c0:80:97:95:bf:fa:
                    c2:05:5f:d1:d6:5e:92:2e:6a:7a:4a:0e:e7:08:77:
                    69:6f:4a:05:29:b9:7f:62:1e:ef:23:2e:30:04:32:
                    14:6f:1d:34:7a:00:cf:be:2b:12:59:81:b5:37:ff:
                    ca:62:b8:c3:1b:f2:9b:18:22:b9:8a:69:d9:2e:9b:
                    2c:6f:cb:7b:ba:67:bd:5e:87:16:1d:86:79:48:73:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:D4:FB:FA:E8:75:6B:AC:F0:56:25:CB:74:DF:CF:2B:BE:A6:B8
            X509v3 Authority Key Identifier:
                keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:01:ee:4f:e6:7c:7d:0f:59:6c:97:df:4e:7e:e0:d6:8e:b8:
         ec:2f:b3:54:79:30:62:8b:2d:0b:a5:03:5c:7b:0f:63:71:6c:
         9e:d2:85:99:bd:9a:4d:5c:6e:7d:81:0a:b4:45:e7:f4:06:b5:
         a4:f9:6b:69:b6:13:60:fa:b9:3e:8e:6d:90:10:2a:9a:24:86:
         ee:63:6c:8c:a8:ac:40:f1:6b:05:17:74:a8:66:2c:26:c5:17:
         14:96:30:ab:e0:6e:79:2b:a8:ac:fc:3b:60:12:c9:ed:0f:79:
         04:82:89:80:4d:ea:5c:6f:aa:05:53:06:b2:df:86:26:f6:71:
         b5:61:b4:bf:95:80:73:0b:2d:5e:c4:eb:1d:2e:e5:00:6e:e0:
         22:9b:6b:99:7c:54:49:9b:74:b7:6e:81:bd:80:99:3a:72:fe:
         9a:2a:d6:f3:96:83:d9:c2:62:3c:43:ea:68:d1:58:4b:b0:10:
         75:81:e0:01:24:c3:3e:bf:24:9d:2a:20:9f:cc:dd:5e:a5:f8:
         4c:c3:73:6d:62:6c:fc:ae:ed:6e:46:b6:10:12:61:6c:a7:b9:
         aa:f0:96:c8:12:61:a1:8f:1d:9b:f8:e5:b2:6c:16:ad:b8:a9:
         f6:37:7d:85:b5:bc:85:0a:25:d2:5f:14:3b:89:b1:84:41:e4:
         d9:60:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:21:14 2026 by rpki-client