Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File:                     8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier:          5eIRF8YNISQNVZ5nb8eVEP0ZXMIKzPo4jyjskWHh/fo=
Subject key identifier:   35:79:0C:DB:F1:8A:D3:1C:7A:E7:B2:8B:8C:25:4F:19:C6:67:E7:A6
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer:       /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial:       019E2F96A3217B5D7D873F5E96C0ECF218DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number:          1649
Signing time:             Sat 16 May 2026 07:01:01 +0000
Manifest this update:     Sat 16 May 2026 07:01:01 +0000
Manifest next update:     Sun 17 May 2026 07:01:01 +0000
Files and hashes:         1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: qOaYYJaA237SGbqFBjtSviFAVkaS88qM2VLtG0VCggs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:a3:21:7b:5d:7d:87:3f:5e:96:c0:ec:f2:18:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
        Validity
            Not Before: May 16 07:01:01 2026 GMT
            Not After : May 17 07:01:01 2026 GMT
        Subject: CN=35790cdbf18ad31c7ae7b28b8c254f19c667e7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:40:46:bc:f3:37:fa:a7:34:99:11:c7:7a:
                    a5:8f:b1:bd:1d:8d:c1:8d:10:27:b3:64:05:34:0d:
                    f0:b9:71:e4:a1:0d:ea:31:d8:02:97:7a:86:3d:a8:
                    cd:64:ea:be:41:a6:46:29:67:82:3b:14:08:4c:e0:
                    bd:c1:17:cc:ca:26:26:20:ce:73:8c:8b:f1:7e:91:
                    e0:fa:b8:73:fe:65:83:68:be:21:2b:86:d9:4d:d7:
                    83:5f:01:0c:ce:50:ba:d9:4f:e8:6d:77:b8:c7:83:
                    aa:54:ce:f4:78:07:d0:73:4c:f1:2c:e4:67:db:df:
                    73:5a:4e:2b:27:56:5b:1d:b6:23:e3:a7:c0:54:78:
                    8c:5b:ac:bf:bb:f6:5b:53:ac:07:97:a3:d9:3c:6b:
                    61:12:78:dd:47:96:e1:83:10:c6:b7:db:10:6c:7e:
                    39:26:53:09:80:82:65:19:dd:69:01:7e:16:1f:8d:
                    bc:f6:ad:f1:e2:cf:00:c9:7e:2c:47:ec:58:2e:8f:
                    4a:c5:b5:ee:c4:95:01:6e:fd:28:2d:0d:88:37:e6:
                    e1:47:07:f4:ee:41:6e:25:cf:ce:37:16:9d:59:78:
                    07:c7:c4:b4:03:fc:1f:e0:9b:7f:99:41:69:f6:e9:
                    d4:69:0e:63:66:2c:23:73:ae:92:26:d3:8c:99:3d:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:79:0C:DB:F1:8A:D3:1C:7A:E7:B2:8B:8C:25:4F:19:C6:67:E7:A6
            X509v3 Authority Key Identifier:
                keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9f:71:c3:28:27:cb:ee:4a:45:50:ac:b6:33:fd:f9:4f:17:
         28:23:aa:59:86:14:7b:13:0f:69:6e:07:83:54:a4:58:b1:0b:
         fc:f3:df:97:01:42:a7:76:b9:28:73:d7:f0:b5:e1:14:e0:18:
         c9:f7:db:03:8d:c6:88:42:6b:f3:4c:18:d1:46:45:82:61:f7:
         01:b5:ae:a9:b2:42:71:c9:18:48:d9:7d:6f:13:92:e4:31:ef:
         78:c5:f9:20:74:ae:fb:ea:c0:89:c0:73:da:8c:18:62:6d:62:
         a6:76:15:49:0f:75:72:ed:0b:07:13:f1:a6:f1:db:93:ea:ae:
         58:d0:94:84:07:27:6b:5b:79:43:7f:88:7b:97:15:5a:e0:45:
         8e:91:4d:65:9e:0a:93:33:23:ae:1f:22:67:1a:a2:a0:7b:cd:
         5e:0b:3d:9e:2b:67:47:61:70:08:aa:f5:c3:71:3b:3a:19:5c:
         d5:bc:28:c1:a5:b9:04:a4:4c:2f:08:c0:a3:9d:43:ae:4a:d2:
         14:ec:83:bf:fa:cb:29:6e:e9:04:4e:3b:0f:6b:34:98:39:24:
         0b:62:35:9c:14:c5:b7:90:14:fb:bf:a0:57:3e:33:05:e1:f3:
         8e:38:18:6d:71:7e:09:94:a6:28:9f:3e:78:6d:2a:fa:ec:84:
         78:a5:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:53:59 2026 by rpki-client