Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File:                     8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier:          dIneQUoCrttAijSLnB177s2Wimujv83+ewYx8SJrXu0=
Subject key identifier:   EC:A5:43:E7:0C:8E:12:C1:D7:0B:A4:BA:23:7D:D5:11:42:52:35:15
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer:       /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial:       019E2FCD3A9E739A9380FAC1DE9633CD6887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number:          1323
Signing time:             Sat 16 May 2026 08:00:39 +0000
Manifest this update:     Sat 16 May 2026 08:00:39 +0000
Manifest next update:     Sun 17 May 2026 08:00:39 +0000
Files and hashes:         1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: bdUcp5QOVOHmXh+hy6HO+fkfBWJClTXZV+9FCU+2b0Q=)
                          2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:3a:9e:73:9a:93:80:fa:c1:de:96:33:cd:68:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
        Validity
            Not Before: May 16 08:00:39 2026 GMT
            Not After : May 17 08:00:39 2026 GMT
        Subject: CN=eca543e70c8e12c1d70ba4ba237dd51142523515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:a0:8b:31:b6:2c:83:04:26:ab:99:ee:39:
                    5b:7b:58:f1:4c:9c:7f:5d:4f:d2:20:3b:0a:37:7c:
                    b0:35:eb:39:9f:66:70:0c:fc:35:a3:36:9d:da:d8:
                    ff:b8:15:6c:84:ab:28:71:da:31:19:6f:e0:2b:37:
                    76:af:3e:fa:11:81:04:ba:f7:41:9b:c2:7f:18:46:
                    cc:c5:43:ed:11:98:fa:45:58:6f:c7:99:1f:ea:76:
                    23:33:10:d0:b3:7a:22:d6:1f:4f:49:92:f2:e1:9b:
                    12:0e:ac:a1:df:4a:18:6d:b4:1d:39:6e:28:a2:b3:
                    0d:74:f3:c3:7e:69:37:c2:5e:d6:ea:aa:25:99:96:
                    93:89:d6:9c:c8:67:b7:fd:37:17:58:27:d9:13:63:
                    5c:4f:f1:3e:17:84:85:0f:0c:20:76:dc:a0:60:b5:
                    6d:06:8e:4d:65:f3:aa:26:dc:39:d8:16:79:05:21:
                    78:bb:90:f8:17:31:50:36:3a:0f:92:c1:4a:db:8b:
                    50:f1:be:74:b0:89:05:e1:ef:5a:63:61:6b:f7:d3:
                    ed:6d:41:f9:46:65:ca:21:a8:4c:af:07:49:16:6a:
                    f1:0a:ee:97:46:ba:2a:08:5f:26:9b:88:34:60:8f:
                    1c:77:f5:1f:ad:46:f7:9b:74:c0:0f:1c:55:c1:4c:
                    52:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A5:43:E7:0C:8E:12:C1:D7:0B:A4:BA:23:7D:D5:11:42:52:35:15
            X509v3 Authority Key Identifier:
                keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:35:f6:3b:d0:e4:9e:7f:4e:07:ae:7a:e5:53:f0:a6:29:34:
         4f:4d:82:8e:ac:26:fa:19:fe:13:86:98:16:2b:dd:fe:c7:ea:
         0e:74:ff:83:40:72:c3:b6:2c:26:12:33:fd:e6:f8:3b:34:2e:
         60:b4:2f:4e:85:0c:6e:4b:12:04:d3:f6:87:96:7f:1e:d8:90:
         e0:1d:4d:d1:3f:0a:e1:9d:9b:22:f4:8a:3d:03:e5:18:2c:0c:
         d7:b1:72:b5:87:39:56:19:be:93:d5:c8:23:4b:b1:63:dd:df:
         33:f0:91:42:99:95:fe:90:c0:3d:3d:4b:75:d1:a2:ce:fb:16:
         0b:fd:00:a9:4f:32:f4:0d:67:a1:64:1f:ee:e5:17:9e:6b:da:
         0e:da:c7:38:7b:40:84:b2:95:f0:f7:c9:75:d4:9b:19:44:31:
         69:41:e8:b1:7c:ce:8b:b1:08:1a:76:70:bf:fc:95:cb:9b:65:
         7a:da:d3:cd:06:e2:21:07:a6:b0:5f:a5:20:ad:12:a0:65:ea:
         9c:40:d0:6d:0d:a8:37:9a:6c:27:1d:e1:32:ab:86:f7:29:fe:
         20:fd:aa:f0:6d:49:04:4f:29:b5:b9:6a:6e:10:7d:db:22:1e:
         9c:14:89:0b:56:3f:74:5b:01:86:3d:04:2b:d0:28:16:54:88:
         56:af:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:27 2026 by rpki-client