Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File:                     8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier:          UB4H65/ksatodNBglROsQKrJAPtoH2ZD6WnAz3vbkCw=
Subject key identifier:   54:78:E8:33:5F:A4:24:0F:02:EB:4D:43:F2:43:A8:75:B3:02:5F:07
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer:       /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial:       019E30DFEBB471BA7A9D0868200F2A95EF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number:          1391
Signing time:             Sat 16 May 2026 13:00:41 +0000
Manifest this update:     Sat 16 May 2026 13:00:41 +0000
Manifest next update:     Sun 17 May 2026 13:00:41 +0000
Files and hashes:         1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: bD0x8E5whnnkwyrJAW9By9FqZXkQuiWyul4eUdD+e8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:eb:b4:71:ba:7a:9d:08:68:20:0f:2a:95:ef:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
        Validity
            Not Before: May 16 13:00:41 2026 GMT
            Not After : May 17 13:00:41 2026 GMT
        Subject: CN=5478e8335fa4240f02eb4d43f243a875b3025f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:ed:d1:71:80:79:24:f9:10:ac:7a:8c:fd:
                    3f:c2:7e:98:68:31:c1:83:2f:6b:b8:94:8c:8b:76:
                    4b:8c:03:0a:7f:c2:e7:f6:3f:0c:17:c8:94:08:00:
                    dc:27:70:d6:f5:eb:e1:2a:e0:c1:8e:19:1a:17:4b:
                    66:6e:00:80:40:f9:b8:48:ad:b6:6d:82:e1:44:40:
                    fa:ae:8a:e4:b0:eb:37:ef:ff:57:81:dd:e2:f6:60:
                    2f:bc:52:7e:da:2c:08:26:28:cf:3f:dd:19:85:65:
                    7e:5e:57:45:54:d1:6b:94:6a:60:bc:36:6a:61:ab:
                    c4:88:b9:3a:d6:29:a4:16:af:fc:b7:dc:e4:b5:61:
                    86:44:c4:77:ca:ce:ef:1c:c1:d5:4c:b1:09:a5:2f:
                    bf:61:49:30:80:a8:18:0b:9d:c1:35:ca:32:7c:1f:
                    f1:54:4a:92:da:cb:ca:00:3f:ab:f6:4e:05:8e:7e:
                    1a:c1:10:45:8f:26:81:13:1b:87:12:e5:1c:c6:2c:
                    d1:97:97:79:1c:0c:19:5e:a2:11:3e:04:91:d8:de:
                    f3:80:f9:72:26:5d:2d:36:45:43:cb:15:37:7d:51:
                    b6:c0:53:2c:92:de:54:55:71:a2:18:64:08:7f:1d:
                    12:ce:51:5b:6b:51:38:e1:46:e1:9b:72:0b:61:0c:
                    c3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:E8:33:5F:A4:24:0F:02:EB:4D:43:F2:43:A8:75:B3:02:5F:07
            X509v3 Authority Key Identifier:
                keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b0:d8:b3:ea:ff:2d:79:b7:4f:61:ca:87:92:6a:cf:cf:2c:
         6a:f8:82:32:04:06:b3:1e:04:8e:b4:31:74:55:23:84:fc:18:
         f4:c6:ac:3c:60:29:33:3a:e7:a6:40:75:ca:9e:c0:95:29:a3:
         22:d1:f9:13:2f:50:33:3b:6b:dd:ee:6b:7b:f3:93:c0:2b:db:
         64:7b:24:8e:57:37:ca:ce:fd:46:49:58:35:ee:d3:a7:e4:7c:
         1e:53:78:d6:df:69:44:01:1a:59:3c:87:78:9b:0a:05:9a:0b:
         fb:35:ee:ac:6d:06:3c:02:6e:6c:8e:5b:7c:48:19:de:64:be:
         67:2c:b1:6e:61:49:41:c0:92:66:e0:8e:48:ba:8b:21:e3:a8:
         3b:ea:c3:3f:76:91:0b:11:57:43:97:72:d0:df:a2:93:f3:14:
         b5:47:f0:78:da:5e:1f:b0:91:a3:3f:58:bd:a7:20:1b:b1:02:
         e5:64:e9:e9:44:3a:6e:46:e2:aa:fd:eb:87:ba:fa:2f:02:1e:
         cd:e9:3a:c8:f7:72:2e:c1:72:27:af:a6:ce:a5:bb:c8:68:6c:
         fd:a6:75:fb:32:c8:bd:bd:f5:f6:57:cf:29:55:a7:3b:67:d9:
         6a:03:ca:a3:6b:62:b8:40:36:81:07:a3:27:97:29:3a:48:b2:
         fb:e5:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:25 2026 by rpki-client