Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          nJj4HrMyiJCFvB7JXTmAobpiqfSmVDAKNpFQ9qoyv1I=
Subject key identifier:   35:15:0A:8D:5B:B0:00:31:C0:37:07:A6:6D:E7:BD:2F:39:E3:7A:95
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       019E3072EF9F0E1A10ED45FC88CB79C01245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1A36
Signing time:             Sat 16 May 2026 11:01:39 +0000
Manifest this update:     Sat 16 May 2026 11:01:39 +0000
Manifest next update:     Sun 17 May 2026 11:01:39 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: dboZRjzTAmWqFRL1qC2a3kSS0mPYYRg7pzv7en7GnG0=)
                          2: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
                          3: QtiXcakAti6d2iXhKH347YHNMXo.roa (hash: pow1d1/9bSpkBqspDh8+9JjMr6QZKuXaq7BSx5gfwvI=)
                          4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
                          5: q38Vrr1-lrXh4gRVryv7KRjcsHU.roa (hash: GS4WkhgAvCrSjsSDa1MVGmMSwhXFRTBu+xrlewUGZtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:ef:9f:0e:1a:10:ed:45:fc:88:cb:79:c0:12:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: May 16 11:01:39 2026 GMT
            Not After : May 17 11:01:39 2026 GMT
        Subject: CN=35150a8d5bb00031c03707a66de7bd2f39e37a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:0e:42:a3:3f:75:bd:39:cc:e6:93:d2:8f:
                    4b:4e:73:6c:15:34:6b:f1:eb:29:1e:18:d7:45:7c:
                    95:31:09:8f:1c:89:0c:e7:d4:57:6d:22:dd:13:b3:
                    e5:78:bd:97:86:20:cc:a4:cc:3e:a7:60:f3:a0:89:
                    6b:43:d2:9c:ce:12:4e:47:70:79:9f:f2:32:e3:84:
                    1f:1c:b5:13:bf:92:6b:05:76:d9:ab:a0:d5:ca:fe:
                    52:9b:80:c1:11:11:01:c0:bc:dd:7d:9c:9e:83:e9:
                    59:d5:84:5e:01:73:78:21:77:7b:32:26:a0:66:58:
                    6c:fd:b0:60:e8:ca:ee:dd:c2:da:ff:0f:58:97:0d:
                    3f:a0:a2:90:6b:ba:0d:22:cf:72:1d:98:3e:76:ac:
                    e8:ec:d8:2f:28:ad:2f:80:44:ba:d9:26:3b:82:67:
                    f0:50:74:df:40:bf:05:5f:cd:fd:64:8f:41:6b:81:
                    f7:2b:61:93:8c:09:21:9b:64:53:49:97:ab:37:bf:
                    f0:da:b6:30:44:e4:0a:b7:9c:e6:91:ab:3a:27:60:
                    25:0a:68:2d:13:a6:18:8a:e0:89:c4:b8:1a:76:59:
                    a5:87:d3:d5:90:0f:22:e4:11:b0:7a:96:0f:9d:00:
                    fc:04:4f:3d:fc:ad:ac:31:25:f9:72:fa:a7:45:f3:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:15:0A:8D:5B:B0:00:31:C0:37:07:A6:6D:E7:BD:2F:39:E3:7A:95
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ff:c5:29:86:d6:bb:74:98:8a:2b:fa:d5:c6:ba:9f:d0:f3:
         da:76:49:e0:be:51:46:e3:3c:1f:62:e5:d6:02:ef:f1:c6:d2:
         79:d0:2d:0e:6a:f5:de:1c:e7:c8:02:14:f6:07:62:3f:95:a8:
         68:94:3d:0f:73:30:35:81:04:1e:ab:a6:8c:ab:5e:ab:12:69:
         ae:ee:5d:fb:f9:62:fa:64:ce:21:02:59:2b:80:5b:bd:d5:30:
         1f:05:70:4c:7f:06:59:9b:3c:2f:5c:99:0f:9e:40:bf:87:3c:
         60:15:28:86:7f:e9:60:89:f9:1a:c3:a9:93:95:f1:95:e9:6c:
         a9:9b:fa:a6:0c:97:40:4c:c2:40:ad:46:32:81:9b:2b:bc:9a:
         8b:8b:5f:bf:8e:75:a5:b9:cc:bf:3b:17:df:d2:9c:2a:8f:b5:
         a9:86:c6:5c:7a:4d:99:68:af:cb:bc:9d:d2:33:81:9d:e2:2c:
         0e:81:7b:16:2e:12:29:81:66:8b:ee:05:bd:28:5c:2d:d3:aa:
         2a:c8:cb:b1:7a:74:0f:f6:7b:9e:c5:f1:36:0a:4c:23:ca:2b:
         97:37:06:b7:b0:ea:5e:06:55:dd:77:26:a7:eb:3d:d4:e1:37:
         56:2e:39:dd:ba:81:ac:94:ae:28:1d:dd:db:27:b8:cf:47:c2:
         5e:8c:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:35 2026 by rpki-client