Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File:                     08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier:          UXJXTUP/JFGvhBTf/a+4SO89Rrrrekz1VDcrukeZmpQ=
Subject key identifier:   F0:08:95:4F:3B:46:B5:5F:AD:53:B9:1F:34:A7:4E:24:C8:92:6B:8B
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer:       /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial:       019E3117A46E58B984974258B538A6914A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number:          12D0
Signing time:             Sat 16 May 2026 14:01:33 +0000
Manifest this update:     Sat 16 May 2026 14:01:33 +0000
Manifest next update:     Sun 17 May 2026 14:01:33 +0000
Files and hashes:         1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: c5erco0Jmvt/MgLnxaO7lvBSqG4bgKKzT3qahx6LjzE=)
                          2: yXhNyXRSfQjfxmo-xnpGQqFi810.roa (hash: SLF2lVj7vn7i6fplRiTtNXFnugUCA5oqM+ECg7CqrFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:a4:6e:58:b9:84:97:42:58:b5:38:a6:91:4a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
        Validity
            Not Before: May 16 14:01:33 2026 GMT
            Not After : May 17 14:01:33 2026 GMT
        Subject: CN=f008954f3b46b55fad53b91f34a74e24c8926b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:f9:97:d2:12:ed:ec:be:c5:49:98:64:2a:
                    28:ff:a4:96:b6:35:2a:2c:59:2e:82:42:5f:8f:f5:
                    f4:85:8b:5d:6e:0c:d6:39:af:bd:ff:75:ea:0c:50:
                    43:24:27:a3:f6:bd:0a:bb:4d:0b:c3:70:c7:65:b4:
                    c8:73:51:28:42:68:79:7f:f9:3f:cc:f4:c7:dc:21:
                    9a:fd:91:00:bb:14:b2:ce:4c:0a:d5:c2:12:df:21:
                    fe:ce:66:55:b5:c5:82:33:82:a9:7a:39:3b:61:a2:
                    fc:fa:2c:4b:2a:37:81:55:ba:46:33:64:64:81:14:
                    2d:31:3a:4a:9f:72:3d:18:bd:0d:dd:88:00:06:ca:
                    d6:21:3c:fa:a4:06:f6:5d:20:2e:bd:19:7c:4e:22:
                    ab:c1:f9:07:d0:8c:2e:25:6f:f2:8f:1e:e3:3d:4b:
                    e5:a5:de:6f:39:34:40:a2:66:df:e2:6c:bb:da:1b:
                    a6:c7:27:5c:5d:b0:be:e3:d4:ad:55:5e:d4:f3:03:
                    ed:e4:aa:28:b3:2b:9d:59:ee:9c:e8:be:a5:24:5f:
                    e8:dc:ed:db:61:c9:b8:b4:fe:13:16:3f:ab:77:af:
                    81:80:ae:19:9d:bb:2d:19:da:6d:04:7f:a5:71:1c:
                    fd:af:9b:a7:13:cc:28:ae:11:5d:8f:1a:5a:cf:bc:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:08:95:4F:3B:46:B5:5F:AD:53:B9:1F:34:A7:4E:24:C8:92:6B:8B
            X509v3 Authority Key Identifier:
                keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e5:ae:e5:31:ba:a4:ec:4c:38:5b:2d:75:68:ae:ac:f2:12:
         79:1e:93:de:5a:77:92:24:b6:ad:e0:03:06:a5:23:ce:e2:d1:
         6c:99:78:d8:fc:ad:07:8e:84:a0:b6:ee:52:bb:3b:2c:34:e5:
         db:74:57:de:85:05:96:22:89:ff:a2:22:a6:a2:96:44:a3:b8:
         82:58:03:af:b2:e6:c3:eb:a8:da:29:12:bc:21:14:7c:07:6f:
         36:d4:30:44:b1:41:4d:0b:ce:33:54:c9:87:d8:ef:1f:f7:9d:
         fe:f9:5a:c9:7c:05:84:fe:15:3c:68:0b:63:5c:2c:cd:1a:fb:
         27:ee:c4:7e:82:18:f0:f5:d4:be:b8:b2:05:03:80:6c:9b:6e:
         02:7c:97:43:02:e8:d6:6c:66:9c:9a:85:c2:76:61:2a:2f:0b:
         7d:13:b4:67:cb:2d:f1:a3:ff:b0:c0:11:83:38:01:ee:64:90:
         ba:14:40:1c:4d:6a:87:95:88:13:29:29:01:6e:50:78:76:1c:
         19:5a:0d:2e:18:af:4b:76:93:01:d2:6b:61:92:06:8f:2b:a3:
         4b:03:40:af:05:d9:6d:b5:f7:bd:ff:12:89:02:66:3d:68:25:
         42:d6:57:5b:a2:ab:b0:76:34:b6:34:97:9f:3a:53:e5:24:42:
         49:1e:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:10:57 2026 by rpki-client