Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File:                     8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier:          1iG25GXHt+be14nprMOqc7EINwHGLIYoXGoRTAocH6A=
Subject key identifier:   54:62:70:F4:87:AC:76:17:C1:E4:2A:8C:AF:B2:DD:0E:0B:E1:DB:E4
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer:       /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial:       019F189F1F9E788F0E8DF9E37441BFD97682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number:          1888
Signing time:             Tue 30 Jun 2026 13:01:49 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:49 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:49 +0000
Files and hashes:         1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: CQcCf7id9G/SVS21mrckTIQQGS0K/8s9T1w87PatjRU=)
                          2: mImUBsIy_K7hP2R4qNRN0dtJq4M.roa (hash: RhFRQt0PkCizfyNCWeuFtu6GmF01B1uaXSkERKXxJrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9f:1f:9e:78:8f:0e:8d:f9:e3:74:41:bf:d9:76:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
        Validity
            Not Before: Jun 30 13:01:49 2026 GMT
            Not After : Jul  1 13:01:49 2026 GMT
        Subject: CN=546270f487ac7617c1e42a8cafb2dd0e0be1dbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:91:7a:36:57:97:5c:4e:11:85:07:7c:dc:
                    6a:54:22:11:8a:89:36:ea:af:6f:a4:dd:e9:87:ad:
                    63:64:7b:66:c1:69:d4:8b:40:76:4d:af:67:70:ef:
                    86:cd:bd:c5:bb:1c:7e:33:94:29:a7:ed:2d:9f:43:
                    8d:91:00:d1:cc:bd:05:16:e2:75:f0:77:d2:94:1d:
                    de:07:15:4f:79:83:27:61:85:ca:c2:12:25:c7:36:
                    9b:e0:ce:30:bb:02:ae:54:dd:1c:9a:54:9d:25:a7:
                    e1:99:49:3d:e5:f8:fe:fd:c8:17:62:23:74:30:2e:
                    51:ab:b4:28:2e:e3:a0:99:ee:d3:3f:69:e5:38:7e:
                    f9:38:1b:9e:c2:d2:b3:66:7b:2e:8d:63:7a:e4:bf:
                    4f:92:e7:ce:7c:b8:7b:59:85:be:11:6f:29:eb:0e:
                    63:0c:7c:f8:e3:37:08:0b:f4:38:23:db:71:f7:ee:
                    f4:fa:53:f5:17:94:49:9b:7c:26:18:2c:04:3d:d3:
                    1c:3b:d2:f2:44:bc:8c:6a:aa:ee:5a:1f:88:bc:e8:
                    71:ca:f8:ba:8c:fa:07:c3:28:fe:5f:d5:e9:16:64:
                    63:0c:0f:58:70:1e:e4:f8:7c:d6:8e:22:b8:c2:bc:
                    9f:9e:c0:8c:f9:79:11:86:07:7f:1e:b3:1e:ee:35:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:62:70:F4:87:AC:76:17:C1:E4:2A:8C:AF:B2:DD:0E:0B:E1:DB:E4
            X509v3 Authority Key Identifier:
                keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:f0:be:1a:c2:3f:83:09:3c:90:b8:57:92:3e:6e:e8:ce:
         fd:06:67:07:06:7d:5c:57:09:57:7e:58:2b:ad:49:21:55:3b:
         cf:eb:f2:21:b3:79:05:b1:17:65:d4:8b:04:57:eb:59:62:d3:
         db:f1:c2:38:a5:df:e4:7e:9d:b0:84:97:08:9c:c6:be:07:99:
         28:c9:e9:f2:8b:8f:68:50:5d:8c:9f:ae:81:bd:66:3d:2d:67:
         65:49:6d:be:ac:19:23:02:d3:d7:49:b3:3b:14:69:4f:82:d5:
         a0:b7:52:81:f9:18:58:0d:8f:e8:3d:fc:8c:c4:19:27:3c:3b:
         89:f5:76:9d:48:da:41:83:a8:dc:38:fb:bf:60:17:49:1e:e7:
         b6:6b:c4:4a:e8:3e:4b:e8:6b:02:58:18:a0:b9:c1:56:76:1f:
         a9:a5:37:62:5f:a3:cf:88:d5:b0:5a:ba:42:fb:b5:71:b4:c9:
         2b:6e:7a:ff:2a:87:85:de:a8:0e:83:fb:5e:63:15:6a:df:7f:
         ce:95:cb:b8:df:36:c4:c5:0a:3c:a2:31:67:e9:06:26:80:25:
         db:29:e9:c3:71:cd:3d:09:e6:34:f6:cb:7f:4e:d0:25:ca:f7:
         9b:67:2e:d2:1f:db:56:2f:56:83:9c:61:bf:73:61:19:eb:fa:
         82:24:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:05 2026 by rpki-client