Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File:                     8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier:          sY4JyrL1Bt8WBOzAxk1PgpvlsGlTtQfXSolQXJ8fxFQ=
Subject key identifier:   1B:05:4C:69:9D:65:EF:BB:5F:86:8A:C6:8F:F8:BD:D6:93:D0:76:19
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer:       /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial:       019E28EFCB354B9EF0AC37A775CB84C4C931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number:          0763
Signing time:             Fri 15 May 2026 00:01:04 +0000
Manifest this update:     Fri 15 May 2026 00:01:04 +0000
Manifest next update:     Sat 16 May 2026 00:01:04 +0000
Files and hashes:         1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: Egp3LnYzsyfzeod/ybXHxzVHvYDXMTMUas71/jV8epE=)
                          2: C9oMe1YGJS29C9D0RZNPa4l9ZGs.asa (hash: m/CMHyBpsoSrORDL0dlkFqewhiO241S8p6mdES9DKBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:ef:cb:35:4b:9e:f0:ac:37:a7:75:cb:84:c4:c9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
        Validity
            Not Before: May 15 00:01:04 2026 GMT
            Not After : May 16 00:01:04 2026 GMT
        Subject: CN=1b054c699d65efbb5f868ac68ff8bdd693d07619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:81:77:93:71:cd:b2:77:32:a2:0d:b1:54:
                    db:b2:15:ef:e4:df:ad:d6:62:c7:13:7f:ed:63:83:
                    66:96:d8:49:d7:64:56:cd:6c:87:1a:05:44:13:39:
                    70:bb:b1:39:6a:48:15:cb:cf:0f:d0:82:cd:c1:d3:
                    88:35:8b:b7:58:ff:79:0e:b3:05:3d:69:8b:e2:0f:
                    9b:71:3d:7c:41:14:fa:75:dc:24:bf:3d:3b:2e:c5:
                    f6:77:4c:47:10:dc:07:f1:2e:37:b7:71:b7:3d:8d:
                    34:59:b8:0b:7b:d1:4c:80:8b:ea:05:38:11:8c:1a:
                    9f:f4:6a:be:02:ad:3e:2a:45:60:48:26:fd:14:eb:
                    de:ec:05:0c:d2:09:08:c8:c5:30:30:d3:c1:d3:97:
                    b6:c3:b3:e9:7e:65:0d:e2:77:f3:8e:39:96:63:ca:
                    d1:09:60:b4:ae:3c:5f:63:97:ce:6c:7f:93:cb:14:
                    d4:e1:8a:20:69:63:9f:83:92:e2:7b:91:cc:87:19:
                    3a:e8:96:8b:d7:99:a6:50:61:5c:dd:13:22:37:b2:
                    68:57:98:72:0c:2a:ae:fb:1c:17:44:d5:2f:9c:17:
                    f1:7d:53:74:51:0b:df:41:c3:cc:02:db:63:b9:92:
                    f0:ae:a0:1b:4f:79:da:fe:8b:fd:c1:09:7e:16:98:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:05:4C:69:9D:65:EF:BB:5F:86:8A:C6:8F:F8:BD:D6:93:D0:76:19
            X509v3 Authority Key Identifier:
                keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:ed:0d:e5:6d:7f:3a:3c:6d:24:c1:6f:1c:d9:c6:9d:f5:
         a3:fa:c9:19:4f:ab:23:7e:c4:d1:12:e0:79:04:1a:36:3e:ac:
         aa:63:f5:d9:da:36:c4:1a:37:f3:31:67:fa:81:69:c9:43:2b:
         9c:7b:d9:53:e5:0c:ca:de:d4:13:2f:26:6f:95:37:a0:e9:0a:
         1b:6f:cd:c7:aa:25:e9:7b:44:0a:eb:78:2b:73:46:26:8a:9c:
         43:3b:24:1b:72:44:03:5b:1a:87:1a:eb:21:b2:3a:47:56:23:
         3e:e9:a1:4d:5c:fc:a1:40:39:7c:d5:1c:ea:ad:c8:6a:6b:ab:
         5e:65:89:a0:e2:32:ef:d0:ca:66:b7:22:a8:e4:2f:99:58:69:
         d2:00:b2:7d:e5:26:58:5d:fc:52:52:ca:21:1f:07:ae:50:62:
         2f:41:db:d3:1e:ce:2b:50:9e:57:9d:a5:67:ab:4b:0e:88:01:
         01:83:c4:7c:ee:d8:b7:9b:9f:3d:d8:4f:62:72:ea:e5:71:0c:
         bc:f9:0d:f7:16:43:ca:a8:a1:40:f1:83:37:19:a1:82:a4:5e:
         2b:64:39:ae:ad:2f:49:04:e3:c7:59:c2:7f:b1:25:14:18:4a:
         3e:c0:86:2f:d0:70:c3:4d:97:b2:26:22:90:8a:4b:ef:a0:2f:
         eb:54:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:29 2026 by rpki-client