Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          5i+obDZCDdCBeHRR0+zS8cUr8G63byedRtYKqybk9bk=
Subject key identifier:   BE:F6:6C:EE:0E:46:D8:74:EB:E2:89:0E:6C:70:45:5A:7C:8A:2A:48
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       019E3261378715F1EF3EF221CA0BAB904EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          1255
Signing time:             Sat 16 May 2026 20:01:32 +0000
Manifest this update:     Sat 16 May 2026 20:01:32 +0000
Manifest next update:     Sun 17 May 2026 20:01:32 +0000
Files and hashes:         1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=)
                          2: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=)
                          3: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=)
                          4: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: mkWNeYSgiZM6nHL2tq533iYyfZA92Zpg39SmHualuPo=)
                          5: nt0-oWRDzO_mDAuQc0QDXAYkENI.roa (hash: ZuR3o3gn2u9J1FCO08jz8Ove8mQtUA4pSs4hehuj6QM=)
                          6: v_G295N19bDrQCJDMtlZ-ai88wg.roa (hash: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA=)
                          7: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:37:87:15:f1:ef:3e:f2:21:ca:0b:ab:90:4e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: May 16 20:01:32 2026 GMT
            Not After : May 17 20:01:32 2026 GMT
        Subject: CN=bef66cee0e46d874ebe2890e6c70455a7c8a2a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:44:d8:0e:9b:26:cd:1b:eb:95:be:aa:3e:
                    c2:75:34:29:f6:4a:9f:f1:a6:81:11:0b:ce:09:64:
                    87:77:b2:be:65:10:74:76:c4:ff:3c:91:0b:49:fc:
                    19:71:ef:b4:6c:b2:27:4e:d8:f7:1c:94:2e:ee:8e:
                    d5:54:c9:c8:17:4f:33:11:e5:ef:d0:b5:0c:4f:bc:
                    f3:ee:fb:51:ae:db:dc:5e:2f:ff:14:85:69:f7:14:
                    33:45:cd:a2:28:ae:4c:a3:92:1d:af:cb:cd:73:5e:
                    42:0e:6b:ae:f9:75:01:9b:f8:a0:fe:f4:ce:96:f9:
                    29:36:0e:6e:b2:3f:e7:41:86:66:6d:15:55:00:90:
                    5b:58:58:37:d4:90:55:e3:24:66:fd:e6:b4:e0:26:
                    1c:fc:78:47:f6:74:b0:aa:d7:42:32:8e:d1:6a:b1:
                    5c:b7:ac:9b:a2:08:97:68:ec:f3:8d:c3:89:56:fb:
                    d0:f8:77:c5:de:ab:8b:15:b7:1f:23:90:22:83:6a:
                    14:42:03:18:cd:55:53:ea:37:aa:70:56:b2:fb:92:
                    a7:1a:8f:6d:c3:e3:90:bd:89:0f:8e:0e:d7:a5:21:
                    a7:fc:6e:dd:91:56:28:8c:58:b8:5a:76:c0:22:5c:
                    a8:d0:f0:e8:be:6f:c5:f2:66:9b:bc:46:9d:bc:53:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F6:6C:EE:0E:46:D8:74:EB:E2:89:0E:6C:70:45:5A:7C:8A:2A:48
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:83:f8:61:08:95:de:62:ce:d8:94:b5:99:af:9b:3e:ad:21:
         8a:f5:d6:b1:cb:69:0a:a7:a1:b2:42:83:34:5b:ff:d7:06:c0:
         1c:93:9c:09:af:f8:2f:c7:8d:e1:92:4c:f6:50:ab:c6:26:94:
         61:9d:de:d4:97:e4:eb:7b:3d:87:8e:e9:b1:8d:7e:77:cb:e0:
         e0:78:5d:c0:15:79:b8:cb:00:4e:18:8a:83:f3:49:e3:f5:37:
         bf:e3:13:8a:3f:6c:49:ba:85:64:79:e8:7a:57:a2:92:58:49:
         91:da:42:fa:6b:f7:8f:cc:50:37:f2:0c:e8:5a:3b:36:c7:99:
         6f:93:5d:3e:cd:74:d2:59:b0:35:ba:68:a5:81:b1:0f:f9:d0:
         87:33:e4:8b:64:c2:b6:0d:95:bd:0b:4c:9f:20:33:b1:e2:08:
         74:82:04:08:df:31:67:89:0b:db:60:47:ce:17:29:f3:9e:bf:
         c0:c3:c9:14:da:cb:b6:f5:d6:c0:9f:8f:a5:1b:ff:25:5c:fb:
         0b:06:c8:23:d9:da:7a:43:5c:1f:10:c4:75:0c:18:6c:b7:04:
         dc:63:9e:1f:54:8e:db:90:c2:5d:a4:c8:5c:fa:19:29:bc:14:
         14:3b:65:c7:a7:b2:bc:7e:e7:bb:c0:18:ac:d8:98:a7:43:c5:
         0d:2f:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:31 2026 by rpki-client