Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File:                     8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier:          LblcZCSfvQAAJM6tZLOJKITRjF9faJEXlGcbQS0pk/8=
Subject key identifier:   E5:0D:95:98:40:AD:94:0A:D9:79:F0:88:36:60:91:E7:47:AC:18:56
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer:       /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial:       019E3117181048161025752E658437C30BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number:          0A8F
Signing time:             Sat 16 May 2026 14:00:57 +0000
Manifest this update:     Sat 16 May 2026 14:00:57 +0000
Manifest next update:     Sun 17 May 2026 14:00:57 +0000
Files and hashes:         1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: 29HfJhHKXLJeuqJb0f/zwTi1mU5/EV2/W5QXV+OwB2s=)
                          2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:18:10:48:16:10:25:75:2e:65:84:37:c3:0b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
        Validity
            Not Before: May 16 14:00:57 2026 GMT
            Not After : May 17 14:00:57 2026 GMT
        Subject: CN=e50d959840ad940ad979f088366091e747ac1856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:fc:cf:66:55:aa:1e:1f:b2:8a:3f:33:21:
                    81:8b:1b:df:d9:df:a1:74:8f:e2:3f:31:e6:87:ac:
                    01:43:85:a2:2e:e6:ea:fe:ee:3b:f9:e7:6b:62:86:
                    fb:f9:a0:5a:b6:34:ea:e3:3c:ce:1e:73:52:14:3d:
                    fa:67:20:31:da:96:95:70:9f:d2:ed:bb:8b:f4:d0:
                    7c:a4:3f:15:bc:bb:e8:9c:a2:29:89:2c:cc:bb:d2:
                    6c:ae:84:02:de:05:2b:53:97:28:00:ed:66:01:6e:
                    ff:b1:b1:c8:79:76:0f:96:d7:d4:41:24:75:c2:81:
                    27:7a:aa:38:99:45:f6:40:86:20:8f:9c:42:0d:ff:
                    37:8d:53:64:3f:a6:15:66:8b:a6:e3:a1:d7:39:8c:
                    d0:36:e4:6a:2a:76:32:29:83:9c:24:3c:17:e5:d2:
                    7b:9a:ec:58:90:8e:de:9e:a4:40:98:d1:14:6a:c4:
                    d8:f2:54:8f:39:58:de:4c:31:dc:c0:72:84:aa:bf:
                    f8:5c:d8:46:43:14:6d:cd:a1:c7:d9:b5:20:2c:3a:
                    4e:76:78:4b:77:88:13:c0:5c:d2:90:2c:53:69:a1:
                    2f:84:11:6b:66:74:5a:21:fb:9d:f9:88:68:bb:6e:
                    18:0a:43:a0:c9:1e:81:21:a9:a2:83:8d:1c:71:1c:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0D:95:98:40:AD:94:0A:D9:79:F0:88:36:60:91:E7:47:AC:18:56
            X509v3 Authority Key Identifier:
                keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:af:ba:dd:f7:ce:41:0a:3b:f7:9a:b0:0d:da:42:cf:2a:2c:
         13:9a:85:7b:87:10:c1:9b:85:4f:9e:62:b9:63:17:a0:f5:39:
         55:1c:43:65:c6:c6:1b:62:78:a8:18:6c:32:5b:d6:28:17:bc:
         16:33:b6:61:29:59:09:3a:92:91:70:86:5c:05:30:95:d2:53:
         7c:ec:74:62:42:9b:88:fa:04:6e:2d:e9:24:b9:da:d6:40:93:
         68:5b:69:1b:a8:c6:7b:12:d5:80:54:34:e1:2d:be:58:61:21:
         32:f9:7e:54:04:f9:f1:86:d1:2d:a8:05:89:dd:41:a9:84:75:
         61:2d:f7:2f:72:bb:38:26:88:16:f0:95:e3:80:42:05:97:ac:
         86:2d:51:70:63:7a:d0:80:aa:14:b8:8d:bd:1c:77:96:f8:d4:
         a0:07:a8:40:67:c6:3d:eb:58:8f:c1:68:9a:12:9c:20:77:86:
         29:ae:b5:e0:23:29:a6:19:fd:e3:fa:35:94:18:df:98:3e:58:
         16:71:a7:68:d1:17:71:b4:6d:a3:93:44:3b:0e:dc:c2:45:ab:
         b5:89:52:ac:d2:fe:18:9b:cd:a4:e1:d3:a1:3a:00:55:a3:ed:
         50:38:64:d8:e8:ba:cb:d1:83:3c:01:47:dd:98:a3:b9:e0:0a:
         a3:01:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:02 2026 by rpki-client