Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          swirz0QmnPbI9PB9OKLVZ2iyhwRJUSVxXqnUWoVasfo=
Subject key identifier:   1A:DD:18:0D:41:66:46:E2:42:0C:14:E0:1C:3D:01:DD:72:46:B3:CD
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       019E3229F5E04B2F44420C7DA751CE14D4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          0860
Signing time:             Sat 16 May 2026 19:01:11 +0000
Manifest this update:     Sat 16 May 2026 19:01:11 +0000
Manifest next update:     Sun 17 May 2026 19:01:11 +0000
Files and hashes:         1: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: 618e/hSJII1tp/bD6kwjLjllBOPC9qQmmXmRmYSkOlM=)
                          2: pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa (hash: JZBBxha8VilEBln8tqWZaEhgr9V20qoqkX6/Lbo7/s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:f5:e0:4b:2f:44:42:0c:7d:a7:51:ce:14:d4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: May 16 19:01:11 2026 GMT
            Not After : May 17 19:01:11 2026 GMT
        Subject: CN=1add180d416646e2420c14e01c3d01dd7246b3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:5f:94:3b:c6:9e:e1:79:0e:02:19:e7:de:
                    bc:f2:2f:08:9c:ac:11:b9:b4:6d:bd:d8:39:56:77:
                    82:ef:f1:bf:4c:01:78:df:ad:9e:cc:f1:c1:1a:86:
                    43:98:63:3e:fe:f8:9f:50:6b:c5:0d:99:a1:20:40:
                    60:f9:f5:08:c5:9d:df:95:1e:4b:8e:5c:cc:26:48:
                    0b:82:42:b1:88:53:7a:ca:16:37:a8:40:0e:c4:26:
                    e5:8c:3c:83:af:5e:9f:da:93:91:64:f2:ff:53:ad:
                    6f:64:7e:86:dd:f6:6b:31:d6:c1:cc:51:da:a7:cb:
                    d7:96:95:2e:bd:bd:56:5a:a2:4e:a2:c7:ce:52:40:
                    ac:44:33:f0:44:93:75:ba:a2:88:3a:2d:a6:cc:6d:
                    56:ac:73:18:98:8b:82:ef:f2:e3:3b:9c:33:4f:41:
                    94:11:b9:72:f7:96:25:dd:53:23:7d:87:e0:35:fc:
                    90:03:4f:af:eb:eb:8d:d6:f6:2f:74:53:83:14:f5:
                    a8:12:ec:22:e8:bc:db:1b:6c:98:b6:1b:37:ff:dc:
                    80:ac:53:9b:f9:32:06:b3:0c:39:97:46:7e:9b:df:
                    6a:96:22:20:2f:59:b0:22:66:19:1f:eb:e6:d7:82:
                    13:93:bc:54:13:51:30:78:80:c3:81:67:ea:aa:96:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DD:18:0D:41:66:46:E2:42:0C:14:E0:1C:3D:01:DD:72:46:B3:CD
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4f:3a:19:65:92:b5:48:80:ce:7d:a8:3f:bf:61:80:ab:b3:
         76:ee:f2:79:d7:b1:31:0c:72:93:48:cb:64:5c:78:6e:a5:e5:
         04:63:6d:f1:a8:b5:de:f5:0e:f4:ef:c7:ac:53:10:02:7a:fd:
         ca:0b:5d:90:f1:4f:e5:13:c9:89:5c:5c:a5:df:a7:46:90:97:
         98:a0:bc:d8:eb:e2:32:fa:2b:48:c4:e9:d7:79:01:21:09:92:
         82:32:66:87:ae:64:4f:e2:6b:1d:a8:3d:4e:36:54:b9:c8:05:
         95:ce:c6:3c:bf:6f:af:66:5a:93:6b:ba:d3:34:b4:58:ea:66:
         66:52:6d:f6:28:54:4c:97:b3:cc:42:8f:10:b0:f1:18:0c:f9:
         43:99:88:2a:a9:0d:55:d5:08:05:90:06:9a:83:c0:f9:0f:55:
         ea:9c:6e:be:ea:96:65:f1:e4:08:a1:c4:0a:5b:91:14:b9:33:
         ca:6f:52:a3:d6:92:16:38:b3:55:bc:32:a7:03:4e:dd:41:15:
         c9:74:d8:6e:aa:7e:0d:61:86:4b:3e:4d:70:76:8c:a3:cc:93:
         91:21:c9:cb:7c:42:3c:f2:3e:1b:d3:ad:54:00:e4:73:ef:1c:
         f4:57:71:a4:89:d4:5e:c5:ea:45:66:6a:ce:fb:34:69:8d:58:
         db:74:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:13:05 2026 by rpki-client