Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          uu5585keOOf1Q0+szeTdWY1X1wf/+0ogIU8Yl7ilp5c=
Subject key identifier:   8E:29:35:59:57:E7:DB:D2:A6:07:2F:97:57:EF:41:7F:AB:EF:BE:66
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       019E2F5F7F79246551F95148026737911B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 06:00:48 +0000
Manifest this update:     Sat 16 May 2026 06:00:48 +0000
Manifest next update:     Sun 17 May 2026 06:00:48 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: OQbxsghTS3iBLGxYKYYNwRUuKyb20gWrPy/FMnlaAK4=)
                          2: RBLs6_JEMpJ2-E4f-zbgq3OA94g.roa (hash: YtzTgnRD0gPLAxf3Gvly0Fh3NIAfS3kf5OMJ5xYDEXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:7f:79:24:65:51:f9:51:48:02:67:37:91:1b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: May 16 06:00:48 2026 GMT
            Not After : May 17 06:00:48 2026 GMT
        Subject: CN=8e29355957e7dbd2a6072f9757ef417fabefbe66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:50:80:8b:88:6f:1d:2b:19:a8:59:71:90:
                    95:b9:02:ad:58:33:f1:80:cb:17:cf:04:c6:06:1d:
                    2d:e4:68:f0:84:bf:7d:cb:cf:04:ed:ab:ae:6e:4a:
                    8c:2e:d6:ca:f2:f0:79:82:ba:d6:79:84:a9:69:15:
                    d4:07:14:93:23:2e:70:5c:c6:53:cb:54:f3:98:1e:
                    e1:12:8e:a0:ce:07:e2:ca:04:cf:4f:96:47:78:d8:
                    92:01:58:d7:34:23:8d:c6:e5:16:bc:d0:aa:58:43:
                    42:5d:dd:90:e1:d7:8c:14:d7:37:96:78:5b:e2:00:
                    8c:32:c5:c7:d2:1c:76:6d:c8:41:5e:26:2c:41:62:
                    1c:92:f5:f3:71:43:d5:67:ad:d4:b6:ac:37:3f:e7:
                    de:b6:7e:d2:e4:5b:9c:58:69:43:e5:9a:fd:e9:e2:
                    07:68:63:95:5b:7c:90:85:bd:e9:1f:4c:c9:3f:f5:
                    30:84:02:a6:5a:4a:a4:26:96:28:65:77:af:4c:b9:
                    5a:fb:06:cb:ea:90:ec:7c:07:d5:28:60:97:94:50:
                    47:53:dd:af:a1:2c:8b:84:92:3d:74:c1:47:7e:e6:
                    29:e8:ce:18:03:30:c9:36:70:58:bd:e5:cb:82:d1:
                    ee:06:64:12:66:fb:e2:1e:4d:8d:7b:d4:30:1b:d6:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:29:35:59:57:E7:DB:D2:A6:07:2F:97:57:EF:41:7F:AB:EF:BE:66
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6c:c6:35:01:14:8b:dd:a8:5f:e1:75:b8:e0:d2:97:e4:e4:
         ff:c1:5f:4f:64:f8:88:f2:53:13:2f:53:d3:98:a7:72:c6:f3:
         ce:4b:86:28:e9:54:33:93:dd:cb:ce:e0:51:12:b9:d1:11:66:
         8d:9c:4f:92:2a:8a:e6:66:c3:7f:08:b5:47:a9:0f:95:3e:15:
         f3:4e:0a:13:db:b1:5c:24:05:b6:89:9e:c7:5d:d7:10:dd:bd:
         a8:70:ec:33:c0:85:86:64:e7:8e:ea:d1:39:b2:c4:70:5b:b7:
         48:f1:00:ff:bf:c5:08:9d:64:29:c7:ec:e8:da:8f:05:f4:6c:
         51:64:c1:e7:52:a9:74:12:89:07:9d:c0:e0:3e:ee:d8:e4:28:
         c9:6f:56:3a:19:f2:10:d5:a7:1e:86:c4:7b:3f:0e:28:37:fc:
         02:d9:41:f3:64:71:1f:df:e1:57:b0:ac:9f:e9:41:d1:d4:a7:
         93:9a:61:1b:e4:02:5a:05:65:ee:92:fa:95:6b:ee:eb:65:1d:
         ab:db:71:96:d0:9c:6a:4f:da:c9:23:2f:8e:2e:cb:6c:75:22:
         fd:f3:2e:97:55:72:12:cd:5f:8e:b0:1b:e1:39:a1:23:55:f5:
         e5:a9:d8:b9:4c:c7:38:43:2a:ca:d9:b0:ca:2b:56:b5:fb:83:
         05:ba:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:24 2026 by rpki-client