Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File:                     8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier:          73tIUmJSK7ndrmWz8/ai0AMpl1MKjlOarrVUOiBedrw=
Subject key identifier:   3B:34:97:45:AC:F5:F0:F9:18:CF:E1:00:E6:04:B6:A1:63:2D:32:EF
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer:       /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial:       019E30A97741479988A191661909809FCAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number:          1320
Signing time:             Sat 16 May 2026 12:01:12 +0000
Manifest this update:     Sat 16 May 2026 12:01:12 +0000
Manifest next update:     Sun 17 May 2026 12:01:12 +0000
Files and hashes:         1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: WQraVMjWf4MB3UTDeJpsU226jsNK5eyp2TcWCQTj6qo=)
                          2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:77:41:47:99:88:a1:91:66:19:09:80:9f:ca:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
        Validity
            Not Before: May 16 12:01:12 2026 GMT
            Not After : May 17 12:01:12 2026 GMT
        Subject: CN=3b349745acf5f0f918cfe100e604b6a1632d32ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:fe:86:3f:59:ea:c6:aa:e9:1a:39:27:70:
                    43:35:43:65:b7:33:8f:1d:97:20:53:33:4c:34:53:
                    54:fc:98:7a:8e:f3:65:a6:ae:95:12:d7:2d:d3:d2:
                    d1:b0:2e:66:25:3f:00:dd:55:af:8d:1b:77:84:44:
                    d2:5d:e4:f7:12:91:91:38:64:f2:f6:ca:94:81:c5:
                    f9:6a:62:5a:90:04:5c:15:9b:f0:98:15:53:2c:85:
                    4c:9e:47:68:62:73:f3:42:1a:5b:70:3b:cc:33:42:
                    dc:11:ac:d6:06:51:2f:be:11:88:61:72:64:d3:4e:
                    73:41:1b:fb:b3:ca:b1:e7:1e:f5:c6:97:7f:89:04:
                    89:f7:78:4c:07:ff:97:be:4e:4f:47:85:c8:17:d3:
                    de:47:be:02:a5:46:a3:0b:fe:1b:62:35:b9:b8:ee:
                    3c:3b:9f:56:52:94:7f:a9:78:83:07:2e:74:a8:86:
                    87:c8:aa:27:8c:43:38:0b:a8:59:e9:92:15:84:7d:
                    ec:08:91:08:19:ec:4e:68:85:18:3c:0e:8d:87:cb:
                    a4:4d:fd:49:84:ed:dc:20:7e:b9:b0:a4:c9:07:1f:
                    90:d2:bd:bc:cd:2e:d2:f0:47:7d:69:ca:e7:21:01:
                    21:84:1d:c0:77:fc:60:04:78:61:4b:dd:36:e9:29:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:34:97:45:AC:F5:F0:F9:18:CF:E1:00:E6:04:B6:A1:63:2D:32:EF
            X509v3 Authority Key Identifier:
                keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:94:de:c8:30:94:4f:5b:f1:70:7b:db:5b:d0:59:b4:2f:91:
         1a:1c:a3:33:9f:1e:53:a6:b8:ac:80:0c:8d:6f:ae:76:d1:8b:
         a4:49:88:e1:58:61:60:d0:46:39:19:08:7b:cd:66:15:04:b9:
         49:b0:99:2f:71:6c:2c:67:0f:ab:1a:ee:ef:d2:01:84:68:4f:
         b0:91:4b:91:90:79:f5:6b:42:2c:30:68:1b:a1:66:ca:84:28:
         40:e0:51:ee:70:3c:fb:ab:13:72:79:62:70:d9:e9:09:84:96:
         cd:d0:aa:b1:be:71:90:72:96:b5:4f:5e:10:30:fc:0c:42:57:
         a3:ed:dc:69:ff:43:25:21:fe:34:cf:b6:3f:94:3d:4b:7a:d2:
         8e:f5:48:49:23:ab:ec:05:9b:cf:8d:11:16:56:c5:f0:a0:11:
         6c:4a:a0:7d:e6:19:78:eb:d3:f8:61:e2:4f:85:a2:85:da:81:
         07:44:d8:cc:57:ed:db:ca:81:01:37:0b:16:0a:64:dc:04:d2:
         20:4a:bc:a8:cc:6f:ab:c5:96:28:2e:d5:95:a6:3e:95:bc:dc:
         8d:31:ce:9e:12:a8:93:c9:c8:b9:59:bb:19:cb:0c:86:a3:43:
         0f:f5:fc:4e:a6:d4:fe:c2:14:16:d9:65:f2:e6:d2:40:9d:d0:
         51:d4:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:32 2026 by rpki-client