Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
File:                     SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft (raw, json)
Hash identifier:          fs3EPnV1ANUoBcZXJFjPI6RvEG4NItLbP0podhxy7bQ=
Subject key identifier:   F9:41:C3:18:0D:54:C4:D2:BB:78:B0:E0:D2:BC:CE:13:6E:24:8A:86
Authority key identifier: 4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
Certificate issuer:       /CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Certificate serial:       019DECA44691B840E373435D5D980D0FEBAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
Manifest number:          8C
Signing time:             Sun 03 May 2026 07:01:22 +0000
Manifest this update:     Sun 03 May 2026 07:01:22 +0000
Manifest next update:     Mon 04 May 2026 07:01:22 +0000
Files and hashes:         1: SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl (hash: 6vRuHN8ENm5AKkV+/oQafSkQ82+zS/7rHbUxAL7Yz1o=)
                          2: XqMaYvhCHSlYHuAgcBJ3D1XcKOw.roa (hash: sJ5W26p1BLswbXARJ6bN/ijwMZCfu7E6N/+XnCa8Kg8=)
                          3: mSLcPcPlbCaKloucUE197Adzr1c.roa (hash: gW1hk3WhDt/+PalHQ3CRB51/zaP5eafiQ6SCna2I/+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:a4:46:91:b8:40:e3:73:43:5d:5d:98:0d:0f:eb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
        Validity
            Not Before: May  3 07:01:22 2026 GMT
            Not After : May  4 07:01:22 2026 GMT
        Subject: CN=f941c3180d54c4d2bb78b0e0d2bcce136e248a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:e3:18:ca:c1:7b:30:3d:b3:1e:2d:10:73:
                    31:1f:2d:44:31:06:ed:d4:37:fc:3b:83:9b:0b:42:
                    44:a9:40:a0:2b:8c:50:21:47:4d:f4:18:d5:1e:aa:
                    af:8c:f2:2e:f3:e7:81:97:64:60:8f:7b:a1:a5:9e:
                    e9:95:1f:e1:53:51:fe:41:c4:4e:69:78:07:e2:6c:
                    6c:e2:b5:7c:fe:2e:5e:c9:f4:bb:34:53:95:2c:23:
                    6f:c1:2f:71:4d:7a:66:e0:b8:b6:27:60:12:2c:bc:
                    b2:d2:72:18:17:fa:07:88:62:1e:40:2c:3b:ca:df:
                    35:3f:7c:cc:5c:89:60:e3:58:62:31:76:67:06:33:
                    a4:69:fc:4b:96:83:2f:bb:c9:c5:14:2a:80:1e:41:
                    eb:e9:ec:06:d0:1f:4a:dc:6f:c6:d0:85:6e:39:e5:
                    3e:43:2e:f8:95:00:ec:f6:96:3c:58:3a:c7:fd:55:
                    8d:98:da:3e:51:0a:28:33:3f:88:98:1e:c5:94:65:
                    fd:66:a7:50:67:f7:63:71:22:be:7f:11:bc:b8:00:
                    6e:ff:72:13:7b:6a:ce:25:4f:6f:f8:19:fc:5d:a1:
                    ee:5b:08:80:cc:63:96:8e:31:ae:84:d7:06:c5:11:
                    0d:ea:a9:de:59:9f:45:d3:24:5d:57:7c:21:68:5b:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:C3:18:0D:54:C4:D2:BB:78:B0:E0:D2:BC:CE:13:6E:24:8A:86
            X509v3 Authority Key Identifier:
                keyid:4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:73:94:c8:55:dc:b6:5e:8b:09:ef:4c:17:a7:26:6d:72:ee:
         e0:b8:3d:76:20:0d:4e:74:c3:89:b6:d1:05:f7:5c:1d:d2:b3:
         ad:01:32:3b:ca:bf:e6:c5:b8:40:31:3c:26:7e:2b:97:e0:c8:
         9e:0b:4f:27:73:e8:c1:c7:76:2a:91:43:17:e5:59:8b:f0:98:
         2a:ea:cc:de:d9:9e:90:12:df:b7:b0:89:ce:2a:79:a1:32:30:
         f7:b3:85:48:86:48:ba:b8:14:8a:88:08:67:fc:d7:a4:d1:73:
         1d:68:32:f9:b5:5c:91:25:44:a6:4c:14:7e:5f:ef:af:bd:2e:
         99:ab:15:4a:b7:0a:32:b2:79:f9:5d:84:a5:58:57:d1:40:29:
         df:56:68:91:52:d7:5e:c2:1b:51:23:8e:94:04:3d:1d:9a:7f:
         89:4c:57:2a:c3:96:a3:87:b6:8a:79:f9:fc:60:3d:da:1f:fa:
         67:aa:75:91:c6:0c:86:1c:ef:17:fe:a1:e1:1f:8e:e2:42:3c:
         aa:96:6f:51:02:e9:25:7e:2e:db:ae:f4:b0:bc:32:62:cb:44:
         b0:c3:ce:56:66:aa:20:02:fd:af:99:89:3c:a4:41:10:d0:50:
         93:56:ad:d1:ef:a1:d8:8b:ec:de:7f:3f:20:c8:81:1e:92:12:
         e0:8b:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:53:37 2026 by rpki-client