Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File:                     8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier:          r8+42rvHXhUYEadlAZBivwUX0zzCQ7dviv1wwYEda5w=
Subject key identifier:   40:06:E1:A4:5A:85:D0:17:23:A5:B1:EF:F0:E1:D1:DE:F7:10:10:DF
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer:       /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial:       019E29CC987F68FB25DE6AEE1926860EB84D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number:          190C
Signing time:             Fri 15 May 2026 04:02:14 +0000
Manifest this update:     Fri 15 May 2026 04:02:14 +0000
Manifest next update:     Sat 16 May 2026 04:02:14 +0000
Files and hashes:         1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: Y2i5TYCo61mCllyJmYL0v1xcVXk1Y1FKC6F5NcqfJ3E=)
                          2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:98:7f:68:fb:25:de:6a:ee:19:26:86:0e:b8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
        Validity
            Not Before: May 15 04:02:14 2026 GMT
            Not After : May 16 04:02:14 2026 GMT
        Subject: CN=4006e1a45a85d01723a5b1eff0e1d1def71010df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:9c:32:40:d3:39:6c:5f:06:c3:49:28:eb:
                    f5:0b:ca:d3:25:7f:d4:61:cd:57:97:e7:4f:af:3b:
                    24:a5:bc:7e:9d:53:f9:09:a5:32:83:b1:e3:94:48:
                    a4:87:a7:e0:6c:28:ef:ee:a4:be:98:e4:15:1a:d8:
                    0a:42:ea:82:68:85:f2:28:25:49:ff:d7:0b:e1:14:
                    eb:3d:c7:f7:2c:53:a0:f6:ae:50:f4:5d:5e:d6:41:
                    cf:3b:42:4a:c9:53:2d:d5:3c:98:da:8a:f8:e5:f6:
                    b9:e6:4b:11:5e:8e:19:0a:18:9c:82:e7:2a:78:c7:
                    4e:e4:c1:8e:6d:32:61:37:27:24:3b:0f:b5:6c:e6:
                    66:b6:39:5b:a2:cc:23:16:85:42:54:f3:38:be:a5:
                    d0:ae:0f:c5:d8:ff:db:58:91:00:c2:ba:23:2d:5c:
                    14:3f:be:da:73:5b:cd:70:41:fa:d1:b3:10:64:e2:
                    63:80:6f:b9:0e:75:19:85:c1:e2:00:8e:e4:65:cb:
                    b5:36:18:2b:14:1f:c8:e8:3d:35:ac:2e:f5:00:0a:
                    91:49:cf:be:10:e4:a4:8a:a4:f2:27:12:87:10:f4:
                    c9:db:7c:de:52:ac:dd:95:2d:29:eb:f7:a8:3a:13:
                    66:e2:84:32:ad:7e:70:70:83:17:5b:30:e8:15:34:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:E1:A4:5A:85:D0:17:23:A5:B1:EF:F0:E1:D1:DE:F7:10:10:DF
            X509v3 Authority Key Identifier:
                keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:7d:7d:70:2b:cc:5f:e4:d9:bb:72:08:07:73:74:bd:e0:
         14:40:69:1a:f4:22:aa:ab:a8:2e:5d:e5:0f:77:e9:12:7c:d5:
         23:cd:f8:c0:ae:5f:69:1d:d0:8d:1c:a2:20:ca:17:25:b0:33:
         50:1f:13:1f:7d:86:69:d7:4a:55:e3:dd:47:d3:4c:ce:5d:35:
         2c:52:17:02:ce:49:20:c9:ff:43:68:7f:fd:fd:0a:85:6b:46:
         d4:15:2c:dc:23:af:4c:81:23:57:89:f4:a6:d9:14:2d:55:df:
         15:3f:a8:f3:8a:65:c2:b2:d4:6d:75:a9:9f:bd:7b:44:a3:9b:
         de:be:86:43:e4:44:74:c3:35:fc:0d:bc:26:8c:f2:6d:a7:6d:
         4a:bb:dc:d5:6b:67:63:96:bb:62:2a:18:24:59:57:aa:e0:cf:
         d6:d5:a6:22:84:c4:0e:97:3a:b6:74:ca:22:c5:4c:65:97:0e:
         c8:2d:d1:55:09:cb:90:93:48:15:af:d0:3e:41:39:c6:ff:49:
         a1:10:1c:79:21:5a:28:ef:f4:c2:b9:b7:0b:9b:c7:04:31:b8:
         f8:6a:3d:ed:d5:e3:4b:0d:6b:b9:25:56:6f:26:2c:a5:af:07:
         a7:0b:52:15:2a:86:27:97:da:6b:75:2e:e0:b5:65:e2:64:30:
         f8:5b:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:43 2026 by rpki-client