Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File:                     z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier:          OUfgdNgUGvmnzJjBShkJVqGnft5g3tjXq5a26i5SPTw=
Subject key identifier:   20:B0:8C:FC:EB:75:0F:9A:68:F3:0C:1B:FD:BE:A1:46:65:05:B5:99
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer:       /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial:       019E31173F05D30D6A7DAC7646D3379BB177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number:          1471
Signing time:             Sat 16 May 2026 14:01:07 +0000
Manifest this update:     Sat 16 May 2026 14:01:07 +0000
Manifest next update:     Sun 17 May 2026 14:01:07 +0000
Files and hashes:         1: G0xz0bLV9EAQly4_g7VObUShRtE.roa (hash: ABgZUft6yhbazt8klEM2ZtMjod9FBs3oPUw6gWfrGKk=)
                          2: Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa (hash: Td8M1b5eYn7YJIEViFQBLyeZjyCEUobMfRK7pwtir7Y=)
                          3: UhXahydsOo_qiwzRtVGqPmi_pwk.roa (hash: DFHZo+ZnvqIq4efxazwJLIWQqpNgr1YvbSZZDY8hdCA=)
                          4: dMRJpZJ1JNYLWgq3FuqchxjnETE.roa (hash: fce7GbHsuDUNjDLPVqwrMpy3SolSS3TeDUI3vt7NKIY=)
                          5: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (hash: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA=)
                          6: oomUoRc8kAeXbJ8Vact092RPz5A.roa (hash: +kRKbGJLzWAadibg+zB0y/8pWSdZTuvX7OD3gBOEtzw=)
                          7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: fKxQprqAOlK8Hr7jmfLZe5kG/bHLiNezXxbIov3yAb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:3f:05:d3:0d:6a:7d:ac:76:46:d3:37:9b:b1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
        Validity
            Not Before: May 16 14:01:07 2026 GMT
            Not After : May 17 14:01:07 2026 GMT
        Subject: CN=20b08cfceb750f9a68f30c1bfdbea1466505b599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:21:8b:1a:4d:06:5e:ba:2b:55:b4:19:32:
                    9d:eb:52:df:1c:ba:b8:5e:25:41:94:5b:96:d1:ed:
                    20:b2:cf:65:2c:f4:7c:5e:da:88:7e:ce:32:ce:23:
                    6a:73:85:60:19:a8:5c:c5:04:6a:7d:fe:23:73:a4:
                    4e:79:a7:1a:ad:cc:72:d0:bc:72:eb:78:07:58:e0:
                    8f:a3:c5:da:87:79:af:5d:d6:ba:24:80:80:8e:f8:
                    97:67:b4:fd:f1:76:30:9f:f3:8d:60:dc:11:17:46:
                    f5:7d:b3:3a:6a:ad:8b:f3:f1:fb:bc:06:16:61:c6:
                    cf:c4:cf:9f:5f:05:c9:0c:9e:d1:d4:cd:15:8a:4d:
                    40:0d:29:00:7f:86:15:60:97:b5:fe:0b:d5:a0:cd:
                    94:a7:88:63:e5:84:bb:6f:d8:19:d7:4e:82:26:2c:
                    56:89:0b:cc:6d:7e:24:2f:a6:8b:62:51:64:86:bd:
                    e1:7e:78:0a:58:7b:4e:0b:8e:f8:27:45:98:14:59:
                    c5:fe:e7:45:1a:a6:c9:45:0a:d8:f1:b7:91:de:94:
                    67:0f:f1:9c:b5:95:81:ed:d3:8c:2e:70:44:57:76:
                    d3:3a:2b:0c:db:82:50:37:1a:21:ba:8f:f3:e5:8d:
                    bb:0c:2a:ee:74:5e:88:7d:cf:09:53:fc:ad:32:8c:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B0:8C:FC:EB:75:0F:9A:68:F3:0C:1B:FD:BE:A1:46:65:05:B5:99
            X509v3 Authority Key Identifier:
                keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5d:60:b9:15:01:16:84:c2:7b:e8:13:24:e3:54:4d:39:7f:
         4d:ae:b3:e6:9b:37:bd:25:ca:62:da:61:17:d5:17:51:29:f4:
         9d:1e:7e:1a:ed:53:81:15:12:d3:41:13:a2:12:76:76:14:1f:
         e3:0b:af:f2:e9:16:0b:35:40:e6:f1:1d:4c:29:a2:5b:a2:cb:
         38:0d:8d:48:85:d4:a7:82:95:a3:27:2b:c0:57:b2:d9:8e:81:
         f5:1d:55:91:a1:cc:eb:05:d5:80:2b:71:28:41:f6:58:67:ca:
         5a:b7:0c:b0:50:4d:14:9e:26:14:fb:ac:47:8c:e2:df:94:6c:
         0b:2c:97:ca:a1:ce:55:49:a4:36:dc:8f:7d:1a:9e:7d:2d:a3:
         0a:d0:a1:91:ed:70:2c:b5:4a:29:ab:d4:b6:2e:2a:29:4d:a2:
         9c:a7:32:40:92:0b:e2:44:fa:d8:ce:b5:41:86:09:59:5e:a3:
         7c:71:80:5f:f4:cb:1a:73:a4:96:f6:88:0a:08:1b:38:a2:89:
         46:35:e8:87:9f:33:d3:a6:14:2b:0e:c9:ab:d0:13:b7:7a:e9:
         7d:88:81:01:a1:ce:8b:66:06:f8:8c:e0:41:41:de:ee:fc:00:
         68:be:7d:37:dd:71:48:2f:c1:ba:dd:ff:59:91:d2:c0:2b:72:
         7a:31:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:59 2026 by rpki-client