Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File:                     8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier:          +9cn3XINeAkgTBp77dkUCqGTP1KvRxLh1GzrkGnraOA=
Subject key identifier:   0E:3B:97:73:5C:0A:1B:60:5B:89:F5:0C:F5:CB:E4:6B:F4:2F:5B:EE
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer:       /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial:       019F183109F7F092B8F226814970FD41B2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number:          1532
Signing time:             Tue 30 Jun 2026 11:01:34 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:34 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:34 +0000
Files and hashes:         1: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: rqxmXYng+E7NrNUDZ9ENCRGLsDQHU6I11dpkt64AbcM=)
                          2: OYgre_-TZIfJxOW5CqDrgpwgkMo.roa (hash: OBphoVWe1wpCXSnuX5Vie+bHC5Q80K+aLt8j/e5pkXQ=)
                          3: PQaM9i-ZFvgM-odibb8AZoCwaLw.roa (hash: 6qm8ZSVZvMA/kQTFFqEROzq6H8nPq+g1vFjlYN9Vl3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:31:09:f7:f0:92:b8:f2:26:81:49:70:fd:41:b2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
        Validity
            Not Before: Jun 30 11:01:34 2026 GMT
            Not After : Jul  1 11:01:34 2026 GMT
        Subject: CN=0e3b97735c0a1b605b89f50cf5cbe46bf42f5bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:bd:50:b6:91:d5:5c:df:c8:0c:1f:7d:b2:
                    ad:4a:a0:b6:95:5e:df:70:d5:1b:b8:1a:a4:ad:2c:
                    9e:24:fb:99:6c:d4:3b:5e:69:51:a1:10:96:25:2c:
                    41:a5:2e:19:4e:b7:5e:8f:2e:fd:b0:a0:ed:bc:31:
                    70:44:bf:f3:a0:c0:03:df:f8:14:25:80:00:63:2b:
                    cc:68:63:d2:ff:2c:0f:30:7c:20:97:f5:46:41:35:
                    a0:68:e3:c9:19:43:86:8e:9e:19:3e:1c:21:cf:2e:
                    c1:a5:6f:9c:8b:bd:a1:ec:77:4c:11:93:bf:93:7a:
                    43:5c:56:a2:f3:be:46:e0:d2:c9:7e:5a:8f:42:ba:
                    f9:89:85:d3:12:89:81:e3:3d:35:53:87:7b:31:2b:
                    fc:99:a9:a7:52:49:cc:15:80:0f:c9:c8:cb:e1:3a:
                    a0:aa:5d:69:b2:94:bf:55:be:05:60:ab:37:c7:cf:
                    0c:5d:c0:31:92:bf:c4:12:a7:dd:fe:45:43:19:ff:
                    47:e8:6c:29:55:4a:fe:fd:16:fe:02:65:24:0d:6f:
                    dd:40:1a:a0:1e:af:d6:da:f8:46:19:df:f5:31:a4:
                    7e:76:e2:bd:30:f0:85:fd:82:6d:55:cf:a7:4f:95:
                    75:f2:51:1a:8d:49:a0:20:de:d5:33:f0:c1:20:8c:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:97:73:5C:0A:1B:60:5B:89:F5:0C:F5:CB:E4:6B:F4:2F:5B:EE
            X509v3 Authority Key Identifier:
                keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:65:21:79:24:ec:1d:83:3d:8f:04:44:da:1b:ec:ba:c1:
         f9:70:dd:15:9a:3e:32:e0:3f:33:42:bc:2c:29:5a:f0:ab:0f:
         6f:f3:3c:87:01:03:88:a7:23:bc:a7:26:d6:e8:63:d7:4e:82:
         37:34:97:99:bd:b2:94:a8:8d:55:fe:ab:41:a6:40:7c:5d:73:
         4a:45:a1:3c:cf:3c:bf:38:5f:94:ae:b1:71:4c:2d:91:83:1a:
         df:a5:3b:8b:f7:a8:08:02:f3:d6:0c:67:93:8d:92:62:c0:92:
         05:6a:d7:77:87:22:7d:32:bc:6c:e3:b7:fd:bb:de:1c:9d:5d:
         36:21:11:3a:e0:d0:8b:20:46:4d:2b:c1:d0:24:fe:54:ed:b6:
         8a:6b:1d:b7:2a:59:ce:47:cf:0e:9d:4f:d4:12:4f:52:43:d2:
         10:b9:b9:1e:5b:19:49:b2:fa:6a:31:85:63:8f:fd:7e:37:0b:
         59:67:02:13:e2:d8:86:67:a8:b6:bb:6c:65:d7:2a:4a:fe:ac:
         9f:56:40:32:bc:ed:31:d2:4d:f8:76:37:fe:2d:51:55:ce:de:
         cf:22:c2:6a:11:60:ea:68:0c:ee:ec:48:95:6a:b0:5b:e5:6a:
         bd:1d:78:3e:00:3f:d3:51:57:0e:0b:50:9d:a7:3f:b6:27:bb:
         27:f5:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:45 2026 by rpki-client