Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File:                     8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier:          WIF5+xqURZIEeiSdSkoVKXPeRa6rNXX6azld+rHmuFU=
Subject key identifier:   7F:8F:D8:06:DE:47:48:99:FA:12:6B:A6:8A:24:B9:62:7B:F5:44:3F
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer:       /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial:       019E303B21E1EF2731968B2E3DA5DE5866AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number:          127A
Signing time:             Sat 16 May 2026 10:00:42 +0000
Manifest this update:     Sat 16 May 2026 10:00:42 +0000
Manifest next update:     Sun 17 May 2026 10:00:42 +0000
Files and hashes:         1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: N03waIhpOT/JpmvNa8IjLSLWko4HSi54EhKdj5VmWqw=)
                          2: D8FKo30pQrTU9mJYfYQg9avocxA.roa (hash: eTwcKoj9qVJBPhmvJcocW9ihZIrUpzbDq33DB90KBWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:21:e1:ef:27:31:96:8b:2e:3d:a5:de:58:66:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
        Validity
            Not Before: May 16 10:00:42 2026 GMT
            Not After : May 17 10:00:42 2026 GMT
        Subject: CN=7f8fd806de474899fa126ba68a24b9627bf5443f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:12:12:6b:bf:b2:9e:a1:63:40:c3:80:78:
                    a9:46:bd:8f:0b:21:9c:b7:b0:01:9d:ed:35:0b:fa:
                    2c:10:c4:19:23:5d:91:c7:61:55:1a:d0:c1:01:82:
                    28:58:46:f9:f3:cd:3e:c5:b1:d0:38:d1:4b:d1:f0:
                    2a:22:ad:c4:8f:f5:9f:42:bc:93:96:f8:7c:8a:f7:
                    32:67:47:88:0d:80:4d:e1:5a:9d:c6:a6:f4:58:58:
                    e4:f4:8d:e2:ba:f3:eb:08:bb:fd:32:db:0d:ed:29:
                    d9:7b:65:a1:0e:7b:c0:91:d8:83:eb:ff:ee:6c:d5:
                    07:fe:b2:54:cc:45:e5:d3:21:85:53:52:e1:e0:dc:
                    32:a4:f2:7f:13:89:68:de:ae:0c:25:e2:68:a4:25:
                    c9:53:3d:17:fe:d1:8c:11:cf:d9:0c:65:4e:05:bf:
                    ea:9b:81:63:3c:36:2c:2b:c7:23:e6:85:49:c8:a5:
                    53:6a:3f:57:5a:f4:81:9f:c9:70:67:08:6c:ca:19:
                    8d:18:d7:c8:6b:6a:43:d8:2e:b2:a4:c1:65:7a:fd:
                    2a:80:d0:b9:99:d2:25:0c:6c:50:77:0c:34:02:76:
                    c3:3d:70:e8:68:f0:14:67:47:fc:54:1d:5f:5e:27:
                    e3:38:2d:40:11:94:f9:6b:df:47:d1:24:ae:7b:a0:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8F:D8:06:DE:47:48:99:FA:12:6B:A6:8A:24:B9:62:7B:F5:44:3F
            X509v3 Authority Key Identifier:
                keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:29:11:6d:cb:c1:c7:25:e8:f2:f9:00:06:00:92:bc:09:
         b4:fb:f7:79:57:1b:71:43:18:55:18:78:c1:64:5d:eb:74:a9:
         d6:0d:76:6b:46:c4:38:56:8d:e5:bb:67:f2:63:34:1c:89:be:
         fd:8e:7b:cd:90:a3:4b:11:86:57:3c:79:df:a0:8e:4e:c0:3e:
         93:ea:40:50:07:df:38:1b:4b:39:08:19:75:0f:80:03:59:cd:
         1f:13:e8:e0:a7:07:4e:77:45:a9:42:2e:af:62:30:ac:cc:c5:
         f5:b0:94:84:36:7a:32:a7:83:2b:7a:64:42:25:c7:9a:92:12:
         b2:04:31:30:35:be:01:54:da:be:e1:83:97:d0:df:35:85:5e:
         fd:01:69:5d:cc:ca:9f:74:ee:9c:3d:e6:39:42:6a:49:9b:5f:
         0f:d5:16:53:55:3e:f7:51:c1:58:9f:e5:6b:5b:84:a7:71:4c:
         41:40:29:8a:77:b7:e0:15:d3:55:f5:c3:94:73:33:35:4f:fa:
         c4:e0:97:cd:c6:f8:11:8a:3d:d0:b8:7c:a0:0f:90:dd:71:40:
         70:61:91:1f:fc:8c:49:31:be:01:25:e8:9e:93:9a:55:7a:ee:
         71:f6:5e:1e:e1:70:6c:54:80:2e:39:4b:d8:8d:f7:da:73:30:
         bb:11:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:06 2026 by rpki-client